Enlightenment from the revocation of Russian digital certificate by mainstream CA: upgrade the SSL certificate of state secret algorithm to help China's network security to be autonomous and controlla

With the participation of international and private hacker organizations , The war between Russia and Ukraine quickly spread into a global network information war . International mainstream CA The agency no longer provides digital certificate services for Russia , Even revoke the certificates of some national infrastructure websites related to Russia . This forced Russia to start building a state CA Institutions , Seek independent and controllable national network security solutions .

In fact, the Chinese government has been 10 Years ago, great importance was attached to network security , And then they have successively issued **《 Cryptology 》、《 Network security law 》、《 Data security law 》、《 Key information infrastructure protection regulations 》** And other important laws and regulations , These regulations emphasize the importance of realizing the autonomy and controllability of network security technology from different levels , It is clear that the protection of key information infrastructure is an important battlefield of cyberspace game in the world .

（ Network security related laws and regulations ）

National secret algorithm It is a series of data encryption algorithms independently developed by China in the core field of cryptography , There are mainly SM1,SM2,SM3,SM4, The key length and packet length are 128 position , It is a domestic cryptographic algorithm recognized by the state cryptographic Bureau . When the application environment is uncontrollable , Use self-control domestic encryption technology to encrypt important network information data , To improve the level of network information security and self-control in China , Of great strategic significance .

With the introduction of a number of measures by relevant national regulatory agencies to promote the application of the state secret algorithm , China's financial banks 、 E-government 、 education 、 The transportation 、 Enterprises and public institutions in key facilities such as people's livelihood security have a strong understanding of the state secret algorithm HTTPS The application demand is also increasing day by day .

Ruicheng information is a well-known digital certificate service provider in China , Actively implement the requirements of national regulatory authorities for the comprehensive application of domestic cryptographic algorithms , On 5 month 20 It's officially on the shelves CFCA、 Wotong and other brands National secret SSL certificate , And will continue to expand support for state secret algorithms SSL Certificate brand array , Including but not limited to Shanghai CA, Beijing CA,GDCA etc. , For our energy 、 signal communication 、 Finance 、 Organization units of transportation and other important infrastructure provide multi brand state secrets HTTPS Security solution .

at present , National secret SSL The certificate covers DV、OV、EV、 Single domain name 、 Multiple domains 、 wildcard SSL Certificate type , Fully meet the needs of different application scenarios . Considering that the existing mainstream client browsers adopt international protocols , Its underlying environment is incompatible , The state secret algorithm is limited in some application scenarios , Ruicheng information combines specific business and customer functional requirements , Provide national secrets SM2 And ruianxin RSA Dual Certificate adaptive security solution , It is convenient for the client browser to automatically switch the corresponding algorithm SSL certificate , Give consideration to state secrets compliance , Global requirements , Ensure that the business system can be accessed normally in any way , At the same time, it also solves the state secret algorithm SSL Technical barriers to certificate application .

（ National secret SM2/RSA Dual Certificate solution ）
for example ： When the user passes Chrome、FireFox、Edge、Safari When mainstream browsers visit the site , System self adaptation display RSA Algorithm SSL certificate . When using the state secret algorithm 360 Secure browser 、 Chian trust browser 、 Yingdaxin speeddragon security browser 、 Honglianhua security browser supports the state secret algorithm SSL Certificate site , Give priority to establishing state secret connections .

It is worth noting that , at present ,CFCA National secret SSL The certificate application needs to use its adaptive data security gateway on the server side , Realization RSA+SM2 Dual Certificate deployment , Make sure that the client browser and Web Authentication and secure communication between servers . and Wotong state secret certificate can realize state secret algorithm by using state secret encryption and decryption middleware HTTPS application .

Facing the current complex international environment , Ruicheng information calls on enterprises and institutions involved in people's livelihood Protection to attach great importance to the security of personal data and business data , Realize the state secrets as soon as possible HTTPS turn , Prevent network eavesdropping during information transmission 、 forge 、 Tampering, etc , To promote the security and credibility of cyberspace for our country , Independent and controllable work makes a modest contribution ！

There is a need for a state secret algorithm HTTPS Solution , searchable “ Ruicheng information ” Learn more about .