一种新型的网络传输加解密系统

A New-Style Net Transport Encryption and Decryption System

提出了一种新型的网络传输加解密系统 .与传统的网络传输加密系统相比 ,该系统的握手协议引入了“自证明”机制 ,无需第三方参与即可生成共享密钥并进行身份认证 ;此外 ,系统加解密功能分别在 Socket层和 IP层实现 .文中重点阐述了握手协议的设计和加解密功能的实现 ,并简明介绍了 L KM技术在开发过程中的应用 .

The author puts forward a new style net transport encryption and Decryption system. Generating secret key and verifying identify without CA is a differentia of this system. Meantime, it can work at Socket level and IP level. In this paper, we introduce design of the hand shaking protocol, implementation of encrypt/decrypt function and application of LKM in details.