Cryptographic algorithm verification method suitable for electric power information system and related device

Abstract

The invention belongs to the technical field of electric power information security, and discloses a cryptographic algorithm verification method suitable for an electric power information system and a related device. The method comprises the following steps: acquiring an electric power information plaintext, a secret key, a cryptographic algorithm name and an expected result input by a user; according to a password algorithm name input by a user, calling a corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the electric power information plaintext and the key to obtain a verification result; comparing the verification result with an expected result input by the user to obtain a comparison result; and outputting the comparison result. According to the method, a national secret algorithm, an international algorithm and other algorithms are integrated, a one-stop verification service is provided, power enterprises can conveniently and rapidly switch and verify different algorithms, and verification efficiency and convenience are improved.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of power information security, and particularly relates to a password algorithm verification method suitable for a power information system and a related device. BACKGROUND

[0002] With the rapid development of information technology, the network security situation is becoming increasingly complex, and the power information system is facing severe security challenges. In the process of digital transformation of the power industry, a large amount of sensitive data such as power equipment operation parameters and user electricity information is transmitted and stored in the network, and data security is related to the stable operation of the power system and the vital interests of users.

[0003] Currently, the power information system uses multiple encryption algorithms to ensure data security, but the existing password algorithm verification methods have many problems. On the one hand, there is a lack of unified integrated and functionally complete verification platform for national encryption algorithms, international algorithms and other algorithms. When using different algorithms, power enterprises need to use multiple scattered tools to verify respectively, which is cumbersome and prone to errors, and cannot efficiently meet the diversified business needs. For example, when upgrading national encryption algorithms, it is difficult to quickly and comprehensively verify and adapt to new algorithms.

[0004] On the other hand, the existing verification process has low automation. It mostly relies on manual input of data, selection of algorithms and comparison of results, which is not only inefficient, but also prone to errors when facing a large amount of data and complex algorithms, resulting in inaccurate verification results and failure to timely discover potential security vulnerabilities of algorithms. At the same time, manual verification cannot meet the real-time verification requirements of the power system, and when network attacks or system failures occur, it cannot respond quickly and complete algorithm verification, which may cause data leakage, system paralysis and other serious consequences.

[0005] In addition, the existing verification tools have defects in security. There is a lack of effective data encryption transmission mechanism and strict permission management system, and user data is at risk of being stolen and tampered with during transmission and storage. SUMMARY

[0006] The present application aims to provide a password algorithm verification method suitable for a power information system and a related device to at least solve the technical problem of low automation of existing password verification methods.

[0007] To achieve the above-mentioned purpose, the present application adopts the following technical solutions: In a first aspect, the present application provides a password algorithm verification method suitable for a power information system, comprising: obtaining power information plaintext, a key, a password algorithm name and an expected result input by a user; According to the user input password algorithm name, the corresponding password algorithm is called to perform encryption, decryption, signature or signature verification operation according to the power information plaintext and the key, and a check result is obtained. The check result is compared with the user input expected result, and a comparison result is obtained. The comparison result is output.

[0008] The further improvement of the present application is that the algorithm corresponding to the password algorithm name includes national secret algorithm, international algorithm or other algorithm.

[0009] The further improvement of the present application is that the national secret algorithm includes SM2, SM3 and SM4; the international algorithm includes AES, DES, RSA, MD5, SHA1 and SHA256; and the other algorithm is RC4, RC5 or Vigenere.

[0010] The further improvement of the present application is that in the step of calling the corresponding password algorithm according to the user input password algorithm name to perform encryption, decryption, signature or signature verification operation according to the power information plaintext and the key, and obtaining a check result, the called password algorithm is split into key expansion and round function, the key expansion is executed by CPU, and the round function is executed by GPU in parallel. Wherein, a single memory address space is created by using CUDA Unified Memory, so that CPU and GPU can seamlessly access the same memory area, and CPU-GPU copy operation is reduced.

[0011] The further improvement of the present application is that the following steps are further included: according to the recorded result, a check report containing password algorithm, power information plaintext, check result, comparison result content is generated.

[0012] The further improvement of the present application is that the step of outputting the comparison result specifically includes: displaying the check report in the result display window.

[0013] In the second aspect, the present application provides a password algorithm check device suitable for power information system, which comprises: The acquisition module is used for acquiring the user input power information plaintext, key, password algorithm name and expected result. The check module is used for calling the corresponding password algorithm according to the user input password algorithm name to perform encryption, decryption, signature or signature verification operation according to the power information plaintext and the key, and obtaining a check result. The comparison module is used for comparing the check result with the user input expected result, and obtaining a comparison result. The output module is used for outputting the comparison result.

[0014] In a third aspect, the present application provides an electronic device comprising a processor and a memory, wherein the processor is configured to execute a computer program stored in the memory to implement the cryptographic algorithm verification method for power information systems.

[0015] In a fourth aspect, the present application provides a computer readable storage medium storing at least one instruction, wherein the at least one instruction is configured to be executed by a processor to implement the cryptographic algorithm verification method for power information systems.

[0016] Compared with the prior art, the present application has the following beneficial effects: The present application provides a cryptographic algorithm verification method for power information systems, comprising: obtaining power information plaintext, a key, a cryptographic algorithm name and an expected result input by a user; calling a corresponding cryptographic algorithm according to the cryptographic algorithm name input by the user to perform encryption, decryption, signature or signature verification operations on the power information plaintext and the key, and obtaining a verification result; comparing the verification result with the expected result input by the user to obtain a comparison result; and outputting the comparison result. The present application integrates national cryptographic algorithms, international algorithms and other algorithms to provide one-stop verification services in order to solve the problem of lack of unified platform in existing verification methods, facilitate power enterprises to quickly switch and verify different algorithms, and improve verification efficiency and convenience.

[0017] Further, the present application introduces automatic testing technology to solve the problem of low automation degree. Data automatic input, algorithm automatic selection, result automatic comparison and analysis are realized to reduce manual intervention, improve verification accuracy and efficiency, and meet the real-time verification requirements of power systems.

[0018] Further, in terms of security, the present application adopts multiple security protection measures. Sensitive data transmission is encrypted, strict identity verification and permission management are implemented, and log audit function is strengthened to ensure user data security, facilitate security audit and fault troubleshooting, and enhance the security and stability of the power information system. BRIEF DESCRIPTION OF DRAWINGS

[0019] The accompanying drawings, which form a part of the present application, are intended to provide further understanding of the present application, and the illustrative embodiments of the present application and their description serve the purpose of explaining the present application. The present application is not limited by the accompanying drawings. Figure 1 FIG. 1 is a flowchart of a cryptographic algorithm verification method for power information systems according to an embodiment of the present application; Figure 2 FIG. 2 is a structural diagram of a cryptographic algorithm verification device for power information systems according to an embodiment of the present application; Figure 3 FIG. 3 is a structural diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0020] The present application will be described in detail below with reference to the accompanying drawings and embodiments. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict.

[0021] The following detailed description is exemplary and is intended to provide further details of the present application. Unless otherwise defined, all technical terms used in the present application have the same meanings as generally understood by those skilled in the art. The terms used in the present application are only for the purpose of describing the specific embodiments and are not intended to limit the exemplary embodiments according to the present application.

[0022] Term explanation: SM algorithm: The SM algorithm is a series of data encryption processing algorithms independently researched and developed by China, and is also a domestic cryptographic algorithm approved by the National Cryptographic Bureau, which is a commercial cryptographic algorithm. Mainly including SM1, SM2, SM3, SM4, etc. SM1 is a symmetric encryption, and the security degree is equivalent to AES. The algorithm is not public, and is widely used in access control systems, e-government, e-commerce and various application fields of national economy (including important fields such as national government affairs and police affairs). SM2 is a non-symmetric encryption based on ECC (Elliptic Curve Algorithm), and the security and performance are higher than RSA. SM3 is a cryptographic hash (hash) algorithm for message digest. SM4 is a standard packet data algorithm for wireless local area networks, which is a packet symmetric encryption algorithm with higher security than 3DES. The SM algorithm verification tool platform can support the verification work of encryption, decryption, signing and signature verification of multiple SM algorithms.

[0023] International algorithm: The international algorithm is a cryptographic algorithm approved by the US Security Bureau, which is also a commercial cryptographic algorithm. Mainly including AES, DES, 3DES, RSA, MD5, SHA1, SH256, SH384, SH512, etc. Among them, RSA belongs to a non-symmetric encryption algorithm. AES, DES, 3DES belong to a symmetric encryption algorithm. MD5, SH256, etc. belong to a digest algorithm. International algorithm verification can support the verification work of encryption, decryption, signing and signature verification of multiple international algorithms.

[0024] Other algorithms: RC4, RC5, Vigenere, etc. RC4 is a wired equivalent encryption (WEP) algorithm, which has been disclosed, and is also one of the encryption algorithms that can be used by TLS. RC5 is a parameter variable group cipher algorithm. Vigenere algorithm is to encrypt or decrypt each character in the plaintext with the corresponding character in the key. Other algorithm verification can support the encryption and decryption verification of the above three algorithms.

[0025] Automated testing applications: Automated testing is a process that transforms human-driven testing behaviors into machine-executed processes. Typically, after test cases are designed and reviewed, testers execute the tests step-by-step according to the procedures described in the test cases, comparing the actual results with the expected results. To save manpower, time, or hardware resources and improve testing efficiency, the concept of automated testing was introduced. National cryptographic algorithm verification platforms can be applied in automated testing processes to generate and verify passwords by calling different APIs, significantly reducing the workload of manual statistics and verification.

[0026] This invention provides a cryptographic algorithm verification device suitable for power information systems. Based on a modular design, the device encapsulates various cryptographic algorithms into independent modules. By establishing a unified interface specification, it enables collaborative work between different algorithm modules and other functional modules of the platform. During algorithm verification, the device calls the corresponding algorithm module to perform calculations based on the user-selected algorithm and input data. The calculation results are compared with the expected results to determine the correctness of the algorithm. Utilizing an automated testing framework, test tasks are automatically executed according to a preset test case set, achieving batch verification and continuous monitoring.

[0027] When using the cryptographic algorithm verification device for power information systems according to this invention, the user first logs in. After successful login, the user selects the verification algorithm type, choosing from national cryptographic algorithms, international algorithms, or other algorithms. After selecting the algorithm type, the user inputs the corresponding data, and the system calls the corresponding algorithm module to process the data. After processing, the obtained result is compared with the expected result, and different processing is performed based on the comparison result. If the comparison passes, the success result is recorded and a report is generated, which the user can view to end the process; if the comparison fails, the failure result is recorded and the reason is analyzed, and improvement suggestions are provided to optimize the algorithm or platform.

[0028] Algorithm Integration Module: Integrates Chinese national cryptographic algorithms such as SM2, SM3, and SM4, as well as international algorithms such as AES, DES, RSA, MD5, SHA1, and SHA256, and other algorithms such as RC4, RC5, and Vigenere. A unified calling interface is provided for each algorithm module, facilitating user operations such as encryption, decryption, signing, and verification. For example, in the SM2 encryption module, the user inputs plaintext and a public key. Internally, the module converts the plaintext and public key from 16-bit to a byte array (as shown in the code in the document), and then calls the SM2 encryption algorithm to perform the encryption operation.

[0029] User interaction module: design simple and intuitive user interface, support user selection of verification algorithm, input data, view verification results. Through the graphical interface, reduce the user threshold, without professional technical knowledge can complete the operation. At the same time, provide operation guidance and prompt information, help users use the platform function correctly.

[0030] Automatic test module: users can create test case set by using the tools provided by the platform, set input data, expected results and other parameters. Automatic test module executes test according to the set rules, calls corresponding algorithm module for operation, and compares actual result with expected result. If the results are inconsistent, record error information and generate detailed test report.

[0031] Security protection module: use SSL / TLS and other encryption protocols to encrypt sensitive data transmission to prevent data from being stolen during network transmission. Establish a perfect identity verification and permission management system, only authorized users can access and use the platform functions, and different user roles have different operation permissions. Turn on log audit function to record all user operations and system running information, which is convenient for security audit and fault tracing.

[0032] The embodiment of the application provides a password algorithm verification method suitable for a power information system, comprising: S1. User login: the user inputs account and password in the platform login interface, the identity authentication module verifies, and enters the platform after passing.

[0033] S2. Select verification algorithm: the user selects national secret, international or other algorithm in the algorithm selection interface, such as selecting SM2 algorithm for asymmetric encryption verification.

[0034] S3. Input data and expected result: the user inputs plaintext, key and other data in the data input area, and fills in the expected encryption, decryption or signature verification result in the expected result area.

[0035] S4. Call algorithm module: the task scheduling module of the business logic layer calls the corresponding algorithm module of the algorithm processing layer according to the selected algorithm of the user, such as calling SM2 algorithm module.

[0036] S5. Execute algorithm operation: the called algorithm module executes encryption, decryption, signature or signature verification operation according to the input data.

[0037] S6. Get operation result: the algorithm module returns the result to the result processing module of the business logic layer after completing the operation.

[0038] S7. Compare results: the result processing module compares the operation result with the expected result input by the user.

[0039] S8. Record the result: if the comparison is consistent, record the success result; if it is inconsistent, record the failure result and related error information.

[0040] S9. Generate a verification report: according to the recorded result, generate a verification report containing the verification algorithm, input data, operation result, comparison conclusion, etc.

[0041] S10. Show the report: present the verification report in the result display window to the user, so that the user can understand the verification situation, and then end the verification process.

[0042] Please refer to Figure 1 The embodiment of the application provides a password algorithm verification method suitable for a power information system, which comprises the following steps: S100, obtaining the power information plaintext, key, password algorithm name and expected result input by a user; S200, according to the password algorithm name input by the user, calling the corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the power information plaintext and key, and obtaining a verification result; S300, comparing the verification result with the expected result input by the user to obtain a comparison result; S400, outputting the comparison result.

[0043] In a specific embodiment, the algorithm corresponding to the password algorithm name comprises a national secret algorithm, an international algorithm or other algorithms.

[0044] In a specific embodiment, the national secret algorithm comprises SM2, SM3 and SM4; the international algorithm comprises AES, DES, RSA, MD5, SHA1 and SHA256; and the other algorithm is RC4, RC5 or Vigenere.

[0045] In a specific embodiment, when processing high-concurrency password verification, a general server (such as a 2U rack, configured with two Xeon Platinum 8380 CPUs) faces the following bottlenecks: 1) Single-thread CPU performance is limited: SM4 group encryption can only reach 500 Mbps throughput on a single core (actual measurement of Intel Xeon 8380@2.6GHz); 2) Poor multi-core scalability: when the number of concurrent connections is >1000, lock competition between CPU cores causes a 30% performance drop; 3) Encryption algorithm and business logic compete for resources: password verification occupies CPU resources, causing a 50ms increase in Web service (Nginx) delay.

[0046] The embodiment of the application adopts heterogeneous computing resource pooling; Algorithm optimization: split the called cryptographic algorithm, such as SM4 encryption, into key expansion (CPU execution) and round function (GPU parallelism), and use the __launch_bounds__ optimization thread block configuration of CUDA; Memory access optimization: use CUDA Unified Memory to reduce CPU-GPU data copying, and the measured SM4 encryption throughput is increased from 500Mbps to 8Gbps (NVIDIA A100 GPU); Dynamic load balancing: realize multi-process sharing of GPU resources through NVIDIA MPS (Multi-Process Service), and avoid idle caused by single-process exclusive.

[0047] Technical effects: Test on Dell R750xa server (2x Xeon 8380 + 1x A100 GPU + 1x UltraScale): SM4 encryption throughput is increased from 500Mbps to 8Gbps (16 times); SM2 signature speed is increased from 400 times / sec to 20000 times / sec (50 times); CPU occupancy is reduced from 90% to 30%, and resources are released to business applications.

[0048] In a specific embodiment, the cryptographic algorithm verification involves a large number of memory operations (data copying, hash calculation), which becomes a performance bottleneck in the server scenario: Traditional copying overhead: data needs to be copied from user space to kernel space (copy_from_user) and then to the encryption card (DMA) each time, resulting in a 20% increase in CPU occupancy; Cache invalidation: frequent access to the S-box (256B) in the SM4 round function reduces the L1 cache hit rate to 60%; NUMA architecture impact: in a multi-CPU server, the memory access delay across NUMA nodes increases by 30%.

[0049] The method of the present application performs memory level depth optimization: 1), zero-copy memory management: Use DPDK (Data Plane Development Kit) to allocate large page memory (2MB / page) to avoid TLB (Translation Lookaside Buffer) misses; Map user space data to kernel space directly through mmap (Memory Map), eliminating the copy_from_user overhead; In combination with the RDMA (Remote Direct Memory Access) technology, cross-server zero-copy data transmission is realized (which is suitable for distributed password verification scenarios).

[0050] 2) NUMA-aware task allocation: Bind the encryption task to the NUMA node where the data is located through numactl; Maintain independent encryption queues for each NUMA node to reduce cross-node memory access; On a dual-channel Xeon 8380 server, the SM4 encryption throughput is increased by 15% after NUMA optimization.

[0051] 3) Cache-friendly data structure: S-box prefetch optimization: The S-box of SM4 is split into 4 64B sub-tables, which are prefetched to the 4 banks of L1 cache (utilizing the cache line padding mechanism of Intel CPU); Round function data alignment: Force the input data to be aligned by 64B (allocate memory through posix_memalign), avoid cross-cache line access; Hash calculation block: Split large files (>1MB) into 64KB blocks, release memory immediately after each block is calculated to reduce peak memory usage.

[0052] Technical effects: Memory copy overhead from 20% to 0% (zero copy); SM4 round function L1 cache hit rate from 60% to 95%; on a 16-core server, SM3 hash calculation throughput from 500Mbps to 1.2Gbps.

[0053] In a specific embodiment, the method further comprises the following steps: according to the recorded results, generating a verification report containing the password algorithm, the power information plaintext, the verification result, and the comparison result content.

[0054] In a specific embodiment, the step of outputting the comparison result specifically includes displaying the verification report in a result display window.

[0055] The present application is different from the traditional single algorithm verification tool, realizes the integrated verification of multiple algorithms, meets the complex business needs of power enterprises, reduces the dependence of enterprises on multiple verification tools, and reduces costs.

[0056] The present application introduces automatic testing technology, realizes full automation of the verification process, greatly improves verification efficiency and accuracy, and reduces labor costs and human errors.

[0057] In a specific embodiment, the application takes comprehensive security measures in data transmission, user authentication, permission management, and log auditing, etc., to protect the security of platform and user data, and to improve the overall security of power information systems.

[0058] The application focuses on the verification of cryptographic algorithms for power information systems, and optimizes and improves from the dimensions of security, efficiency, cost, and scalability, etc. Through the integration of multi-algorithm verification, automated testing, and strengthened security protection, etc. innovative technologies, the problems of traditional verification methods are solved, and a strong defense line for power system data security is built, promoting the development of digital security in the power industry.

[0059] Please refer to Figure 2 The embodiment of the application provides a cryptographic algorithm verification device suitable for a power information system, which comprises: An acquisition module is configured to acquire power information plaintext, a key, a cryptographic algorithm name, and an expected result input by a user. A verification module is configured to call a corresponding cryptographic algorithm according to the cryptographic algorithm name input by the user to perform encryption, decryption, signature, or signature verification operations on the power information plaintext and the key, and obtain a verification result. A comparison module is configured to compare the verification result with the expected result input by the user to obtain a comparison result. An output module is configured to output the comparison result.

[0060] In a specific embodiment, the cryptographic algorithm name corresponds to an algorithm including a national cryptographic algorithm, an international algorithm, or other algorithms; the national cryptographic algorithm includes SM2, SM3, and SM4; the international algorithm includes AES, DES, RSA, MD5, SHA1, and SHA256; and the other algorithm is RC4, RC5, or Vigenere.

[0061] In a specific embodiment, the comparison module is further configured to generate a verification report containing the cryptographic algorithm, the power information plaintext, the verification result, and the comparison result content according to the recorded result; and the output module is specifically configured to display the verification report in a result display window.

[0062] In a power information system, data security is crucial. The algorithm integration module is included in the verification module of the application; the algorithm integration module integrates national cryptographic algorithms, international algorithms, and other algorithms, and can comprehensively verify the correctness and security of various algorithms. Taking the national cryptographic algorithm SM2 as an example, it is based on the elliptic curve algorithm and has a higher security level than RSA. Through strict verification of the SM2 algorithm by the platform, the security of data transmission and storage in power system identity authentication, key exchange, and other scenarios can be effectively guaranteed. In theory, the encryption strength of the SM2 algorithm makes it difficult for attackers to obtain data through brute force cracking, providing high-level security protection for sensitive information in the power system.

[0063] In actual application scenarios, compared with the case of not using the device for algorithm verification, after using the device, the risk of data leakage caused by network attacks on the system is significantly reduced. For example, in the regional power grid data transmission system of a certain power enterprise, due to incomplete algorithm verification, a security incident of data tampering occurred before the device was deployed. After the device was deployed, through continuous verification and monitoring of related algorithms, no similar data security problems occurred in the one-year operation time, which effectively proves the positive role of the device in improving the security of power information systems.

[0064] Traditional password algorithm verification relies on manual operation, which is inefficient and prone to errors. The present application introduces automated testing technology, greatly improving verification efficiency. The device can automatically perform verification tasks according to pre-set test cases, realizing batch verification of multiple algorithms. For example, when verifying 100 groups of different data for AES algorithm encryption and decryption, manual verification takes an average of 2 hours and is prone to human error. Using the automated testing function of the device, the entire verification task can be completed in only 10 minutes, and the results are accurate and error-free.

[0065] Through experimental comparison, in the same test environment (a server equipped with an Intel Core i7 processor and 16GB of memory, and 1000 groups of data containing different lengths of plaintext and keys), verification of common algorithms such as AES, DES, and SM4 was performed. Manual verification takes an average of 3-5 minutes to complete each group of data verification, while the automated testing function of the device takes an average of less than 10 seconds per group of data verification, with an efficiency improvement of 18-30 times. This efficiency improvement enables power enterprises to complete algorithm verification work in a shorter time, promptly identify and resolve algorithm issues, and ensure the stable operation of power information systems.

[0066] In terms of human resource costs, the automated testing function reduces a large amount of manual verification work. Taking a medium-sized power enterprise as an example, in the past, 5 professional and technical personnel were needed for password algorithm verification each year, with a human cost of about 150,000 yuan per person per year, totaling 750,000 yuan. After using the device, only 1-2 technical personnel are needed for daily monitoring and maintenance, with an annual human cost of less than 300,000 yuan, saving more than 50% of human resource costs.

[0067] From the time cost, the high efficient verification speed of the device greatly shortens the time of algorithm verification in project development and system maintenance. In the development process of new functions of the power system, the integration and verification of various cryptographic algorithms are involved. After using the device, the verification time is shortened from the original average of 2 weeks to 3 days, which speeds up the overall progress of the project, saves the time cost for the enterprise, enables the new functions to be put into use faster, and improves the market competitiveness of the enterprise.

[0068] The device adopts an open architecture design and has good expansibility. With the continuous development of cryptographic technology, new algorithms are emerging. The device can conveniently integrate new national cryptographic algorithms, international algorithms or other algorithms. For example, when a new national cryptographic algorithm standard appears, the device development team only needs to develop the corresponding algorithm module according to the interface specification of the platform, and perform simple configuration and testing, so as to integrate the new algorithm into the device. This feature enables the power enterprise to face the changing security requirements without rebuilding the entire verification system. Only by simply upgrading the device can the new algorithm verification requirements be met, the cost of system upgrading and maintenance is reduced, the service life of the platform is prolonged, and strong support is provided for the long-term safe and stable operation of the power information system.

[0069] Please refer to Figure 3 The electronic device 100 provided by the embodiment of the present application is used to realize a cryptographic algorithm verification method suitable for a power information system. The electronic device 100 comprises a memory 101, at least one processor 102, a computer program 103 stored in the memory 101 and capable of running on the at least one processor 102, and at least one communication bus 104.

[0070] The memory 101 can be used to store the computer program 103. The processor 102 realizes the steps of the cryptographic algorithm verification method suitable for the power information system by running or executing the computer program stored in the memory 101 and calling the data stored in the memory 101. The memory 101 can mainly comprise a program storage area and a data storage area. The program storage area can store an operating system, at least one application program required by a function (such as a sound playing function, an image playing function, etc.), etc. The data storage area can store data (such as audio data) created according to the use of the electronic device 100, etc. In addition, the memory 101 can comprise a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, at least one disk storage device, a flash memory device, or other non-volatile solid-state storage devices.

[0071] The at least one processor 102 can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic, discrete hardware components, etc. The processor 102 can be a microprocessor or can also be any conventional processor, etc., which is the control center of the electronic device 100 and connects all parts of the electronic device 100 through various interfaces and lines.

[0072] The memory 101 in the electronic device 100 stores a plurality of instructions to implement a cryptographic algorithm verification method suitable for a power information system, and the processor 102 can execute the plurality of instructions to implement: obtaining power information plaintext, a key, a cryptographic algorithm name and an expected result input by a user; According to the cryptographic algorithm name input by the user, a corresponding cryptographic algorithm is called to perform encryption, decryption, signature or signature verification operation according to the power information plaintext and the key, and a verification result is obtained; comparing the verification result with the expected result input by the user to obtain a comparison result; outputting the comparison result.

[0073] The modules / units integrated in the electronic device 100, if realized in the form of software function units and sold or used as independent products, can be stored in a computer readable storage medium. Based on this understanding, all or part of the processes in the above-mentioned embodiment methods can also be completed by a computer program instructing related hardware, and the computer program can be stored in a computer readable storage medium. When the processor executes the computer program, the steps of the above-mentioned various method embodiments can be implemented. The computer program includes computer program code, which can be in the form of source code, object code, executable files or some intermediate forms, etc. The computer readable medium can include any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, magnetic disk, optical disk, computer memory and read-only memory (ROM).

[0074] Those skilled in the art will appreciate that embodiments of the application can be devised for a method, a system, or a computer program product. Accordingly, the present application can be embodied in the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application can take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROMs, optical storage devices, etc.) embodying computer readable program code.

[0075] The present application is described in reference to the flowchart and / or block diagrams of the method, apparatus (system) and computer program product according to embodiments of the application. It will be understood that each block of the flowchart and / or block diagrams, and combinations of blocks in the flowchart and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processing device or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks.

[0076] These computer program instructions can also be stored in a computer- readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the function specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks.

[0077] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks. Figure 1 one or more functions specified in the flowchart and / or block diagram block or blocks.

[0078] Finally, it should be noted that the above-mentioned embodiments are merely intended for describing the technical solutions of the present application, but not for limiting it. Although the present application is described in detail with reference to the above embodiments, those skilled in the field should understand that the specific embodiments of the present application can be modified or replaced equivalently without departing from the spirit and scope of the present application, and any modification or equivalent replacement without departing from the spirit and scope of the present application should be covered in the protection scope of the claims of the present application.

Claims

1. A method for checking a cryptographic algorithm for use in a power information system, characterized by, The method comprises the following steps: obtaining the plaintext of power information, a key, a password algorithm name and an expected result input by a user; according to the password algorithm name input by the user, calling a corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the plaintext of power information and the key, and obtaining a verification result; comparing the verification result with the expected result input by the user to obtain a comparison result; outputting the comparison result.

2. The password algorithm verification method for power information system according to claim 1, wherein, The algorithm corresponding to the password algorithm name comprises a national algorithm, an international algorithm or other algorithms.

3. The password algorithm verification method for power information system according to claim 2, wherein, The national algorithm comprises SM2, SM3 and SM4; the international algorithm comprises AES, DES, RSA, MD5, SHA1 and SHA256; and the other algorithm is RC4, RC5 or Vigenere.

4. The password algorithm verification method for power information system according to claim 1, wherein, In the step of calling the corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the plaintext of power information and the key according to the password algorithm name input by the user, the called password algorithm is split into a key expansion and a round function, the key expansion is executed by a CPU, and the round function is executed in parallel by a GPU. A single memory address space is created by using CUDA Unified Memory, so that the CPU and the GPU can seamlessly access the same memory area, and the CPU-GPU copy operation is reduced.

5. The cryptographic algorithm verification method for power information systems according to claim 1, characterized in that, The method further comprises the following steps: generating a verification report containing the password algorithm, the plaintext of power information, the verification result and the comparison result content according to the recorded result.

6. The password algorithm verification method for power information system according to claim 5, wherein, The step of outputting the comparison result specifically comprises displaying the verification report in a result display window.

7. A cryptographic algorithm verification device for a power information system, characterized by The method comprises the following steps: an obtaining module for obtaining the plaintext of power information, a key, a password algorithm name and an expected result input by a user; a verification module for calling a corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the plaintext of power information and the key according to the password algorithm name input by the user, and obtaining a verification result; a comparison module for comparing the verification result with the expected result input by the user to obtain a comparison result; an output module for outputting the comparison result.

8. The cryptographic algorithm verification device for power information system according to claim 7, wherein, The algorithm corresponding to the password algorithm name comprises a national algorithm, an international algorithm or other algorithms; the national algorithm comprises SM2, SM3 and SM4; the international algorithm comprises AES, DES, RSA, MD5, SHA1 and SHA256; and the other algorithm is RC4, RC5 or Vigenere.

9. The cryptographic algorithm verification device for power information system according to claim 7, wherein, In the step of calling the corresponding password algorithm to perform encryption, decryption, signature or signature verification operation according to the plaintext of power information and the key according to the password algorithm name input by the user, the called password algorithm is split into a key expansion and a round function, the key expansion is executed by a CPU, and the round function is executed in parallel by a GPU. A single memory address space is created by using CUDA Unified Memory, so that the CPU and the GPU can seamlessly access the same memory area, and the CPU-GPU copy operation is reduced.

10. The cryptographic algorithm verification device for power information system according to claim 8, wherein, The comparison module is further configured to generate a verification report containing the password algorithm, the power information plaintext, the verification result and the comparison result content according to the recorded result; and the output module is specifically configured to display the verification report on the result display window.

11. An electronic device, comprising: The computer readable storage medium stores at least one instruction, and the at least one instruction is executed by the processor to implement the method for verifying the password algorithm applicable to the power information system according to any one of claims 1 to 6.

12. A computer-readable storage medium, characterized in that, The computer readable storage medium stores at least one instruction, and the at least one instruction is executed by the processor to implement the method for verifying the password algorithm applicable to the power information system according to any one of claims 1 to 6.

Images