基于AES加密算法的数据库二级密钥技术

Technology About Double Encryption Key of Database Security Based on AES Encryption Algorithm

为了提高用于数据库加密的加密密钥的生成和存储的安全性,本系统采用一种新的二级密钥体制,利用AES算法对主密钥进行一系列变换,在变换中产生工作密钥,而不需要提前设定工作密钥.为了进一步保证数据库加密密钥的安全和生成速率,在分析AES算法密钥矩阵的构造原理的基础上对其进行改进,引入在密钥扩展算法中被称之为"单向性"的设计策略,来减轻各轮子密钥之间的关联性,为数据库的安全提供了更有力的保障.

To ensure the security of the generation and storage of encryption key, this system proposes one new double encryption-key mechanism for database encryption, in which the AES encryption is used to get work key from transform of the main key, without setting work key firstly. In order to further ensure the security of database encryption key and to improve the encryption key generation rate, the construction of AES algorithm key matrix is analyzed and improved. The key expansion algorithm called ＇one-way＇ design strategy is introduced to reduce the correlation between each wheel key, which will help to provide a more effective guarantee for the security of database.