密码系统中的密钥数据结构与存储方案

DATA STRUCTURE AND STORAGE OF SECRET KEY IN CRYPTOSYSTEM

密钥管理是公钥密码基础设施的主要问题之一。在密码系统中 ,一般用密钥数据库来存储大量的用户密钥。密钥管理在理论研究上已经取得一些成果 ,但在实践中仍有很多问题。作者在文中讨论了密钥管理的技术问题 ,设计了数据库中公钥和私钥的数据结构 ,并针对公钥和私钥不同的安全性要求设计了对密钥数据的认证方案。在方案中对私钥数据加密存储 ,用消息认证码方式保证数据的完整性。

The key management is a main problem of PKI. Key is stored in key database in a common cryptosystem. Some theoretical achievements be made in recent research, but there are problems in practice. In this paper, we designed the data structure of public-key and private-key, we also designed a key data authentication scheme. Private-key be encrypted to keep it secret, message authentication code be used to keep public-key integrality.