使用PKCS#11标准实现OpenVPN硬件加密算法  

OpenVPN Hardware Encryption Algorithm Using PKCS#11 Standard

作　　者：李成东 初君凯 王庆修 

机构地区：[1]烟台海颐软件股份有限公司编码中心,山东264000

出　　处：《网络安全技术与应用》2013年第6期35-38,74,共5页Network Security Technology & Application

摘　　要：随着企业对使用互联网的安全需求大幅提高,VPN技术成为重要的解决方案。OpenVPN作为Linux下开源VPN的先锋,得到了广泛研究和应用。采用PKCS#11标准将硬件加密设备(KEY,一种智能密码钥匙)接入OpenVPN,使身份验证所需的数字证书能够通过硬件读写、存储,并且使VPN加密算法及加密/解密过程能够通过硬件实现,从而进一步提高OpenVPN的安全性能。With the requirement of Internet security for corporations increasing sharply, VPN technology has become a vital method to solve the security problem. As an advanced development product in VPN program of Linux, OpenVPN has been applied and studied widely. The hardware encryption devices （KEY, smart key） connected with OpenVPN by using PKCS# 11 standards make it possible that the digital certificate for authentication could be read, written and stored through the smart card, and the encryption algorithm and encryption/decryption process could be performed within the smart card, which improves the security level of OpenVPN.

关 键 词：OPENVPN PKCS#11 数字证书 智能密码钥匙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]