密码服务器系统安全体系结构分析与研究  

Analysis and Research on Cryptographic Security Architecture

作　　者：容晓峰[1] 

机构地区：[1]西安工业大学计算机科学与工程学院

出　　处：《西安工业大学学报》2010年第4期378-382,386,共6页Journal of Xi’an Technological University

基　　金：国家“十五”科技攻关项目(2002BA103A04);陕西省教育厅自然科学专项(08JK310)

摘　　要：针对大型密码服务系统性能扩充和功能扩展的应用需求,从易用性、安全性、可扩展性方面分析了CDSA、CCA、Cryptoki和Cryptlib等密码安全体系结构及其安全API的特点.设计了密码集群系统的安全体系结构与安全API接口.对原型系统进行了实验和测试.使用20块SSX04芯片并行签名,可以实现1100次/s的系统总体签名（1024bits）速度.使用10块对称算法芯片并行加密（ECB模式）,可以实现312.6 Mbps的对称加密速度.表明该体系结构具有较好的扩展性.The definition and functions of typical crypto security architectures are illustrated systematically.The features of typical crypto architectures,such as CDSA,CCA,Cryptoki and Cryptlib,are analyzed in the respects of feasibility,security,scalability and performance.Based on the techniques of high performance cluster computing,the design of the security architecture and security API of cryptographic cluster are presented.This architecture can be used to construct the cryptographic server cluster integrated by multiple crypto-modules and multiple crypto-algorithms.The results show that ： when computation in parallel among 20 SSX04 chips,the performance of generate 1024 bit RSA digital signature is 1100 operations per second;when computation in parallel among 10 symmetric chips,the throughput of encryption（ECB mode） is 312.6Mbps.In this way,parallel crypto processing can be easily implemented within the cluster and high performance can be easily achieved.Furthermore,scalability can be well supported by this architecture.

关 键 词：密码服务系统 安全API 安全体系结构 密码芯片 

分 类 号：TN918.2[电子电信—通信与信息系统]