一种面向分组密码的指令扩展方法  

An Instruction Set Extension Method for Block Cipher

作　　者：刘恺[1] 敖天勇[1,2] 饶金理[1] 戴葵[1] 邹雪城[1] 

机构地区：[1]华中科技大学光学与电子信息学院,湖北武汉430074 [2]河南大学物理与电子学院,河南开封475004

出　　处：《微电子学与计算机》2015年第11期87-91,共5页Microelectronics & Computer

基　　金：国家自然科学基金(61376031);湖北省自然科学基金(ZRZ0051);河南省重点科技攻关(152102210055)

摘　　要：针对信息安全领域广泛存在的分组密码运算需求,提出一种面向分组密码的指令扩展方法.通过统计分析47种分组密码算法的运算特点,发现了四种需要加速的基本运算,并设计了四个密码运算单元对这四种基本运算进行加速.将这四个密码运算单元设计成为一个数据触发单元植入微处理器中,从而实现了分组密码运算的加速.该方法具有实现简单、灵活性高等优点.评估结果显示扩展后的微处理器对于常见分组密码算法的加速比为2.4～9.3,且硬件开销仅为原微处理器的1.3倍.In order to meet the high-performance block cipher processing need existed in the information security field,an instruction set extension method for block cipher calculation is proposed.Based on the analysis of 47 kinds of block cipher algorithms,four basic operations that should be accelerated were found.Therefore,four cryptooperation units to accelerate these operations are designed.Moreover,a data trigger unit which includes the four crypto-operation units is designed and added to the microprocessor to accelerate the block cipher operations.This method has the advantages of briefness,flexibility and so on.The evaluation result shows that the modified microprocessor＇s speed-up ratios of common block cipher algorithms are about 2.4-9.3and the hardware cost is only1.3times as large as the original microprocessor.

关 键 词：分组密码 指令扩展 微处理器 数据触发 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]