椭圆曲线加密卡设计与实现

在基于公钥密码体制电子商务中,加密卡是网络认证和通讯加密的硬件设备。文章提出一种利用椭圆曲线密码体制(ECC)加密卡硬件方案。该论文首先给出加密卡安全应用开发与设计体系结构。然后讨论了ECC的数学基础,设计了基本密码算法模型,给出ECC加密卡的各种应用。最后,讨论了加密卡设计中的几个安全问题。     

一种GF(2m)上椭圆曲线点运算的混合坐标系

椭圆曲线密码体制(ECC)是一种基于代数曲线的公钥密码体制。椭圆曲线上点运算是该密码体制核心运算，而坐标系的选取决定了点运算速度。为了提高椭圆曲线标量乘速度，在对已有仿射坐标系、Standard投影坐标系、Jacobian投影坐标系和Lopez & Dahab投影坐标系研究的基础上，提出了一种Lopez & Dahab投影坐标系扩展形式，并基于此构建了一种混合坐标系。算法复杂度分析表明，在该混合坐标系下，椭圆曲线标量乘运算时间复杂度比已有坐标系下运算时间复杂度要小。     

基于FPGA的ECC数字签名方案优化设计

ECC数字签名算法是目前的研究热点之一。本文根据ECC数字签名算法的相关理论,使用Verilog语言实现了其完整方案,并给予相应的优化。给出了关键部分的仿真结果。     

专用指令集安全处理器设计与VLSI实现

专用指令集处理器（ASIP）结合了ASIC协处理器的高效性与通用处理器的灵活性,在信息安全领域具有广泛的应用前景.本文针对RSA/ECC密码算法,提出了一种专用指令集安全处理器的设计与VLSI实现方案.本文的ASIP基于32位RISC架构,通过采用专用的指令集和特殊的运算单元,以较小的软硬件代价实现了密码算法的高效运算.本设计采用TSMC0.25μm标准CMOS工艺综合,核心电路等效门为28K,最高时钟频率可达到150MHz,完成一次1024位RSA算法仅需200毫秒.     

一种基于JPEG压缩的半脆弱水印算法

本文分析了JPEG压缩中的DCT变换和量化过程，根据量化的特性提出了一种半脆弱水印方案，并将水印信息调制为纠错码嵌入JPEG压缩过程的量化系数中，实验证明，此水印方案鲁棒性较强，虚警率低，能较好的检测图像是否被篡改并对篡改定位。     

Access control in wireless sensor networks

Nodes in a sensor network may be lost due to power exhaustion or malicious attacks. To extend the lifetime of the sensor network, new node deployment is necessary. In military scenarios, adversaries may directly deploy malicious nodes or manipulate existing nodes to introduce malicious “new” nodes through many kinds of attacks. To prevent malicious nodes from joining the sensor network, access control is required in the design of sensor network protocols. In this paper, we propose an access control protocol based on Elliptic Curve Cryptography (ECC) for sensor networks. Our access control protocol accomplishes node authentication and key establishment for new nodes. Different from conventional authentication methods based on the node identity, our access control protocol includes both the node identity and the node bootstrapping time into the authentication procedure. Hence our access control protocol cannot only identify the identity of each node but also differentiate between old nodes and new nodes. In addition, each new node can establish shared keys with its neighbors during the node authentication procedure. Compared with conventional sensor network security solutions, our access control protocol can defend against most well-recognized attacks in sensor networks, and achieve better computation and communication performance due to the more efficient algorithms based on ECC than those based on RSA.     

椭圆曲线密码处理器的高效VLSI设计与实现

采用复合武硬件设计方法，通过数学公式推导和电路结构设计，完成了一款GF（2m）域椭圆曲线密码处理器的高效VLSI实现。以低成本为目标，对算术逻辑模块的乘法、约减、平方、求逆，以及控制电路模块都进行了优化设计。按照椭圆曲线密码的不同运算层次，设计了不同层次的控制电路。该处理器综合在中芯国际SMIC0．18μm标准工艺库上．比相关研究的芯片面积节省48％，同时保证了很快的速度。     

基于门限ECC的入侵容忍CA方案

提出了一个入侵容忍CA（Certificate Authority，认证中心）系统，在此系统中构造了一个基于椭圆曲线密码体制的（t，n）门限签密方案，该方案是数字签名和公钥加密的有机集成，不仅减少了系统的开销，并使得系统能探测故障服务器和克服签密合成者的欺骗。最后给出了该方案的安全性分析和进行单个证书请求的性能测试结果。     

An efficient hardware implementation of the elliptic curve cryptographic processor over prime field,

Elliptic curve cryptography (ECC) schemes are widely adopted for the digital signature applications due to their key sizes, hardware resources, and higher security per bit than Rivest-Shamir-Adleman (RSA). In this work, we proposed a new hardware architecture for elliptic curve scalar multiplication (ECSM) in Jacobian coordinates over prime field, . This is a combination of point doubling and point addition architecture, implemented using resource sharing concept to achieve high speed and low hardware resources, which is synthesized both in field-programmable gate array (FPGA) and application-specific integrated circuit (ASIC). The proposed ECSM takes 1.76 and 2.44 ms on Virtex-7 FPGA platform over 224-bit and 256-bit prime field, respectively. Similarly, ASIC (GF 40 nm complementary metal-oxide semiconductor [CMOS]) technology implementation provides energy efficient with a latency of 0.46 and 0.6 ms over prime field and , respectively. This design provides better area-delay product and high throughput value in both FPGA and ASIC when compared with other designs.