摘要
随着Internet的发展和Web技术的普及应用,Web安全已成为目前亟待解决的安全问题之一.而SSL(Secure Socket Layer)协议作为一种有效的解决方案被广泛使用.但是,SSL协议的核心加密算法受到出口的限制,不能满足我国信息安全的需要.因此,对SSL协议及其实现进行分析和研究具有一定的实践意义.在深入地分析和研究SSL协议原理及其安全隐患和性能属性的基础上,针对Open SSL采用C语言对其中的AES(Advanced Encryption Standard)算法进行了改进实现.对AES算法的改进主要用指针类型转换的方法改进加密解密函数中的移位操作,最终实现了效率上的提高.
With the development of the Internet and the popularity of becomes a one of safety problems which to be solved at present. And the adopted widely. But SSL is hard to avoid some defects and the core the web technology applications, web security SSL protocol as a kind of effective solution, is of the eneryption algorithm has some export restrictions, which can not meet the need of information security in our country. Therefore, the analysis of SSL protocol and its implementation has a certain practical significance and research. Based on the principle of in-depth analysis and study on the SSL protocol and its security and performance attributes, we improve the OpenSSL using Clangnage to the AES algorithm. Improvements on AES algorithm mainly use the encryption to decrypt function of pointer type conversion method to improve shift operation.
出处
《河南科学》
2016年第12期1968-1975,共8页
Henan Science