High-speed information safety processor

Abstract

The high-speed information security processor of the present invention comprises: embedded processor CPU, soft code engine, internal bus, data transceiver, PCI / PCMCIA bus interface, control path and data path, said soft code engine comprises reconfigurable code Arithmetic logic unit, standard cryptographic arithmetic logic unit, random number generator connected to internal bus, data packet distributor, password control register, input queue and output queue. The high-speed information security processor does not need additional conversion circuits, can directly support various network protocols, and enables users to realize their self-defined cryptographic arithmetic logic components in the form of software programming, with flexible application methods and more complex cryptographic algorithms It is special and easy to keep secret.

Description

Technical field [0001] The invention relates to a high-speed information security processor. Specifically, it relates to high-speed information security processing chips used in routers, e-commerce, digital broadcasting and other fields that require information to be encrypted / decrypted. Background technique [0002] Information security involves the country's supreme interests and security, and the interests of business groups. Therefore, countries tend to develop their own independent information security systems. The information security processors that have been developed in China, such as the SSX04 chip, can perform the actual work of RSA and other cryptographic acceleration operations, but these security chips usually only support one or more cryptographic algorithms, which is relatively simple. There are still the following shortcomings: [0003] 1.) There are no user-reconfigurable algorithm components in the chip, so if the algorithm is no lo...

AI Technical Summary

Problems solved by technology

[0003] 1.) There is no user-reconfigurable algorithm component in the chip, so if the algorithm is no longer secure, it cannot be compensated by changing the algorithm in time

[0004] 2.) Data packet processing is separated from cipher processing, so that encrypted data needs to be transmitted multiple times between various network processing components, which affects the encryption rate

Images