Method and device for decryption with website certificate private key of target website

Abstract

The invention aims at providing a method and a device for decryption with a website certificate private key of a target website. Concretely, a decryption network device sends a query request about anencrypted website certificate private key to a corresponding CA distribution management network device, receives the encrypted website certificate private key sent by the CA distribution management network device in response to the query request, performs decryption processing for the encrypted website certificate private key based on a private key generated by a corresponding hardware RSA decryption card so as to obtain a plaintext of the website certificate private key. Compared with the prior art, the method and the device provided by the invention realize the following beneficial effects:during a distribution process of the website certificate private key, the website certificate private key is encrypted, and asymmetric encryption is used, thus, safety of an encrypted secret key is guarantee further; and neither the hardware RSA decryption card nor the decryption network device where the hardware RSA decryption card is located stores the plaintext or a ciphertext of the website certificate private key permanently, so that the risk of being stolen of the website certificate private key is reduced further.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a technique for decrypting using a website certificate private key of a target website. Background technique [0002] HTTPS (Hyper Text Transfer Protocol, Hyper Text Transfer Protocol over Secure SocketLayer), is a security-oriented HTTP channel for secure HTTP data transmission. It has been widely used in security-sensitive communications on the World Wide Web, such as transaction payments, etc. . In the implementation of https, the security of the private key of the website certificate is a very important issue. If the private key of the website certificate is leaked, the attacker can pretend to be a legitimate website, or decrypt the encrypted traffic based on eavesdropping, which poses a serious threat to user privacy, password and asset security. [0003] Since the private key of the website certificate is used in the calculation of the https handshake phase, the priv...

AI Technical Summary

Problems solved by technology

Such a mechanism has the following problems: 1) First, during the calculation process, the private key of the certificate exists in plain text in the memory, which may be obtained by an attacker through a tool that reads the memory; 2) Second, it is stored persistently on the web server Although the private key of the certificate is encrypted, the software containing its decryption key or decryption method is often stored persistently on the same server

If the attacker obtains the certificate private key file and these software, it is also possible to crack the certificate private key to obtain plaintext

Images