SM9 Key Generation Online

The online national secret SM9 algorithm key generation tool supports the online generation of master key pairs (public key, private key) for national secret SM9, Support generating user private keys based on the input user ID (the user public key is the input user ID).

1. Introduction to Guomi SM9 Algorithm: Guomi SM9 is an identifier based cryptographic algorithm standard released by the China National Cryptography Administration, belonging to the Identification based Cryptography System (IBC). Its core feature is to use the user's identity identifier (such as email address, phone number, etc.) as the public key, thus no longer relying on traditional digital certificate systems. In terms of international standardization, the SM9 algorithm has been fully integrated into the ISO/IEC international standards, including digital signatures, identity encryption, and key agreement protocols, becoming the first asymmetric cryptographic algorithm in China to achieve this achievement. Compared to traditional PKI systems, the main advantages of SM9 are that it does not require certificates, is easy to use and manage, and has a low overall cost. It is particularly suitable for secure communication between massive devices, and has a broad application prospect in the Internet of Things, Internet of Vehicles, Industrial Internet and other fields.
2. The key system of national SM9 is divided into two levels: main key pairs and user key pairs. The master key pair is managed by the Key Generation Center (KGC) and serves as the root key for the entire system; The user key pairs are derived by KGC based on the master key and user identifier, and distributed to each user for use.
3. Master key layer:
   1. Signature master key pair: used to generate user signature keys, digital signatures, and signature verification.
   2. Encryption master key pair: used to generate user encryption keys, encrypt and decrypt data, and negotiate keys.
4. User key layer:
   1. User Signature Key Pair: Users perform digital signature and verification.
   2. User encryption key pair: Users perform encryption, decryption, and key negotiation.
5. Generate Type : Choose between generating a master key or a user key.
6. Algorithm Type : Choose between generating encryption keys or signing keys.
7. Master Key Password : DER PKCS#8 the protected password for the master private key. Please keep this password safe.
8. User Identity : When generating a user private key, the user ID needs to be entered. User identification is usually information that can uniquely identify the user's identity, such as email, phone number, ID card, etc.
9. User Key Password : DER PKCS#8 the protected password for the user's private key. Please keep this password safe.
10. Master Private Key : When generating a user private key, it is necessary to input the master private key. The format of the master private key is DER PKCS#8 encrypted storage format, input in the form of PEM text data.
11. Generate Result:
    1. Master Public Key : The generated master public key is in DER format and encapsulated as PEM text.
    2. Master Private Key : The generated master private key is in DER PKCS#8 encrypted format and encapsulated as PEM text.
    3. User Public Key : The user ID entered.
    4. User Private Key : The generated user private key is in DER PKCS#8 encrypted format and encapsulated as PEM text.
12. This tool has a certain frequency limit, please use this tool reasonably. Anonymous : 6/IP*Hour, Normal user : 6/Hour, VIP : 360/Hour, Senior VIP : 360/Hour.