Method employing SM2 elliptical curve algorithm to achieve encryption in OpenSSL

An elliptic curve algorithm and calculated technology, applied in the public key and key distribution of secure communication, which can solve the problems of security loopholes, social network security impact, and the inability of RSA encryption to be fully insured.

Active Publication Date: 2015-11-11
HARBIN ENG UNIV
View PDF0 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in recent years, OpenSSL has been repeatedly exposed to have security vulnerabilities, which has had a very bad impact on social network security.
As early as July 2007, Arjen Lenstra of the Swiss Institute of Technology in Lausanne (EPFL) announced that their distributed computing project had cracked a 307-bit RSA key after 11 months of hard work, and had the ability to crack it shortly after 700-bit RSA key, so he warned that after five or six years, with the continuous development of various computing and cracking technologies, maybe even 1024-bit RSA encryption cannot be completely guaranteed, and people must seek more secure encryption technology

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method employing SM2 elliptical curve algorithm to achieve encryption in OpenSSL
  • Method employing SM2 elliptical curve algorithm to achieve encryption in OpenSSL
  • Method employing SM2 elliptical curve algorithm to achieve encryption in OpenSSL

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0024] The present invention will be described in further detail below in conjunction with the accompanying drawings.

[0025] SM2 is a domestic asymmetric encryption algorithm based on elliptic curves. Its mathematical principle is similar to that of the ECDH algorithm. It is a secure key negotiation algorithm. Therefore, it is used as a key negotiation algorithm in SSL communication. It is feasible in theory, but in practice, due to the difference in design principles between SM2 and ECDH algorithms, the interface functions used to implement key negotiation in the original OpenSSL cannot meet the execution needs of SM2 elliptic curve algorithms, and SM2 cannot be used without seamlessly ported to OpenSSL's existing framework. In fact, the problem can be broken down into the following two requirements:

[0026] 1. Communication requirements: Compared with the ECDH algorithm used in OpenSSL, SM2 is more complicated. Although both are asymmetric encryption algorithms based on ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method employing an SM2 elliptical curve algorithm to achieve encryption in an OpenSSL. The method comprises the steps that a server generates a random large number, calculates random fixed point data on an elliptical curve, and transmits the data to a client through a Server Hello Done message; the client analyzes the fixed point data from the server through the received message, enables a public key of the server and public and private keys of the client to serve as parameters of the SM2, and calculates a main key; the client randomly generates one random large number, calculates the random fixed point data on the elliptical curve, enables the fixed point data and the public key of the client to be transmitted to the server through Client Key Exchange message; and the server obtains the random fixed point data of the client and the public key of the client, enables the public and private keys of the servers to serve as the parameters of the SM2, and calculates the main key. The method is high in reliability, and is safe and stable in operation.

Description

technical field [0001] The invention belongs to the field of OpenSSL security optimization, and in particular relates to a method for encrypting by applying SM2 elliptic curve algorithm in OpenSSL, which can carry out key negotiation. Background technique [0002] OpenSSL is a set of open source Secure Sockets Layer cipher library, written in C language, based on the SSL protocol to realize the data encryption function of the transport layer, it includes some international general cipher algorithms, message digest algorithms and commonly used ciphers Key and certificate encapsulation management functions. OpenSSL is widely used in various fields such as online banking, online payment, e-commerce websites, and e-mail, so its security and reliability are very important. However, in recent years, OpenSSL has been repeatedly exposed to have security vulnerabilities, which have had a very bad impact on social network security. As early as July 2007, Arjen Lenstra of the Swiss I...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityApplications(China)
IPC IPC(8): H04L9/30H04L9/08H04L29/06
Inventor吴艳霞陈希谢东良戴葵王彦璋孙颖
OwnerHARBIN ENG UNIV