Research On OpenSSL Security Optimization Based On National Cryptographic Algorithm

At present,OpenSSL is the most widely used open source software of SSL protocol.But the application of high strength cryptographic algorithms in SSL protocol has been strictly limited. With the rapid development of the computer technology, the issues about security of OpenSSL based on convention cryptographic algorithms have gradually become more and more serious.National cryptographic algorithms is a series of high security, high performance algorithms,which are designed by State Encryption Administration.Those algorithms are suitable fot all the requirements in the field of network security.This graduation thesis is mainly about a kind of OpenSSL security optimization based on National cryptographic algorithm,which can improve the security of OpenSSL by using National cryptographic algorithms to protect the data on the Internet. First of all, the article analyzes the implementation standard,structure features and technical characteristics of various algorithms in OpenSSL.Then implement National cryptographic algorithms by OpenSSL standard,and transplant into OpenSSL cryptography library.Subsequently, the paper gives out a detailed analysis of both the key agreement mechanism andCryptographic algorithm conversion mechanism,which are using in OpenSSL framework. Finally, the paper proposes a technical method for the functional expansion of the two mechanisms and the optimization of the underlying performance.The extended OpenSSL framework after optimization can provide higher security by using SM2 in Key agreement,SM3 in data integrity protection and SM4 in data security protection.