对称密钥加密算法在IPsec协议中的应用  

Application of symmetric-key encryption algorithm in IPsec

作　　者：李湘锋[1] 赵有健[1] 全成斌[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《电子测量与仪器学报》2014年第1期75-83,共9页Journal of Electronic Measurement and Instrumentation

基　　金：国家自然科学基金(60903184;61073167);国家"863"计划(2011AA010704)资助项目

摘　　要：IPsec协议是互联网中最重要的协议之一,也是多年来用以解决网络安全问题的技术,在路由器、防火墙等设备中有着广泛的应用,同时在各种软件系统中也扮演重要角色。通过对IPsec协议中加密算法的讨论,重点分析了对称密钥加密算法在ESP中的应用,包括DES、3DES、IDEA、AES、SM4等加密算法。分析了各个算法实现的特点、复杂度和安全强度,对比了算法在软硬件平台实现所需资源以及实现速度,为IPsec协议设计应用时提出了建议,能有针对性的使用对称密钥加密算法,合理有效的解决安全方案。IPsec protocol is one of the most important protocols in the Internet, and also to resolve the problems of network security technology over the years. It is widely used in devices such as routers, firewalls, and also plays an important role in lots of software systems. Through the discussion of the IPsec protocol encryption algorithm this pa- per analyzes the symmetric key encryption algorithms in ESP, including DES, 3DES, IDEA, AES, etc. The focus is to analyze the characteristics of each algorithm complexity, security strength and the speed of implementation across platforms. In the IPsec protocol design, these analysis can put forward suggestions for the security program with the right symmetric key eneryption algorithm.

关 键 词：IPSEC协议 网络安全 对称密钥加密算法 DES 3DES IDEA AES SMS4 CAMELLIA 

分 类 号：TP302.7[自动化与计算机技术—计算机系统结构] TN711[自动化与计算机技术—计算机科学与技术]