Design And Implementation Of Cryptographic Token Interface System Based On Suite-B

With the increase of network attacks, network traps and other security risks, many countries including China have promulgated cipher algorithms suitable for their own countries, respectively. Algorithm suites have different scopes and information levels of protecting. Perhaps owing to the awareness of RSA algorithm being under the risk of being cracked, the U.S. National Security Agency promulgated the ECC algorithm with Suite-B algorithm suite in 2009. In China, due to the absence of guidance and application of Suite-B algorithm in network security and data encryption, most of network application system is still using algorithm suite based on RSA, which has high security risk.The interface of PKCS#11 system is widely used in the field of network security. This thesis mainly researches on the interface of PKCS#11 system implemented by Suite-B algorithm suite. Besides, the object-oriented method for requirement analysis, design and implement of token interface system is proposed. First of all, based on the requiremnt analysis on token interface system, the target function is proposed, including token management and session management. Secondly, in the process of system design, key process and several classes such as key token are designed, which is the basis of system realization. Third, the system is implemented by C++ language, whose cryptographic algorithm logic is provided by LibTomCrypto. Finally, through interface system testing tools, various functions of the interface systems are tested. In addition, this paper also proposed the method to achieve scalability requirements of the algorithm suite, which is based on pure virtual technology and derivative technology from object oriented method.The research of this thesis shows that PKCS#11 can be achieved through the application of the Suite-B algorithm suite. This research provides a simple example of Suite-B algorithm application. Also, for other researchers, this research provides reference to the design and implementation of PKCS#11.