千兆国产化商用密码卡技术  

Technology of Giga-Level Domestic Commercial Encryption Card

作　　者：秦放 QIN Fang(Sichuan Westone Information Security Platform Technol. Co.,Ltd.,Chengdu Sichuan 610000,China)

机构地区：[1]四川卫士通信息安全平台技术有限公司,四川成都610000

出　　处：《通信技术》2019年第5期1257-1262,共6页Communications Technology

摘　　要：随着国产可编程逻辑芯片、国产存储器件及国产处理器芯片的飞速发展,紧跟国家主管部门的技术要求,基于自主研制的高效安全密码产品的设计思想,研制开发了一款国产化的商用千兆PCIE密码卡(以下简称:密码卡)。该密码卡的主控制器采用国产的X1000E芯片、各算法实现引擎、各存储器件、物理噪声源及配套外设USBKey均实现国产化,满足国密局相关的技术要求和准入行业相关标准,高效实现了SM1/2/3/4算法。对称算法和哈希算法性能接近1Gb/s,非对称运算签名性能大于50000tps,设备驱动程序自主开发,兼容性和稳定性好。密码卡成本较低,具有很好的商用前景。With the high-speed development of domestic FPGA chips, domestic storages and Embedded CPUs, for keeping abreast of the technical requirement of the competent state departments, and based on the idea of independently-developed high-efficient secure cipher products, a home-made commercial Gigabit cipher card (here in after referred to as cipher card) is developed. The main controller of the cipher card adopts X1000E CPU chip made in China, and the engine of each algorithm, storages, physical noise source, as well as supporting peripheral USBkey are localized, which meet the relevant technical requirement of state Crypto Bureau and the relevant standards of the entry industry, and realize the SM 1/2/3/4 algorithms efficiently. The performance of SM 1/3/4 is close to 1Gbps, while the performance of SM2 signature greater than 50000 tps. The Most of components of the card are domestic, such as CPU, algorithm co-operator, all storages, random chips, and USBkey. The characters of card meet the technique requirements of policy and criterions of certain domains. The card has good performance in SM1/2/3/4 algorithms, SM1/3/4 speed are close to 1Gbps, SM2 sign speed is above 50000 tps. The device drivers are developed independently with good compatibility and stability. The cost of crypto card is low, and it has a good application prospect.

关 键 词：国产化 密码卡 X1000E SM1/2/3/4. 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]