使用PKCS11标准开发跨硬件加密功能

Development of Multi-hardware Encryption Based on PKCS #11 Standard

CryptoKi接口是RSA公司提出的PKCS#11标准中规定的标准加解密接口.它提供了一套独立于加密设备和操作系统的密码服务开发界面.首先简要介绍了通用CrypoKi模型,随后分析了其逻辑结构和主要接口,并提供了一个开发实例用以说明作为一个密码部件接口,CryptoKi为计算机或通信系统的安全提供了加解密基础.

CryptoKi interface is a kind of standard encryption and decryption interface in conformity with PKCS# 11 standard, laid down by RSA Company. CryptoKi interface also presents a set of developing interfaces of cryptographic service, which is independent of encryption devices and operating systems. First, a common CrypoKi model was briefly introduced, and then its logic structure and the main interfaces were analyzed. At last, a practical example was given to illustrate it as a cryptographic port. CrypoKi interface provides the basic encryption and decryption for the security of a computer system and communications system.