| Blockchain can realize peer-to-peer value transfer between nodes without relying on thirdparty trusted organizations to achieve consensus,and has great potential and wide application prospects.Fabric as a representative technology platform of the Alliance Chain,in which the security issues include the following two aspects:First,the official release of Fabric system only supports international cryptographic algorithms,and nowadays,international cryptographic algorithms have high security risks,and our government has put forward the national cryptographic algorithm specification requirements for blockchain construction.Secondly,the identity of endorsing nodes in the transaction process of Fabric is public,and the endorsing nodes will process some sensitive transaction data,so it is easy for attackers to make the endorsing nodes the priority target of attack.To address these problems,the research in this paper mainly includes the following two aspects:1.This article designs and implements a national cryptographic algorithm extension scheme for Fabric.This scheme starts from the underlying cryptographic algorithm of Fabric,based on the original Fabric framework,extends the national cryptographic algorithm in the cryptographic algorithm module of Fabric,and finally realizes the security and cryptographic services based on the national cryptographic algorithm in Fabric.The experimental test results show that the national cryptographic algorithm has more advantages in performance compared with the international common cryptographic algorithm.The foderatod chain network of Fabric system after extending the national cryptographic algorithm can start normally.The interface related to the national cryptographic algorithm in the Fabric after extending the national cryptographic algorithm is valid and available.In the case of testing with 50 nodes in Fabric,the Fabric system after the expansion of the national cryptographic algorithm has increased its transmission rate by 2.1%,reduced average latency by 31.3%,and increased transaction throughput by 28.1%compared to the original system.It can be seen that the response and processing time of the Fabric system after extending the national cryptographic algorithm is significantly reduced,which improves the ability of the Fabric system to process transactions concurrently.2.This article designs and implements an anonymous endorsement scheme based on the national cryptographic algorithm in Fabric.Starting from the privacy protection needs,this scheme designs a threshold ring signature algorithm based on the national cryptographic algorithm to meet the requirements of the Chinese government’s national cryptographic algorithm specification for blockchain construction.This scheme is based on national cryptographic algorithm using ring signature derived from digital signature that provides anonymity function.This scheme requires at least t endorsement nodes out of n to participate in endorsement without explicitly mentioning their identities.The results of analysis of algorithms show that the algorithm meets the requirements of correctness,anonymity and unforgeability.In terms of efficiency,compared with other ring signature algorithms,the signature generated by this scheme algorithm does not include a threshold function.Therefore,the signature generated by this scheme algorithm has a shorter length and a fixed length.Finally,in the experiment,the efficiency of this scheme and its effectiveness in the Fabric system after the national cryptographic algorithm extension are proved.By testing the impact on the transaction efficiency of the Fabric system,it is proved that after the application of this scheme in the process of transaction in the Fabric system after the national cryptographic algorithm extension,not only can hide the identity of the endorsement nodes in the Fabric,but also Fabric still has high execution efficiency. |