Method employing SM2 elliptical curve algorithm to achieve encryption in OpenSSL

Abstract

The invention discloses a method employing an SM2 elliptical curve algorithm to achieve encryption in an OpenSSL. The method comprises the steps that a server generates a random large number, calculates random fixed point data on an elliptical curve, and transmits the data to a client through a Server Hello Done message; the client analyzes the fixed point data from the server through the received message, enables a public key of the server and public and private keys of the client to serve as parameters of the SM2, and calculates a main key; the client randomly generates one random large number, calculates the random fixed point data on the elliptical curve, enables the fixed point data and the public key of the client to be transmitted to the server through Client Key Exchange message; and the server obtains the random fixed point data of the client and the public key of the client, enables the public and private keys of the servers to serve as the parameters of the SM2, and calculates the main key. The method is high in reliability, and is safe and stable in operation.

Description

technical field [0001] The invention belongs to the field of OpenSSL security optimization, and in particular relates to a method for encrypting by applying SM2 elliptic curve algorithm in OpenSSL, which can carry out key negotiation. Background technique [0002] OpenSSL is a set of open source Secure Sockets Layer cipher library, written in C language, based on the SSL protocol to realize the data encryption function of the transport layer, it includes some international general cipher algorithms, message digest algorithms and commonly used ciphers Key and certificate encapsulation management functions. OpenSSL is widely used in various fields such as online banking, online payment, e-commerce websites, and e-mail, so its security and reliability are very important. However, in recent years, OpenSSL has been repeatedly exposed to have security vulnerabilities, which have had a very bad impact on social network security. As early as July 2007, Arjen Lenstra of the Swiss I...

AI Technical Summary

Problems solved by technology

However, in recent years, OpenSSL has been repeatedly exposed to have security vulnerabilities, which has had a very bad impact on social network security.

As early as July 2007, Arjen Lenstra of the Swiss Institute of Technology in Lausanne (EPFL) announced that their distributed computing project had cracked a 307-bit RSA key after 11 months of hard work, and had the ability to crack it shortly after 700-bit RSA key, so he warned that after five or six years, with the continuous development of various computing and cracking technologies, maybe even 1024-bit RSA encryption cannot be completely guaranteed, and people must seek more secure encryption technology

Images