A 128-bit symmetric key generation and protection device

Abstract

The invention discloses a 128-bit symmetric secret key production and protection method. The device is characterized in that a seed secret key stored in the device is set as an A segment secret key; the seed secret key issued by a host is set as a B segment secret key; and a synthesis result is the secrete key. The device comprises following modules of at least one A segment secret key management module, at least one B segment secret key management module; at least one MD5 algorithm module; at least one SHA1 algorithm module; at least one secret key synthesis management module; and at least one secret key storage module. According to the device, exposure of the A segment secret key is avoided; and the device has the capability of resisting malicious attacks of software. According to the device, once the device leaves a host environment, the B segment secret key and the produced secret key are automatically destroyed; therefore, the device has the capability of resisting the malicious attacks of the software; and the security of the secrete is further improved.

Description

technical field [0001] The invention relates to a key generation and protection method in the technical field of information security, in particular to a 128-bit symmetric key generation and protection device. Background technique [0002] A key is a parameter that is entered in an algorithm that converts plaintext to ciphertext or ciphertext to plaintext. Keys are divided into symmetric keys and asymmetric keys. [0003] With the rapid development of information technology and the advent of the era of big data, various encryption algorithms are widely used in various industries. As the core of various encryption and decryption algorithms, keys will cause unpredictable losses once they are exposed. It can be seen that the key is important in the field of information security technology. [0004] At present, there are usually two ways to protect the key. One is to store the key in the hardware device and take it out from the hardware device in a specific way when it needs t...

AI Technical Summary

Problems solved by technology

For the first method, no matter how the device sends the key, the key may be intercepted, resulting in a decrease in the security of the key; for the second method, although the device does not output the key, the The key is stored in the device. The device that stores the key is usually a ROM-like non-volatile storage medium. Based on the current reverse engineering technology, the complete key can still be obtained from the storage medium. The same applies to the first method above. The problem

At the same time, in order to ensure the security of information, there are usually situations such as regularly updating keys and adding new keys, so the key protection device is required to have the ability to update online to adapt to the user's flexible management of keys. The online update process is also the same. Increased risk of key exposure

Images