安全CA实例——EJBCA的研究

Research on security CA-EJBCA

出于商业利益考虑,商用CA的关键技术通常并不公开,至今未能很好地弄清CA的密钥生成过程、密码算法的保密强度等。为了常用CA更具有实用性,给出了一个开源的CA——EJBCA。为使EJBCA应用到电子政务实践中,对EJBCA做了介绍,然后对EJBCA的运行、管理、框架模型做了分析和研究,并根据其所需软件做了搭建和实现,最后对EJBCA所涉及的密码算法及其安全性做了研究和探讨。

In consideration of commercialinterest,the critical technology of commercial CA is not usually disclosed at present,it also fails to well known so far that the process of key generate of CA,cryptology algorithm,and secret intensity of the course of algorithm,etc..In order to have more practicability common CA,this paper provides an open-source CA EJBCA.Since EJBCA should apply to the E-government practice,the paper has introduced EJBCA,then done analysis and studied about the operation,management,frame model of EJBCA,it also has put up and realize it according to necessary software its,then made a research and discussion to EJBCA involved cryptology algorithm and its security finally.