一种混合密码体制下的密钥管理方案

A Key Management Scheme of Hybrid Cryptosystem

基于单一密码体制下的密钥管理系统都存在一些缺陷,不能完美地满足日益增长的应用需求。对于非对称密码体制的组合公钥技术,在安全性要求较高、相对封闭的应用环境下,有较好的实用特性。采用对称密码体制和公钥密码体制相结合的技术手段,设计出一个混合密码体制下的新型密钥管理系统,包括密钥管理模型、系统功能、密钥周期管理策略等,并对该系统的各项性能(安全性、高效性、灵和性、可扩展性)进行了详细的论述。

Cryptosystem based on a single key management system has some shortcomings and thus could not completely satisfy the growing application needs. The combined technology of asymmetric public key cryptography is of fairly good practicability for the relatively closed application environment with high security requirement. In combination of symmetric cryptography and public key cryptography, a hybrid cryptosystem is produced, and a novel key management system for the new system also designed, including key management model, system functions, key lifecycle management strategies. And the system performance （safety, efficiency, flexibility and scalability） is discussed in detail in this paper.