Design And Implementation Of New Architecture In Encryption Engine Based On Comware V7

The network communication data is growing in the world today,the security of data transporting has become the focus of attention.Especially in today's increasingly competitive,more and more people realize the importance of data security,data is wealth,technology,speed and victory in a sense.Large amounts of data is always producing in the world all the time,and a lot of it needed to be processed,stored,transmitted and exchanged.A subset of the data must be restricted its using range strictly within a certain period of time because of its significance,especially the political,military and financial data.Secure and reliable transmission of data can affect the operations and development of an enterprise,even the future and destiny of the whole nation,which has been highly valued on a global scale.Encryption engine has been widely used in today's communication network,which is as the best hardware technology to ensure the secure transmission of data between network nodes(mainly routers).The speed of hardware encryption engine for the encryption and decryption processes is obviously superior to the software.Moreover,it can meet the needs of network traficc transport for dozens or even hundreds of Gigabyte,and there is no additional memory consumption.Enciyption engine technology has become the focus of investment and competition for the network equipment provides.The encryption engine of Comware V7 is divided to hardware encryption and software encryption,work in this project is to design and implement the driver module of hardware encryption engine.Design of the driver module starts with the latest CCF(Comware Cryptographic Framework),it provides a more unified operation interface of cryptographic computation framework compared to the V5's OCF(OpenBSD Cryptographic Framework),it supports different hardware and software encryption cards and shield its encryption and decryption capabilities to users.Driver module need to realizes five functional interfaces:build unified interface of the confidential session creation and deletion around encryption card's operation;realize the symmetric and asymmetric algorithms' interface around specific cryptographic operation;realize the interface to get hardware random number from RSA engine.Different driver interface in V5 is designed to unified operation interface for platform software calling,the optimized OCF tend to be more robustness,malleability and readability compared to the OCF,and it provides a perfect framework foundation for encryption engine's functional extension and version upgrade.