Secure socket layer protocol extension method supporting domestic cipher algorithm

Abstract

The invention discloses a secure socket layer protocol extension method supporting a domestic cipher algorithm. The secure socket layer protocol extension method comprises the following steps: adding a cipher suite supporting the domestic cipher algorithm into a secure socket layer extended source code of the secure socket layer protocol; setting corresponding parameters and alias for the cipher suite; establishing an algorithm provider for implementing the domestic cipher algorithm; establishing a corresponding relationship between the alias of the cipher suite and an implementation class of the algorithm provider. According to the secure socket layer protocol extension method provided by the invention, an operating mechanism of the SSL (secure socket layer) protocol is not changed and extra security problems are not caused; after adoption of the cipher suite supporting the domestic cipher algorithm, the domestic cipher algorithm can be used during handshake and interaction of the SSL, so that the safety performance of online banking is enhanced, and thus the secure socket layer protocol extension method has an important significance in autonomy and the product security of an online banking application system and the security of a whole system.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a secure socket layer protocol extension method supporting national secret algorithms. Background technique [0002] With the rapid development of commercial bank informatization, online banking application systems are rapidly popularized. In order to ensure the security of cryptographic applications in important economic systems, the State Cryptography Administration requires that the public key cryptographic infrastructure electronic authentication system and key management system should use domestic cryptographic algorithms. Domestic cryptographic algorithms are commercial cryptographic algorithms commonly used in my country, including the standard symmetric algorithm SM1, the asymmetric encryption algorithm SM2 based on elliptic curve ECC, the data digest algorithm SM3, and the group symmetric block encryption algorithm SM4, etc. [0003] At present, the scheme to s...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide a secure socket layer protocol extension method supporting the national secret algorithm, and the purpose is to solve the problem that the existing SSL protocol does not support the national secret algorithm

Images