一种软件密钥托管设计方案  

DESIGN OF SOFTWARE KEY ESCROW SYSTEM

作　　者：孙晓蓉[1] 王育民[1] 

机构地区：[1]西安电子科技大学ISN国家重点实验室,西安710071

出　　处：《电子科学学刊》1999年第4期511-515,共5页

基　　金：国家密码发展基金

摘　　要：近年来密钥托管算法受到了广泛的关注。Clipper、Capstone等硬件芯片均采用保密的加密算法,而遭到公众的不满和怀疑。1993年8月,NIST宣布了一项工业合作计划,考虑用开发软件技术实现密钥托管。本文设计了一种用软件实现的密钥托管方案,采用单钥密码算法加密消息,并利用公钥密码算法、单向杂凑函数算法等实现用户识别和密钥检验。Key escrow systems have gained much attention in recent years. A key escrow system can provide cryptographic protection to sensitive data ,while at the same time, allows for the decryption of encrypted message under lawful authorization. Since the public were not satisfied with the classified encryption method used in key escrow system in hardware, such as Clipper and Capstone, NIST of US announced a cooperative program with industry to explore the possibilities of performing key escrow cryptography using software-only techniques. This paper proposes a scheme for supporting the implementation of key escrow systems in software, which employs symmetric encryption algorithm for securing communication, and one-way hash function and asymmetric cryptography for identifying the users and verifying session key.

关 键 词：软件密钥托管 单钥密码算法 公钥密码算法 

分 类 号：TN918[电子电信—通信与信息系统] TP311.5[电子电信—信息与通信工程]