Aes Encryption Algorithm In The Fc-san,

With the development of network storage technology, storage architecture adopts storage area network through the Fiber Channel (FC) connectivity, and integrates system-wide storage resources to improve utilization efficiency. However, because of containing many switches or gateways of the storage network allows users from multiple access points to access storage resources, the chances of being attacked and unauthorized access will be greatly improved. Therefore SAN security problem can not be ignored. Storage encryption as an important means to protect data security will be growing concern.Storage encryption means when the data output from the front servers, or before of be written into the storage media adoption of the system for data encryption, this ensures the data that be stored in the storage media only authorized to correctly read after decryption. Based on the research of the Advanced Encryption Standard, AES algorithm is applied to fiber channel storage area network (FC-SAN) system to ensure the safety of data.This paper puts the data encryption in FC-SAN security technology as the research background; introduces the basic structure of the SAN as well as the FC protocol, analysis the AES encryption algorithm of the basic principles, algorithm structure and it's performance. This paper also discusses the hardware implementation of AES algorithm detailed. For the AES encryption algorithm applied in FC-SAN, using the pipeline structure of the counter mode of AES encryption algorithm, also describes the hardware implementation process.The design of AES encryption system dedicates to protect static data stored in disk or tape. The AES encryption system is located before storage devices in network, when AES encryption system incepts the FC data, the system parse data types, this system only encrypts data frames. Data is encrypted before be written into the storage device and decrypted before be read. Through simulation and actual environmental test can verify this AES encryption system.