Hardware encryption and decryption system and method

Abstract

The invention provides a hardware encryption and decryption system and method. The hardware encryption and decryption system comprises a receiving buffer module, an allocation module, an algorithm pool, a collection module, an intermediate buffer module and a sending buffer module which are integrated in an encryption and decryption module. The invention discloses a hardware encryption and decryption system and method. Algorithms in an algorithm pool can be called for multiple times for data packets of different protocols such as TLS / IPsec sent into an encryption and decryption module; according to the encryption and decryption method and device, the encryption and decryption of the data packet are completed, the data packet which is completely processed and decrypted is output through the sending buffer module, the whole encryption and decryption processing process does not need processor logic intervention, the operation load of a processor is reduced, maximum utilization of algorithm resources is achieved, and the encryption and decryption processing efficiency of the data packet is effectively improved.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a hardware encryption and decryption system and method. Background technique [0002] FPGA (Field-Programmable Gate Array), that is, Field Programmable Gate Array, is a product of further development on the basis of programmable devices such as PAL, GAL, and CPLD. It emerged as a semi-custom circuit in the field of application-specific integrated circuits (ASIC), which not only solves the shortcomings of custom circuits, but also overcomes the shortcomings of the limited number of original programmable device gates. [0003] In the information age where information security is increasingly valued by people, data processing and storage products require not only the function of processing data, but also the functions of virus protection and encryption and decryption. In response to this requirement, there are currently two schemes on the market, software encryption and decry...

AI Technical Summary

Problems solved by technology

However, since the encryption and decryption process of a data packet may need to undergo multiple algorithm (such as SM3, SM4, etc.) processing, and after each algorithm processing is completed, it needs to be traced back to the CPU to re-plan the data packets that have not completed the encryption and decryption process. Once the algorithm is processed until the data packet completes all the encryption and decryption algorithm steps; however, in the above encryption and decryption process, the data packet needs to be sent back multiple times between the CPU and the FPGA to complete the encryption and decryption process, which increases the resource utilization of the CPU , increasing the operating load of the CPU; at the same time, the multiple return process will also reduce the efficiency of data packet encryption and decryption processing

Images