Implementation Of P4080 Security Engine Under The Comware V7 System

The network technology is developed at a tremendous pace, and the data transmission on the network becomes faster and faster. As a consequence, the network security is in urgent demand. Network security is a major topic of research because cyber attackers pose a threat to national security. Without doubtful, Cryptology is an important research work in the domain of information security. As an important group of network security protocols, IPSec (IP Security) achieves the main functions of network security and meets most needs. Encryption and authentication mechanisms provided by IPSec technology are based on cryptology, is a typical application of modern cryptography. The P4080 with built-in eight enhanced Power Architecture(?) e500mc kernel, up to 1.5 GHz working frequency and Data Path Acceleration Architecture (DPAA), will be used widely as a main platform to implement IPSec protocols.In this thesis, we used the CCF (Comware Cryptographic Framework) to provide a general application interface of cryptography algorithm framework, which is implemented in the Comware V7 network operating system. Our drivers support different soft-encryption and encrypt-cards, and the encryption function is transparent to users. As an interface between products and CCF module of Comware software platform, our drivers provide encryption card a unified interface to create or delete session. According to the specific cryptographic operations, encryption function implemented in this driver engine can be divided into symmetric and asymmetric encryption algorithm.As a basic function of the P4080 encryption engine supporting router, we implement the basic function and algorithm of IPSec protocols with a variety of encryption algorithm mechanism. Finally, several test cases were built to allow for validation of this driver engine. The result shows that the combination tests are quite normal.