SM2签名同样也是需要先摘要原文数据,即先使用SM3密码杂凑算法计算出32byte摘要。SM3需要摘要签名方ID(默认1234567812345678)、曲线参数a,b,Gx,Gy、共钥坐标(x,y)计算出Z值,然后再杂凑原文得出摘要数据。这个地方要注意曲线参数和坐标点都是32byte,在转换为BigInteger大数计算转成字节流时要去掉空补位,否则可能会出现摘要计算不正确的问题。SM2签名实现如下:
SM2签名
public static BigInteger[] Sm2Sign( byte [] md, AsymmetricCipherKeyPair keypair)
{
SM3Digest sm3 = new SM3Digest();
![]()
ECPublicKeyParameters ecpub = (ECPublicKeyParameters)keypair.Public;
![]()
byte[] z = SM2CryptoServiceProvider.Sm2GetZ(Encoding.Default.GetBytes(SM2CryptoServiceProvider.userId), ecpub.Q);
sm3.BlockUpdate(z, 0, z.Length);
![]()
byte[] p = md;
sm3.BlockUpdate(p, 0, p.Length);
![]()
byte[] hashData = new byte[32];
sm3.DoFinal(hashData, 0);
![]()
// e
BigInteger e = new BigInteger(1, hashData);
// k
BigInteger k = null;
ECPoint kp = null;
BigInteger r = null;
BigInteger s = null;
BigInteger userD = null;
![]()
do
{
do
{
![]()
ECPrivateKeyParameters ecpriv = (ECPrivateKeyParameters)keypair.Private;
k = ecpriv.D;
kp = ecpub.Q;
![]()
userD