高性能密码服务器的并行数据处理  

Parallel data processing of high-performance cryptographic co-server

作　　者：容晓峰[1] 苏锐丹[1] 刘平[2] 周利华[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室 [2]国家信息安全工程技术研究中心,北京100093

出　　处：《系统工程与电子技术》2005年第6期1115-1119,共5页Systems Engineering and Electronics

基　　金：国家"十五"重点科技攻关项目基金资助课题(2002BA103A04)

摘　　要：随着大型电子商务和电子政务系统中客户数量的增多,主机端密码系统的性能成为提供安全服务的限制因素。提出了一种基于可编程密码模块的密码服务器体系结构。通过在模块中使用密码算法代理抽象密码芯片运算资源,管理机可以调度系统计算资源支持多模块内多密码芯片间的并行密码运算。在IBMService345和SJW系列PCI密码卡上,设计实现了基于算法代理间并行运算的高性能密码服务器。测试结果显示:用20个SSX04模幂运算芯片间并行签名(1024 bitRSA)速率达到1100次/s;用10个对称密码算法芯片并行加密(ECB模式),系统吞吐率达到312.6Mbps。With more and more clients attached to a host, performance of cryptographic operations at the host has become a constraint that prevents the achievement of acceptable secure services at large e-commerce and e-governments. A cryptographic co-server architecture based on the programmable secure crypto modules is presented. By using crypto algorithm agents to abstract computation resource of crypto chips in modules, the crypto-manager can schedule system resources to support parallel data processing among crypto chips in crypto modules. Based on an IBM Ser-vices345 machine and series of SJW PCI crypto cards, the high-performance cryptographic co-server was designed and implemented by carrying cryptography computations in parallel among crypto algorithm agents. The test results indicate that: when computation in parallel among 20 SSX04 chips, the performance of generate 1024-bit RSA digital signature is 1100 operations per second; when computation in parallel among 10 symmetric chips, the throughput of encryption (ECB mode) was 312.6 Mbps.

关 键 词：密码芯片 密码模块 密码服务器 吞吐率 并行处理 

分 类 号：TP30[自动化与计算机技术—计算机系统结构]