云环境下基于椭圆曲线的数据加密机制研究

Research on Data Encryption Mechanism Based on Elliptic Curve in Cloud Environment

针对云计算环境下海量数据面临易泄露、非法篡改等安全问题以及RSA(Rivest-Shamir-Adleman)等通用加密算法安全级别低、计算复杂的缺点,提出了一种云环境下基于椭圆曲线的数据加密方案.该方案基于椭圆曲线集成加密模式(Elliptic Curve Integrated Encryption Scheme,ECIES),其中的加密算法主要采用国密标准.国密,即国家密码局认定的国产密码算法,与国际通用的RSA等算法相比,可用较短的密钥长度达到同样的安全级别.为了提升云数据的加密效率,利用MapReduce框架实现该算法,并通过设置不同的Map任务、Reduce数量得到不同条件下的加密加速比.最后,分别在1 GB,2 GB,4 GB的数据集上测试,实验结果表明,此方案在保障加密数据的安全级别的同时,可提升云数据加密运算的效率.

Aiming at the security problems of massive data in cloud computing environment,such as easy leakage and illegal tampering,as well as the disadvantages of general encryption algorithms such as RSA with low security level and complex computing,this paper proposes a data encryption scheme based on elliptic curve in cloud environment.The scheme is based on Elliptic Curve Integrated Encryption Scheme(ECIES).The Encryption algorithm mainly adopts national cryptographic standard.National cryptographic algorithm,can achieve the same security level with a shorter key length,compared with the international general algorithm such as RSA.In addition,It is recognized by the national cryptography administration.In order to improve the encryption efficiency of cloud data,MapReduce framework was used to implement the algorithm,and different map tasks and reduce number were set to obtain the encryption acceleration ratio under different conditions.Finally,it was tested on 1 GB,2 GB and 4 GB data sets respectively.The experimental results show that this scheme can improve the efficiency of data encryption operation while ensuring the security level of encrypted data.