| With the fleet development of internet in the world, the security is more and more serious. The IPSec protocol is one of the feasible schemes which can be used to deal with the problem of IP communication security. Advanced Encryption Standard (AES) is a block arithmetic which is better than Data Encryption Standard (DES).It can provide the more secure protection of encryption. At the same time, people bring forward some new arithmetic modes. The new modes can be fit to the different protocols and accomplish the different service functions. They can afford much more choices for the communication peers. Therefore, if the new modes are applied into the real communication, they can exert their characteristics and satisfy the requirement of the integrality and the security in the more environments.The research of this dissertation all is base on the router of the Maipu Communication Technology Co., Ltd, and the primary obtaining productions are listed as follows:Firstly, to analyze some arithmetic mode, including, CMAC, XCBC, CTR and CCM, and to learn about their characteristics. Then, to accomplish coding according to their operation flows and fill them into the arithmetic library.Secondly, to designe the solving scheme which is used to append the function of negotiating pseudo-random fuction in the main mode of IPSec protocol and code it. Then, according to the characteristics and applied protocol of the arithmetic modes, the flows are recomposed which are used by sending and receiving the messages in the negotiation, accomplish the application of the arithmetic modes.Finally, to validate that the communicaton both of using IPSec protocol with the new function and the new arithmetic modes can accomplish the negotiation, establish the security tunnel and communicate normal with each other. With the performance testing, to illuminate that the throughput under the protecting of the new modes is not much fall, and the modes can be applied in the market productions. |
PDF Full Text Request