Enciphering and deciphering card, enciphering and deciphering method

Abstract

The present invention relates to an encryption / decryption card, an encryption method and a decryption method, wherein, the encryption / decryption card comprises a special CPU, an encryption / decryption chip and a message processing unit; the special CPU is used to carry out key negotiation with a peer-to-peer device; the encryption / decryption chip is used to encrypt a message to be encrypted according to a key determined by the negotiation of the special CPU, and to decrypt the encrypted message after message reorganization; the message processing unit is used to send the message which is encrypted by the encryption / decryption chip and the decrypted plaintext to a network processor. As the encryption / decryption process does not need a master system CPU, the present invention reduces the burden of the master system CPU; as the encryption / decryption process is realized only through a high-speed interface inside the card, the encryption / decryption process cannot be limited by the bandwidth of a system PCI bus, which improves operation speed and encryption performance. Moreover, as the adoption of the encryption / decryption card for encryption and decryption does not need to change the peer-to-peer device, the intercommunication problem among devices of different manufacturer does not exist.

Description

Technical field [0001] The invention relates to an encryption and decryption technology, in particular to an encryption and decryption card, an encryption method and a decryption method used in the IP security protocol technology. Background technique [0002] The IP Security (IP Security, hereinafter referred to as: IPSec) protocol suite is a series of protocols formulated by the Internet Engineering Task Force (IETF). It provides high-quality, interoperable, and cryptographic-based protocols for IP datagrams. The learned security strategy provides protection for the IP layer or above the IP layer. Specific communication parties use encryption and data source verification at the IP layer to ensure the privacy, integrity, authenticity, and anti-replay of datagrams when they are transmitted on the network. [0003] The existing IPSec mainly achieves the above goals through two security protocols: Authentication Header (AH) protocol and Encapsulating Security Payload (ESP) protocol...

AI Technical Summary

Problems solved by technology

However, the existing standard does not mandate the implementation of PMTU. Therefore, the PMTU discovery mechanism has not been adopted by all manufacturers, so there may still be problems in the intercommunication between devices of different manufacturers.

Images