摘要
随着国家对网络安全和信息安全的重视,网络安全传输密码协议(TLCP)从密码行业标准上升到独立的国家标准,各种应用系统也积极跟进支持TLCP协议。由于国内基于商用密码算法实现的TLCP协议发展至今不足10年,导致应用系统支持TLCP协议的脚步比较缓慢,而评估基于TLCP协议的应用系统的性能/可靠性测试工具更是极其欠缺。为解决此类应用系统性能及可靠性工具的问题,提出了构造国密客户端和实现TLCP VPN网关2种解决方案,并详细阐述了构造国密客户端的实现方法,以及在多个应用系统中的实践推广情况。
With the gradual increase in country’s attention to network security and information security,the transport layer cryptography protocl(TLCP),has been upgraded from a cryptographic industry standard to an independent national standard,and various application systems have also actively followed up in response to the country’s call to support the TLCP.Since the development of TLCP based on commercial cryptographic algorithms in China has been less than 10 years so far,the pace of application systems supporting TLCP is relatively slow.Consequently,there is an extreme lack of performance/reliability testing tools for evaluating application systems based on the TLCP protocol.To address the issues of performance and tool reliability for such application systems,two solutions are proposed:constructing a national cryptographic client and implementing a TLCP VPN gateway.The implementation of constructing a national secret client is described in detail,and it is practically promoted in multiple application systems.
作者
王锐
罗利君
任龙兮
WANG Rui;LUO Lijun;REN Longxi(CETC Cyberspace Security Technology Co.,Ltd.,Chengdu Sichuan 610041,China)
出处
《信息安全与通信保密》
2024年第8期90-99,共10页
Information Security and Communications Privacy
关键词
TLCP
商用密码算法
性能/可靠性
测试工具
TLCP
commercial cryptographic algorithm
performance/reliability
testing tools