11
$\begingroup$

In the IETF RFC draft named "SM2 Digital Signature Algorithm" a signature algorithm is specified. The RFC does however not mention why this signature algorithm has been defined. Nor does it specify what the advantages of this scheme are over ECDSA. It seems that SM2 is the preferred EC signature format in China.

So the two related questions are:

  1. Why was SM2 defined?
  2. What are the (operational) differences compared to ECDSA?

Note that there seems to be a set of SM2 Elliptic Curve domain parameters defined as well.


According to [SM2 Algorithms Parameters] linked in the draft (and found on Wayback machine), here are the domain parameters:

y^2 = x^3 + ax + b

p =FFFFFFFE FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 00000000 FFFFFFFF FFFFFFFF
a =FFFFFFFE FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 00000000 FFFFFFFF FFFFFFFC
b = 28E9FA9E 9D9F5E34 4D5A9E4B CF6509A7 F39789F5 15AB8F92 DDBCBD41 4D940E93
n = FFFFFFFE FFFFFFFF FFFFFFFF FFFFFFFF 7203DF6B 21C6052B 53BBF409 39D54123
Gx = 32C4AE2C 1F198119 5F990446 6A39C994 8FE30BBF F2660BE1 715A4589 334C74C7
Gy = BC3736A2 F4F6779C 59BDCEE3 6B692153 D0A9877C C62A4740 02DF32E5 2139F0A0
$\endgroup$
  • $\begingroup$ The IETF draft is a translation from a Chinese standard document, it seems. It also defines a key exchange protocol and an encryption algorithm. (I have no idea why it was defined, though.) $\endgroup$ – Paŭlo Ebermann Aug 25 '13 at 12:32
  • 5
    $\begingroup$ Why? I guess because the chinese guys simply want to have their own standard (and I think being superior to existing schemes is not an issue ;) $\endgroup$ – DrLecter Jul 31 '14 at 17:30
  • $\begingroup$ Part 1 (out of 4) of the 2010 Chinese standard defining SM2 algorithms is published here, and some of it is understandable when automatically translated. $\;$ Could no find part 2 on SM2 signature. $\;$ Jing Xu & Dengguo Feng's Comments on the SM2 Key Exchange Protocol is a claimed attack on part 3. $\endgroup$ – fgrieu Aug 1 '14 at 3:51
  • $\begingroup$ Part 2 (out of 4) of the 2010 Chinese standard defining SM2 algorithms is published, in IETF $\endgroup$ – QIngluan Dec 7 '15 at 14:39

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.