基于ZUC的OpenVPN安全性能研究

OpenVPN safety research based on the ZUC

为提高OpenVPN技术的安全性,在介绍基于SSL协议的VPN技术的基础上,针对其密码算法弱强度的问题,通过编写包含ZUC算法的自定义引擎,用被国际认可的高强度加密算法ZUC算法替换OpenVPN中原本的弱强度算法,实现了对ZUC算法的调用,提高了OpenVPN技术的安全性,具有修改代价小,安全性高的特点。在系统测试过程中经过了Sniffer Pro嗅探器的抓包测试和TCP/UDP调试助手的数据通信测试,结果表明,客户端与服务器的通信数据能够被ZUC算法进行加密以达到安全通信的目的,该系统的高强度密码算法很大程度上满足了政府、军队和金融等对安全性要求较高的领域的需求,具有较强的实用价值。

In order to improve the security of OpenVPN technology ,this paper introduces the VPN technology ,based on SSL protocol ,and then find the existing password algorithm of weak strength of the technology ,put forward the method of high strength encryption algorithm which represented by ZUC has been internationally recognized to replace the original weak strength algorithm in OpenVPN ,realised the call of ZUC algorithm by writing a custom engine including ZUC algorithm ,and has the characteristics of low cost and high security .After the Sniffer Pro capture test and TCP /UDP debugging assistant data communications test ,the results show that ,data communication between the client and the server can be encrypted by zuc algorithm in order to achieve the purpose of communication security ,and high strength encryption algorithm of the system ,to a great extent ,meet the such as government ,military and financial security requirements in areas of higher demand ,has a strong practical value .