Method of establishing tls channel based on national secret algorithm

A national secret algorithm and channel technology, which is applied in the field of establishing TLS channels based on the national secret algorithm, which can solve the problem that the theory of the national secret algorithm cannot be transformed into practical network security applications.

CN103118027BActive Publication Date: 2016-01-20CHINA FINANCIAL CERTIFICATION AUTHORITY
3 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2016-01-20

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention relates to the technical field of network safety and provides a transport layer security (TLS) channel constructing method based on a cryptographic algorithm. The TLS channel constructing method includes steps that: a server side launches a request and a client side respond to a hello message, or the client side launches the hello message; the server side responds to the hello message of the server side; the server side transmits an SM2 certificate to the server side and then transmits a hello completing message; the client side receives the hello completing message and then transmits a secret key exchange message; the client side transmits a cipher suite change message and a finishing message, and the server side transmits the cipher suite change message and the finishing message after receiving the finishing message of the client side; and the server side and the client side perform data safe transmission according to the agreed safety parameters after receiving the finishing messages of each other and passing verification. According to the TLS channel constructing method, the cryptographic algorithm is blended into a TLS protocol to perform safety communication, the signature speed is obviously superior to that of a remote signaling alarm (RSA) algorithm by aid of short secret key length, and the TLS channel constructing method is a data safety method with the 2048-bit safety level of the RSA algorithm.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the technical field of network security, in particular to a method for establishing a TLS channel based on a national secret algorithm. Background technique

[0002] Cryptographic algorithms are mathematical functions used for encryption and decryption, and are the basis of cryptographic protocols. Current cryptographic algorithms mainly include sequence ciphers, block ciphers, public key ciphers, hash functions, etc., which are mainly used to ensure information security and provide authentication , integrity, non-repudiation and other services. Commercial encryption refers to the encryption technology and encryption products used for encryption protection or security authentication of non-classified information, and is mainly used in general industrial and commercial fields that do not involve state secrets. Due to the emergence of many different cryptographic algorithms based on different encryption and decryption ideas in t...

Examples

Embodiment Construction

[0024] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Apparently, the described embodiments are part of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0025] Network security is essentially information security on the network. Even if the data in the network is protected from accidental or malicious damage, change, or leakage, it ensures continuous and reliable operation of the system and uninterrupted network services. There are many factors affecting network security, but since the National Secret Algorithm is an application-level technology, the present invention also mainly focuses on the data security of network applications, especiall...