一种基于AES和ECC的混合密码技术的研究

Research on a hybrid cryptosystem based on AES and ECC

如今信息时代已经来临,计算机和通信技术呈现出一个飞速发展的状态,大量的敏感信息常常通过公网传输。攻击者为了达到他们的犯罪目的,把目光转向了信息的盗窃、篡改、破坏上。当双方用户通过互联网通信时,需要对这些敏感数据进行更安全更高级的加密,以保障数据安全的存储和传输,并防止机密信息被破坏、泄露。文中通过分析当今几种比较流行的数据加密体制,提出了一种将AES和椭圆曲线密码ECC相结合的混合密码技术。结合两种算法的优点,并改进AES加密算法,重新设计S盒提高算法的安全性。采用AES加密算法将明文信息加密,并用ECC加密AES密钥,进行密钥管理,同时使用ECC进行数字签名。形成了一种新的混合密码体制,它不仅能快速地进行数据的加密,又很好地解决密钥分配和管理的问题,既保障了密码系统的安全性又兼顾了计算能力的快速性。

Now that the information age has come,computer and communication technologies are showing a state of rapid development,and a large amount of sensitive information is often transmitted through the public network.In order to achieve their criminal purposes,attackers have turned their attention to the theft,tampering and destruction of information.In order to secure the storage and transmission of data and prevent the leakage of secrets,these important data need to be encrypted at a higher level.Based on the analysis of the existing data encryption schemes,this paper proposes a hybrid cryptosystem which combines AES algorithm with ECC scheme.Combining the advantages of the two algorithms,the AES encryption algorithm is improved,and the S-box is redesigned to improve the security of the algorithm.AES encryption algorithm is used to encrypt the plaintext information,and ECC encryption AES key is used for key management,and ECC is used for digital signature.By integrating the advantages of AES encryption algorithm and ECC encryption algorithm,it can not only encrypt data quickly,but also solve the problem of key distribution,and solve the problem of both security and rapidity of the password system.