基于OpenCryptoki实现国密算法功能的研究

Implement of Guomi Algorithm based on OpenCryptoki

国密算法是国家密码局制定和发布的一系列密码算法标准,包含对称算法、非对称算法和序列算法,用以保障信息安全。PKCS#11是国际公开算法的密码接口规范,与硬件设备平台无关,目前已发展成一个接口标准规范,被广泛应用于信息安全领域,而Open Cryptoki便是PKCS#11标准规范的一个具体实现。基于OpenCryptoki实现PKCS#11对国密算法(如SM2/3/4、ZUC等)体系及功能的支持,可为上层各类应用提供一个通用的密码接口来使用国密算法,从而更好地推广国密算法的应用。

Guomi algorithm is a series of cryptographic algorithm standards formulated and released by State Cryptography Administration Office of Security Commercial Code Administration(OSCCA).It includes symmetric algorithms,asymmetric algorithms and sequence algorithms to ensure information security.PKCS#11 is the cryptographic interface specification of the international public algorithm,which has nothing to do with the hardware device platform.It has now evolved into an interface standard specification that is widely used in the field of information security.OpenCryptoki is a concrete implementation of the PKCS#11 standard specification.Based on OpenCryptoki,PKCS#11 supports Guomi algorithm(such as SM2/3/4,ZUC and so on)system and functions.It can provide a common cryptographic interface for all kinds of applications in the upper layer to use Guomi algorithm,so as to better promote the application of Guomi algorithm.