基于FPGA的ZUC高性能数据加密方案  

ZUC High Performance Data Encryption Scheme Based on FPGA

作　　者：张博林 李斌[1,2] 燕云飞 魏源鑫 周清雷 ZHANG Bolin;LI Bin;YAN Yunfei;WEI Yuanxin;ZHOU Qinglei(Country School of Computer and Artificial Intelligence,Zhengzhou University,Zhengzhou 450001,China;Henan Key Laboratory of Network Cryptography Technology,Zhengzhou 450001,China)

机构地区：[1]郑州大学计算机与人工智能学院,郑州450001 [2]河南省网络密码技术重点实验室,郑州450001

出　　处：《计算机科学》2023年第11期374-382,共9页Computer Science

基　　金：河南省网络密码技术重点实验室研究课题(LNCT2022-A14);国家重点研发计划(2018XXXXXXX01);河南省科技攻关(232102211055)。

摘　　要：祖冲之(ZUC)算法是我国自主研制的流密码算法,现已被3GPP LTE采用为第四代移动通信加密标准。为适应大数据时代对于国产密码性能的高要求,设计了一套以祖冲之算法为核心的高性能数据加密方案。该方案中包含两种不同结构形式的加密算法核心,分别针对短报文和长报文两种不同的应用情形,基于FPGA平台,采用CLA和CSA加法器设计了半流水线和全流水线形式的ZUC流密码电路结构,以改进的ZUC加密模式,配合高速内存通信和多iv并行加密,实现了高性能加密方案,极大提高了加解密效率。该方案工作时,可使用控制模块来配置加密算法。实验结果表明,与其他方案相比,所提方案的算核工作频率分别提高了40.8%~209.5%和62.1%~445.4%,数据吞吐率达到了25.728 Gb/s和46.08 Gb/s,适用于边缘设备、车联网数据加密等高性能加密场景。ZUC algorithm is a stream cipher algorithm independently developed by China,which has been adopted as the fourth generation mobile communication encryption standard by 3GPP LTE.In order to meet the high requirements of the big data era for the performance of domestic passwords,a set of high-performance data encryption scheme with ZUC algorithm as the core is designed.The scheme includes two encryption algorithm cores of different structure forms.Aiming at two different application situations of short message and long message respectively,based on the FPGA platform,the semi-pipelined and full-pipelined ZUC stream cipher circuit structures are designed by using CLA and CSA adders.With the improved ZUC encryption mode,combined with high-speed memory communication and multi iv parallel encryption,the high-performance encryption scheme is realized,which greatly improves the encryption and decryption efficiency.When the scheme works,the encryption algorithm can be configured using the control module.Experimental results show that,compared with other schemes,the working frequency of the proposed algorithmis increased by 40.8%~209.5%and 62.1%~445.4%respectively,and the data throughput reaches 25.728 Gb/s and 46.08 Gb/s,meeting the high-performance encryption scenarios such as edge devices and Internet of Vehicles data encryption.

关 键 词：祖冲之算法 现场可编程门阵列 高性能加密 硬件实现 流水线 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]