GB/T 46798-2025Cybersecurity technology - Technical requirements for cryptography and related security of identity-based cryptographic authentication systems (English PDF)

网络安全技术　标识密码认证系统密码及其相关安全技术要求

Open the GB/T 46798-2025 preview as PDF

Preview — first pages of GB/T 46798-2025 (full document: 35 pages)

This is a limited preview

Buy now to download the full PDF (35 pages)

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 2, 2025

Implementation date

July 1, 2026

Scope

GB/T 46798-2025 is the English-translated version of 网络安全技术　标识密码认证系统密码及其相关安全技术要求.

GB/T 46798-2025 is the Chinese national standard covering identity-based cryptography - where a public key is derived from the identity itself, so no certificate is needed, at the cost of a key generation centre that can compute every private key and therefore must be protected accordingly. At 26,000 words, first edition, with the public key framework GB/T 46795-2025. Issued on 2 December 2025, it has been in force since 1 July 2026.

Document preview — GB/T 46798-2025

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

1 Scope
2 Normative references
3 Terms and Definitions
4 Block Cipher Algorithm
5 Identification Password Authentication System
5.1 System Composition
5.2 Identification Management
5.3 Identification Format
6.1 Cryptographic Algorithms
6.2 Cryptographic Devices
6.3 Cryptographic Device Service Interface
7.1 System Requirements
7.2 Key Generation Service Design
7.3 Safety Requirements
7.4 Data Backup Requirements
8.1 System Requirements
8.2 Registration Service Design
8.3 User Key Carrier
8.4 Safety Requirements
8.5 Data backup requirements
9 Service publishing system requirements
9.1 System Requirements
9.2 Service Release Design
9.3 Safety Requirements
9.4 Data Backup Requirements
10 Safety Requirements
10.1 Overview
10.2 System Security
10.3 Key Security
10.5 Security Audit
11 Key Management Requirements
11.1 Key Security
11.2 User Key Request Authentication
11.3 Key Generation
11.4 Key Transmission
11.5 Key Storage
11.6 Key Update
11.7 Key Deregistration
11.8 Key Backup
11.9 Key Recovery
11.10 Master Key Management
11.11 System Identification Management
12 Key Management Security Operation Procedure Requirements
12.1 System Initialization Process
12.2 User Key Carrier Initialization
12.3 User Key Generation Process
12.4 Status Identification Release Process
12.5 Update User Key Status Process
12.6 Judicial Evidence Collection Key Recovery Process
12.7 User Information Status Query and Response Process
30 References

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part

1.Structure and Drafting Rules of Standardization Documents". Drafting. Please note that some content in this document may involve patents. The issuing organization of this document assumes no responsibility for identifying patents. This document was proposed and is under the jurisdiction of the National Cybersecurity Standardization Technical Committee (SAC/TC260). This document was drafted by: Beijing Guomai Xin'an Technology Co., Ltd., Shenzhen Aolian Information Security Technology Co., Ltd., and Gels Software Co., Ltd. Limited Company, Xingtang Communication Technology Co., Ltd., China Electronics Technology Standardization Institute, Beijing Haitai Fangyuan Technology Co., Ltd., Guangdong Province E-commerce Certification Co., Ltd., Sanwei Xin'an Technology Co., Ltd., Zhixun Password (Shanghai) Testing Technology Co., Ltd., and Jindun Testing Technology Co., Ltd. Technology Co., Ltd., China Electronics Technology Network Security Technology Co., Ltd., Xiamen Civil Aviation Kaiya Co., Ltd., Changchun Jida Zhengyuan Information Technology Co., Ltd. Joint-stock company, Jinan Sanze Information Security Assessment Co., Ltd., Beijing Shidai Yixin Technology Co., Ltd., Huawei Technologies Co., Ltd. Zhejiang Guoli Xin'an Technology Co., Ltd., China Southern Power Grid Digital Grid Group (Guangdong) Co., Ltd., State Grid Xinjiang Electric Power Co., Ltd., Xinjiang Hua Dianweihu Liang New Energy Co., Ltd., Beijing Zhongke Zhuoxin Software Testing Technology Center, Shanghai Shiyan Information Technology Co., Ltd., Beijing Jianhengxin An Technology Co., Ltd., Beijing Digital Certification Co., Ltd., China Academy of Cyberspace Studies, Qizhidao Technology Co., Ltd., Zhengzhou Xindajie An Information Technology Co., Ltd., Data Security Era Technology Co., Ltd., Cybersecurity Industry Development Center of the Ministry of Industry and Information Technology, CICC Data (Wuhan) Supercomputing Technology Co., Ltd., Gongxintong (Beijing) Information Technology Co., Ltd., State Grid Blockchain Technology (Beijing) Co., Ltd. Zhongke Information Security Common Technology National Engineering Research Center Co., Ltd., National University of Defense Technology of the Chinese People's Liberation Army, Qi An Xin Wang Shen Information Technology Co., Ltd. Technology (Beijing) Co., Ltd., the Sixth Research Institute of China Electronics Information Industry Group Co., Ltd., and Shaanxi Provincial Information Engineering Research Institute. The main drafters of this document are. Yuan Feng, Feng Weiduan, Cai Xianyong, Zheng Qiang, Sun Huanglong, Dan Bo, Wang Lixin, Li Xiaoqian, Zheng Lijuan, and Huang Jingjing. Luo Ying, Zhang Liyuan, Yao Le, Chen Shule, Li Xueyan, Wang Xianfang, Zeng Guang, Kuang Yun, Yin Wenji, Wang Ying, Ding Zhaowei, Zhang Rongze, Liu Weifeng, Chen Jie Xing Wei, Huang Fufei, Ai Wei, Zhang Yuzhu, Lin Peigui, Yang Yandong, Liu Haiming, Yang Wei, Zhang Lei, Wang Bing, Qiao Mengyu, Wang Zhen, Liu Zhong, Liang Songtao Lin Hao, Zhou Weilin, Wang Jin, Wang Bin, Shi Zhuyu, Hu Jianxun, Xing Qianqian, An Jincheng, Wang Long, Zhao Xiaorong. Network security technology identification password authentication system Cryptography and related security technical requirements

1 Scope

This document specifies the security and technical requirements for services such as key generation, management, and public parameter querying in the identification cryptographic authentication system. This document applies to the design, development, use, and testing of identification and password authentication systems.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included. For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies. This document.

GB/T 22239-2019 Information Security Technology - Basic Requirements for Network Security Level Protection

GB/T 25069 Information Security Technical Terminology

GB/T 32905 Information Security Technology - SM

3 Terms and Definitions

The terms and definitions defined in GB/T 38635-2020 (all parts) and GB/T 25069, as well as the following terms and definitions, apply to this document.

3.1 Authentication The process of verifying the identity or attributes claimed by an entity.

3.2 Identity Information that can uniquely identify an entity and is undeniable. Note

1.Data in this document is identified as conforming to the Identifier definition in GM/T 0090-2020. Note

2.In GM/T 0090-2020, the identityData of the Identifier is the entity's identifiable name, email address, ID card number, telephone number, and device code. Number, street address, etc. [Source: GB/T 38635.1-2020, 3.1, with modifications]

4 Block Cipher Algorithm

GB/T 32918 (all parts) Information Security Technology SM

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 35 pages — is available in the English PDF.

Referenced standards

Normative references

Editions of GB/T 46798

Edition	Title	Revision	Status
GB/T 46798-2025	Cybersecurity technology - Technical requirements for cryptography and related security of identity-based cryptographic authentication system	current edition	Current

This page sells the current edition, GB/T 46798-2025. Earlier editions are listed for reference only.

How to Buy GB/T 46798-2025

1Add to cart. Click the "Buy GB/T 46798-2025" button on this page. You can add more standards before checkout.
2Checkout. Enter your email and billing details. Payment is processed securely by Stripe (cards, Apple Pay, Google Pay supported).
3Instant delivery (0–9 sec). Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4Invoice included. A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.