基于硬件加密卡技术的RSA加密引擎的局部封装  

The local package of RSA encryption engine based on hardware-based encryption card technology

作　　者：徐敏[1] 

机构地区：[1]国网电力科学研究院,江苏南京210003

出　　处：《微型机与应用》2011年第20期3-5,共3页Microcomputer & Its Applications

摘　　要：目前主流的VPN是通过SSL协商进行认证的,其在调用Openssl的加密引擎过程中带来一个问题,即进行数据加密所使用的公钥不是自身的密钥,于是加密引擎不仅要有对私钥解密进行硬件实现,还要有对公钥加密实现原有算法调用的技术。本文介绍了目前主流的Openssl实现硬件RSA加密引擎仅对私钥解密数据进行调用,而对于公钥加密数据不调用的局部封装方法,有着重要的实用价值。VPN is currently the mainstream for certification through the SSL negotiation, the encryption engine in the calling pro- cess Openssl creates a problem. Namely, the public key used to encrypt the data itself is not the key, so not only has a private key encryption engine decrypt the hardware implementation, but also for public key encryption algorithm to achieve the original call technology. This article describes the current mainstream hardware Openssl RSA encryption engine to decrypt the local data encapsulation methods in which private key data calls only, and does not call for public-key encryption. It has important practical value.

关 键 词：VPN SSL协商 Openssl引擎 RSA加密 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]