| Linux VPN网关密钥交换机制的设计 |
| |
| 引用本文： | 朱艳琴 钱培德. Linux VPN网关密钥交换机制的设计[J]. 计算机科学, 2005, 32(12): 63-64 |
| |
| 作者姓名： | 朱艳琴 钱培德 |
| |
| 作者单位： | 苏州大学计算机科学与技术学院,苏州,215006;苏州大学计算机科学与技术学院,苏州,215006 |
| |
| 基金项目： | 江苏省自然科学基金项目(编号BK2004039)资助. |
| |
| 摘 要： | 介绍了在Linux平台上实现VPN安全网关的总体设计思想以及通过IKE动态协商安全关联SA的主要过程,重点讨论了所采用的椭圆曲线密钥交换方案,并给出了有效的点乘运算快速实现算法。由于椭圆曲线密码体制具有每比特最高安全强度,因此大大提高了密钥分配的效率。
|
| 关 键 词： | VPN安全网关 IKE 椭圆曲线密码体制 点乘运算 |
The Design of Key Exchange Mechanism of Linux VPN Gateway |
| |
| ZHU Yan-Qin,QIAN Pei-De (School of Computer Science and Technology,Suzhou University,Suzhou. The Design of Key Exchange Mechanism of Linux VPN Gateway[J]. Computer Science, 2005, 32(12): 63-64 |
| |
| Authors: | ZHU Yan-Qin QIAN Pei-De (School of Computer Science Technology Suzhou University Suzhou |
| |
| Abstract: | General design of a VPN security gateway on Linux is discussed,in which Security Association(SA) is nego- tiated dynamically based on IKE,focusing on the scheme of elliptic curve key exchange.And fast algorithms of point multiplication are given.As the elliptic curve cryptography has the highest security strength,the efficiency of key allo- cation is greatly enhanced. |
| |
| Keywords: | VPN security gateway IKE Elliptic curve cryptography Point multiplication |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机科学》浏览原始摘要信息 |
|
点击此处可从《计算机科学》下载全文 |
