Provably-Secure (Chinese Government)‎ SM2 and Simplified SM2 Key Exchange Protocols

Abstract EN

We revisit the SM2 protocol, which is widely used in Chinesecommercial applications and by Chinese government agencies.

Althoughit is by now standard practice for protocol designers to provide securityproofs in widely accepted security models in order to assure protocol implementersof their security properties, the SM2 protocol does not havea proof of security.

In this paper, we prove the security of the SM2 protocolin the widely accepted indistinguishability-based Bellare-Rogawaymodel under the elliptic curve discrete logarithm problem (ECDLP)assumption.

We also present a simplified and more efficient version ofthe SM2 protocol with an accompanying security proof.