基于Microsoft密码体系的数字信封的实现

Realization of Digital Envelope Based on Microsoft Cryptographic Architecture

介绍了微软密码体系结构和组成、Microsoft证书的管理和使用方法,详细说明了利用证书和CryptoAPI(cryptographicapplicationprogramminginterface,加密应用程序接口)函数实现数字信封的原理、步骤以及算法.最后,利用Win2K颁发的数字证书、算法对多个文本数据进行加解密处理,结果表明所实现的数字信封技术能够保证信息传输的保密性和真实性,算法速度快,能满足实际应用的要求.

Digital Envelope utilizes the advantage of Symmetric and Asymmetric encryption algorithm and it is a safety and efficient encryption technique. The cryptographic architecture of Microsoft OS, the use and management of Microsoft certificate are introduced. Then, the principle, step and the algorithm of how to realize digital Envelope with the digital certificate and CryptoAPI functions is described. The experiments of many encrypting text data with the certificate of Win2K are done. These experiments prove that the Digital Envelope technique can ensure the data transmissions’s confidentiality and authenticity, and it’s high encryption speed can meet the requirement of actually application.