利用安全协处理器加速实现IKEv2协议  

Accelerating implementation of IKEv2 by using security coprocessor

作　　者：张玲玲[1] 潘雪增[1] 崔玉增[1] 

机构地区：[1]浙江大学计算机科学与技术学院,浙江杭州310027

出　　处：《计算机应用》2005年第12期2772-2773,2786,共3页journal of Computer Applications

摘　　要：通过对比因特网密钥交换协议IKEv2与IKE的不同之处,分析研究了IKEv2在实现复杂度,降低延迟方面的优越性。简要介绍了IKEv2的消息交换,各种密钥的生成过程,并提出了一种基于安全协处理器硬件加速功能的IKEv2的设计和实现方案,它在计算各类密钥,会话消息的加解密,完整性校验等方面具有较快的处理速度。Comparing the difference between IKEv2 and IKE, the advantages of IKEv2 on the complex of the implementation and the low delay were analyzed. The message exchange and the generation of various keys of IKEv2 was introduced, an implementation approach of IKEv2 using the security coprocessor were proposed. This implementation can accelerate the process of key generation, message encryption and integrity verify check.

关 键 词：IKE IKEV2 安全协处理器 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]