商用密码应用安全性评估  

Security Evaluation of Commercial Cryptography Application

作　　者：黄晶晶 孙淑娴 周睿康 何中旭 韩旭[3] 李琳[1] HUANG Jingjing;SUN Shuxian;ZHOU Ruikang;HE Zhongxu;HAN Xu;LI Lin(China Electronics Standardization Institute,Beijing 100007,China;Beijing CESI Technology Co.,Ltd.,Beijing 100007,China;Xidian University,Xi’an Shaanxi 710071,China)

机构地区：[1]中国电子技术标准化研究院,北京100007 [2]北京赛西科技发展有限责任公司,北京100007 [3]西安电子科技大学,陕西西安710071

出　　处：《信息安全与通信保密》2023年第3期113-121,共9页Information Security and Communications Privacy

摘　　要：密码是保障网络空间安全的核心技术和基础支撑,利用密码在安全认证、加密保护、信任传递等方面的重要作用,可有效减少信息系统安全隐患。《中华人民共和国密码法》的颁布实施,推动了商用密码应用发展的进程。商用密码应用安全性评估对规范密码应用和保障信息系统安全具有重大意义。基于此,通过梳理分析商用密码应用安全性评估过程中存在的问题,研究提出相应的实践方法,从而提高商用密码应用安全性评估的效率。Cryptography is the core technology and cornerstone for securing cyberspace.Taking the advantage of the functionalities of security authentication,encryption protection and trust transfer of cryptography,security risks in information system could be effectively reduced.The promulgation and implementation of the Cryptography Law of the People’s Republic of China promotes the development of commercial cryptography applications.The security evaluation of commercial cryptography applications is of great significance to standardize cryptography applications and ensure the security of information systems.Based on the above observations,by analyzing the problems in the process of security evaluation of commercial cryptography applications,corresponding practical methods are studied and put forward to improve the efficiency of security evaluation of commercial cryptography applications.

关 键 词：商用密码 信息安全 安全性评估 合规 

分 类 号：TN918[电子电信—通信与信息系统]