Asymmetric SM9 algorithm, supporting master public key encryption and user private key decryption. Encryption and decryption require the use of SM9 encryption type keys, and signature type keys cannot be used.
The online national security SM9 encryption and decryption tool supports encrypting data using the master public key and user identifier, and decrypting data using the user private key and user identifier. Input and output support formats such as string, hex, base64, etc.
- Introduction to Guomi SM9 Algorithm: Guomi SM9 is an identifier based cryptographic algorithm standard released by the China National Cryptography Administration, belonging to the Identification based Cryptography System (IBC). Its core feature is to use the user's identity identifier (such as email address, phone number, etc.) as the public key, thus no longer relying on traditional digital certificate systems. In terms of international standardization, the SM9 algorithm has been fully integrated into the ISO/IEC international standards, including digital signatures, identity encryption, and key agreement protocols, becoming the first asymmetric cryptographic algorithm in China to achieve this achievement. Compared to traditional PKI systems, the main advantages of SM9 are that it does not require certificates, is easy to use and manage, and has a low overall cost. It is particularly suitable for secure communication between massive devices, and has a broad application prospect in the Internet of Things, Internet of Vehicles, Industrial Internet and other fields.
- The key system of national SM9 is divided into two levels: main key pairs and user key pairs. The master key pair is managed by the Key Generation Center (KGC) and serves as the root key for the entire system; The user key pairs are derived by KGC based on the master key and user identifier, and distributed to each user for use.
-
Master key layer:
- Signature master key pair: used to generate user signature keys, digital signatures, and signature verification.
- Encryption master key pair: used to generate user encryption keys, encrypt and decrypt data, and negotiate keys.
-
User key layer:
- User Signature Key Pair: Users perform digital signature and verification.
- User encryption key pair: Users perform encryption, decryption, and key negotiation.
- Mode : Select SM9 encryption or SM9 decryption. When encrypting, it is necessary to use the main encryption public key and user ID. The input master key is in DER format and encapsulated as PEM text. When decrypting, it is necessary to use the user's encrypted private key and user identifier. The input user private key is in DER PKCS#8 encrypted storage format, encapsulated as PEM text.
- User Identity : The unique identifier of the user in the SM9 key system.
- User Key Password : The password for protecting user private keys stored in DER PKCS#8 encryption. The input user private key password will automatically remove the leading and trailing blank characters.
- Input Format : The format of the input content can be selected as string, hex , base64. For SM9 decryption, the input format does not support string.
- Output Format : Encrypt the result or decrypt the format of the original content output. For SM9 encryption, the output format does not support string.
- Charset : The selected character set will be used for string byte conversion of input/output formats or output results. The character set only applies to input content fields. The user's private key password always uses the UTF-8 character set.
- This tool has a certain frequency limit, please use this tool reasonably. Anonymous : 6/IP*Hour, Normal user : 6/Hour, VIP : 360/Hour, Senior VIP : 360/Hour.
