| With the development and application of the Internet, Electronic commerce(E-commerce) has also developed rapidly. However, E-commerce is based on theopen and free Internet, the weakness of its security has become a drawback for furtherapplication. Currently, all the transactions of E-commerce require that theinformation within the transactions should be secure, integrated and undeniable.Cryptology technique is the core of safeguarding information security. In termsof the difference between encryption key and decryption key, it can divide intosymmetry cryptogram and public key cryptogram. Because of the unsuitableness ofusing only symmetry cryptogram or public key cryptogram, it could hardly fulfill theinformation security requirement. A new hybrid cryptosystem based on AdvancedEncryption Standard (AES) and Elliptic Curve Cryptography (ECC) is proposed inthis study to synthesize the advantages of the symmetry cryptogram and public keycryptogram. It can improve the strength of encryption and the speed of processingsignificantly.In this study, first of all, it analyzes the process of encrypting/decrypting of theclassical cryptographic algorithm of DES and RSA in detail, in particular theirsecurity performance and disadvantages.Design principle and security of the AES algorithm were also presented in thiswork. Compared with DES algorithm, AES can improve the secure levels andperformance as well based our testing results.Finally, the implementation of the elliptic curves over prime fields was studied.An ECIES-KEM algorithm combined AES with ECC was proposed. ECC is set upon the basis of solving the Elliptic Curve Discrete Logarithm Problem (ECDLP). Atthe moment, ECC provides the highest strength-per-bit among all knowncryptosystem, and also has several advantages, such as less computation overhead,shorter key size, considerable bandwidth savings and so on. It could be the bestpublic key cryptosystem and have a great future for its application. |