消息完整性服务在SSL记录层的实现分析  

Analysis and Realization of Message Integrity Services in SSL Recording Layer

作　　者：张鑫燕[1,2,3] 叶猛 

机构地区：[1]光纤通信技术与网络国家重点实验室,湖北武汉430074 [2]武汉邮电科学研究院,湖北武汉430074 [3]武汉虹旭信息技术有限责任公司安全产品部,湖北武汉430074

出　　处：《电视技术》2012年第9期74-77,共4页Video Engineering

基　　金：国家242信息安全计划资助项目(2009A98)

摘　　要：SSL记录层协议建立在可靠连接TCP之上,为上层提供机密性和消息完整性服务。介绍了SSL记录层协议的工作原理,分析描述消息完整性服务的整体机制,并利用散列算法实现。利用在MD5的基础上构造的MAC算法,防止消息被篡改,利用MAC中的序列号防止消息遭受到重放攻击和再排序攻击。全面阐述了消息完整性服务在SSL记录层上的实现。The SSI, record layer is designed to work on some reliable transport protocol such as TCP, it provides functionality of confidentiality and message integrity to higher layers. In this article, the working principle of record layer is introduced, the overall mechanism of message integrity is analyzed. Finally, it makes use of Hash algorithm to realize the message integrity. The MAC algorithm which is constructed based on MD5 is used for prevent of message tampering. The sequence number in the MAC prevents news from being suffered a replay attack and reordering attack. This article comprehensively elaborates realization of message integrity services based on SSL recording layer.

关 键 词：SSL记录层 消息完整性 散列算法 报文鉴别码 重放攻击 再排序攻击 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]