OpenSSL引擎机制的研究

Study on OpenSSL Engine Mechanism

传统情况下,在SSL中使用高强度算法的硬件加密设备,需要做大量的接口修改工作,并要求开发者熟悉硬件的内部结构和相应的开发接口。OpenSSL的引擎机制通过提供通用的加密接口解决了这个难题。文中介绍了OpenSSL引擎机制的实现原理,分析了OpenSSL引擎机制的关键技术,在此基础上,给出了硬件引擎实现的通用方法。基于该方法,可以方便地在SSL协议中引入所需的硬件加密模块,提高数据加密通道的安全性和处理性能。

In traditional case,a lot of interface modification should be done in order to implement high strength SSL encryption algorithm with hardware device.And thus the developers must be familiar with the encryption hardware and the relevant interfaces.The OpenSSL＇s engine mechanism could solve this problem through a generic encryption interface.In the paper,the basic principle of the OpenSSL engine mechanism is presented first,then the key technology of the mechanism is analyzed,and finally a generic method for implementing hardware engine is given.