Linux内核模块进行SRP认证的模型研究

Stanford大学计算机系开发了SRP软件包，提供基于口令认证和会话加密的安全机制。然而由于SRP软件包中调用了大量的库函数进行数学计算，在Linux内核中是不可以访问到这些库的，所以Linux内核模块要想进行SRP认证，就有些困难。本文研究并实现了一种有效的解决方案，可以用于Linux内核模块的SRP认证。本文以SRP认证在iSCSI中的实现为例来进行说明。该项技术已经成功地运用于我们自主开发的iSCSI网络存储项目中。

LINUX KERNEL MODULE'S SRP AUTHENTICATION REFERENCE MODEL

SRP(Secure Remote Password)is a cryptographically strong network authentication mechanism.Stanford university developed SRP software suit which can be used in such as secure Telnet and FTP applications.The problem is,on Linux platform,SRP software is realized in user mode,it cann't be accessed in Linux kernel mode.It isn't easy to transplant SRP into Linux kernel because SRP requires a "large number math"library to function.These library,such as OpenSSL,cryptolib,are all located in user mode. This paper proposed an easy and effective way to do SRP authentication in Linux kernel.It is explained in iSCSI authentication realization.