socket层加解密在Linux上的实现

IMPLEMENTING THE SOCKET LAYER ENCRYPTION/DECRYPTION IN LINUX

我们正致力于在Linux平台下socket层的SSL协议的核心部分的实现。本文讲述的是整个分为三阶段实现的工程的第一部分,即在已得到密钥情况下对socket数据的加解密。首先描述的是如何使用LKM进行必要的函数替换;其次结合核心数据结构详细描述了加解密实现过程,并给出了使程序实现得以简化的定理及其证明过程。

We are endeavoring to implement the core functions of SSL in Linux. The current paper describes the first step of this striplex project, namely the encryption/decryption functions with already attained keys. First we have showed how to use LKM to replace the relevant functions. Next we have elaborated a essential data structure and the encryption decryption processing.