一种生物证书密钥生成算法

生物特征数字证书涉及的RSA公私钥对可以由近似随机信号的生物特征密钥派生，但是生物特征密钥长度较短，而基于大素数分解困难的RSA算法要求密钥较长.为了解决该问题，提出一种生物证书密钥生成算法，结合对称加密算法和大素数生成算法生成生物大素数，并采用哈希算法对生物大素数进行可用性设计，在解决密钥长度问题的同时保证生物大素数安全可用，以便用于生成生物特征数字证书中的RSA公私钥对.基于VC6.0和MIRACL大数库的实验结果表明：基于生物特征密钥生成的生物大素数满足确定性和可用性，能够应用于生物数字证书之中.本文所提算法行之有效，且具有实际应用价值.
The RSA public and private keys of biometric certificate can be generated from biometric key which can be seen as random numbers.However, the size of biometric key is shorter than the RSA public and private keys. To overcome this limitation, a biometric certificate key generation algorithm is proposed. In this method, the biometric primes is generated by the combination of symmetric key encryption algorithm and prime generation algorithm, in addition, the hashing algorithm is used to ensure the feasibility of the biometric primes. The generated biometric primes are safe and usable so that they can be applied to generate the RSA public and private keys of biometric certificate. Experimental results using VC6.0 and MIRACL show that the proposed method not only is feasible, but also has practical application value.