Algorithm Research And Hardware Implementation Based On PKI System

With the rapid development of Internet technology,the network is closely related to people's lives.Almost all user information will be stored and flowed on the network.Information security issues have become increasingly prominent.Cryptography is an important guarantee for information security.Our country has established public keys.A cryptographic infrastructure(PKI)system to provide a standard-compliant key management platform and security services.In the public key cryptosystem,a key pair(encryption key and decryption key)is used for data encryption and decryption,and the private key does not need to be transmitted,which greatly improves the security of encrypted information.The two most widely used public key ciphers are RSA ciphers and elliptic curve ciphers.RSA cipher and elliptic curve cipher can be realized by software or hardware.With the development of Internet of Things technology,people have higher and higher requirements for information transmission speed,and the way of software implementation can no longer meet the demand,while the hardware implementation of cryptographic algorithms is not only fast but also highly secure,which is a hot research topic.This thesis conducts in-depth research on RSA cryptographic algorithm and elliptic curve cryptographic algorithm.Through the combination of software and hardware,a general security algorithm IP is designed.The IP is divided into two parts:hardware and software.The hardware system realizes the basic operation unit of RSA cipher and elliptic curve cipher,the software system builds the algorithm library for signature and verification,encryption and decryption of RSA and elliptic cryptography.In the hardware system,basic operation units such as large number arithmetic,finite field arithmetic and elliptic curve arithmetic are mainly realized.An improved modular inverse algorithm is proposed in the design,which can calculate the greatest common divisor while calculating the modular inverse to ensure the correctness of the operation.In order to improve the security of the key,a scalar blinding algorithm for dot multiplication operation of elliptic curve cryptography is proposed,and a NAF rule sequence encoding method is used,which effectively improves the operation speed.For point addition and point doubling operations,the Jacobian coordinate transformation method is used to avoid the modular inverse operation and improve the operation efficiency.In the software system,the RSA and SM2algorithm libraries are built,and the RSA-CRT algorithm is used to speed up the encryption and decryption of RSA,which speeds up the encryption and decryption.This IP is used in a car security chip,using UMC 55nm process for tape out,and the area is 10 mm~2,the test results show that the when chip is at a clock frequency of 200Mhz,2048-bit RSA encryption and signature verification speed is 120 times/s,decryption and signature speed is 65 times/s;SM2 signature speed is 80 times/s,signature verification speed is 35 times/s,encryption speed is 41 times/s,decryption speed is 61 times/s.