GB/T 36322-2018 in English

ECC Key Structure Example

typedef struct ECCrefPublicKey_st { ULONG bits; // Key bit length BYTE x[ECCref_MAX_LEN]; // Public key x coordinate BYTE y[ECCref_MAX_LEN]; // Public key y coordinate } ECCrefPublicKey;

The standard clearly defines the algorithm identifiers that cryptographic devices need to support:

• SM2: National Secret Elliptic Curve Algorithm (identification value 0x00000101)
SSL key negotiation SDF_GenerateKeywithECDHE_SSL → SDF_Encrypt SM2 key exchange + SM4 encryption Digital signature SDF_HashInit → SDF_HashUpdate → SDF_InternalSign_ECC SM3 hash + SM2 signature

---

Implementation suggestions

1. Key lifecycle management: The device key needs to be implanted during initialization, and the user key is dynamically generated through the management tool
2. Error handling mechanism: The 28 error codes defined in Appendix A need to be fully implemented (such as SDR_SKOPERR indicates private key operation failure)
3. Performance optimization: For high-frequency operations such as SDF_Encrypt, it is recommended to use a session multiplexing mechanism

---

Standard evolution analysis

Compared with the previous version of the standard, the 2018 version has the following major enhancements:

• Added support for the SM9 algorithm (needs to be used with GB/T 35276)
• Improved the ECC digital envelope conversion process
• Refined the IPSec/SSL key derivation parameter requirements