Research Of Elliptic Curve Cryptosystem Based On ONB And Implementation Of IP Core

In the rapid development of computer and network technology today, public-key cryptosystem has been widely used which is the key cryptosystem technology in building network security. However, with the increase in computing power, the classic public-key cryptosystem such as RSA,Diffe-Hellman have been hardly challenged with the key length less than 1024bit. Though lengthen key can enhance security, the complexity of implementation increases. Elliptic Curve Cryptosystem(ECC) is a short key and high-security public-key cryptography,160bit security of ECC is as good as 1024bit security of RSA, especially the one which is based on Optimal Normal Basis(ONB) and suitable to hardware implementation. Therefore it is very necessary to research and implement ECC based on ONB.Based on deep analysis of the binary field operations on ONB, prime field operations and elliptic curve operations, this thesis proposes an IP core implementation of ECC which is applied to FPGA in combination of the Elliptic Curve Cryptographic Protocol.In the implementation, the algorithm of SHA-256, HMAC and AES-128 has been chosen as the Hash Function, Message Authentication Code and Symmetric Encryption Function.The paper proposes a simple and effective reduction algorithm which is based on look-up table in the prime field operation.ECC IP core can achieve seven different kinds of funticons, including ECDSA signature, ECDSA signature verification, ECIES encryption, ECIES decryption, ECDH as well as AES-128 encryption and decryption. The outside interface of IP core use the configured form which can choose 32 bit or 16 bit according to the needs of users. In addition, users can enter the appropriate commands to select the corresponding IP core functions.The simulation results show that the maximux clock frequency of the IP core is 18Mhz, occupy a total of 67330 ALUTs and 30649 registers. In the 10Mhz clock frequency simulation, ECDSA signature is 60Mbit/s, ECDSA signature verification is 32Mbit/s, ECIES encryption is 60Kbit/s, ECIES decryption is 86Kbit/s, ECDH is 500 times/s, AES-128 encryption is 71Mbit/s and AES-128 decryption is 60Mbit/s.