CAJ | 학술논문

传统情况下,在SSL中使用高强度算法的硬件加密设备,需要做大量的接口修改工作,并要求开发者熟悉硬件的内部结构和相应的开发接口。OpenSSL的引擎机制通过提供通用的加密接口解决了这个难题。文中介绍了OpenSSL引擎机制的实现原理,分析了OpenSSL引擎机制的关键技术,在此基础上,给出了硬件引擎实现的通用方法。基于该方法,可以方便地在SSL协议中引入所需的硬件加密模块,提高数据加密通道的安全性和处理性能。
전통정황하,재SSL중사용고강도산법적경건가밀설비,수요주대량적접구수개공작,병요구개발자숙실경건적내부결구화상응적개발접구。OpenSSL적인경궤제통과제공통용적가밀접구해결료저개난제。문중개소료OpenSSL인경궤제적실현원리,분석료OpenSSL인경궤제적관건기술,재차기출상,급출료경건인경실현적통용방법。기우해방법,가이방편지재SSL협의중인입소수적경건가밀모괴,제고수거가밀통도적안전성화처이성능。
In traditional case,a lot of interface modification should be done in order to implement high strength SSL encryption algorithm with hardware device.And thus the developers must be familiar with the encryption hardware and the relevant interfaces.The OpenSSL＇s engine mechanism could solve this problem through a generic encryption interface.In the paper,the basic principle of the OpenSSL engine mechanism is presented first,then the key technology of the mechanism is analyzed,and finally a generic method for implementing hardware engine is given.