目前,密钥成为用户进行身份验证的重要凭据,密钥安全存储在保证用户信息安全中起着重要作用。SM2算法具有高安全性、密钥管理简单等特点,本文首先对SM2算法作简要分析,通过引入USB Key硬件加密技术,提出了一种基于SM2算法的混合USB Key加密算法,通过引入多个变量生成复合多维度SM2密钥,提高了用户进行密钥存储的数据安全性。本文基于Windows 8操作系统,选用USB Key3000D作为开发平台,设计并实现了基于SM2硬件加密算法的用户密钥安全存储系统。经测试,该算法方便可行,加密、解密速度较快且安全性高,使用方便,具有良好的应用效果。

Currently, cipher has been an important credential to authentication of users, secure cipher storage plays an important role in information security of users. SM2 has high security and simple key management. This paper firstly gives a brief analysis of the SM2 algorithm, then by introducing USB Key hardware encryption, has provided a secure cipher storage system based on SM2 mixed with blended USB Key hardware encryption. This system has introduced multiple variables to generate blended multi-dimensional SM2 cipher, therefore, this way improves the data security of users’ cipher storage. We develop our system based on windows 8, choose USB Key3000D as development platform, design and implement a secure cipher storage system based on SM2 hardware encryption. After testing, this system is feasible and easy to use, the speed of encryption and decryption is fast and safe, it has a good ef ect.

SM4是国内于2006年公布的第1个商用的分组密码算法。为提高SM4算法安全性,抵御功耗分析、电磁辐射等侧信道攻击,提出一种抗侧信道攻击的SM4多路径乘法掩码方法。该方法在轮函数中采用多条数据路径,并对引进随机数后的S盒用有限域乘法求逆变换加以改进,使中间结果与标准SM4算法的中间结果完全不同,从而掩盖SM4加密过程中的所有关键信息,增加侧信道分析的难度。实验结果表明,与标准SM4算法和普通的SM4乘法掩码算法相比,该方法在芯片的功耗和硬件资源增加不大的情况下,能有效消除中间数据所产生的能量消耗,增强算法安全性,可成功抵御各种侧信道攻击。

SM4 is the first bloc cipher published in the year of 2006 by the government of China. In order to resist Side-channel Attack (SCA) such as power analysis and electromagnetic radiation, a multi-path multiplicative masking method is proposed for SM4 algorithm to improve the security of SM4 algorithm. Through multi data paths, and transform S box by multiplicative inversion in the finite field when the random number is joined, which makes all intermediate variables among the proposed SM4 scheme different from that of the standard method. It not only realizes the cover of all the key information in encryption process, but also enhances the difficulties of SCA. Through compared with the traditional algorithm and the existing schemes, the experimental results show that the mask scheme can weaken the correlation between the energy consumption characteristics and the operating of the intermediate data effectively without increasing much power and hardware resources. Thus the proposed method b

针对网络信息安全领域对数据加密和快速处理的需求，设计了一种基于 FPGA 和USB2.0芯片的数据加密盒，实现了高安全性的国产 SM4对称密码算法。该设备在30个明文分组、10000次循环的测试条件下数据加密速度可达到126 Mb/s。

A data encryption box based on FPGA and USB2.0 chip is designed for the demand of data encryption and fast processing in the field of network information security, on which the domestic symmetric cryptographic SM4 algorithm with high security is realized. The speed of data encryption is 126 Mb/s measured on condition of 30 plaintext packets and 10 000 loops.

针对特殊领域对大容量移动存储设备安全性的特殊要求,本文在SSX20-D安全芯片的基础上设计了存储数据安全保护、U盘密钥参数保护和U盘使用控制管理三层次的安全模型.采用了数据加密、U盘参数保护、加密密钥保护、口令硬件使用控制、U盘抗攻击等安全机制,将KEY的安全性拓展到大容量存储芯片中.特别是针对密钥参数保护这一安全薄弱环节设计了三级密钥保护方式,综合运用SM1算法、SHA-256算法和自定义函数确保密钥绝对安全.

Aiming at the special requriement of the mobile hing-capacity storage device’s safety in the special field, based on SSX20-D security chip, we designed the security model with three levels: data storage security protection, usb flash disk key parameter protection and usb flash disk using management. The security chip uses many security mechanisms, including data encryption, usb flash disk parameter protection, encryption key protection, password-hardware using control, and the usb flash disk anti-attack ability. The mechanism expended the Key’s safety to the hing-capacity storage chip. Especially it designed three-level key-protection method which can solve the safety weakness of the key parameter protection. We are using SM1, SHA-256 and self-defined function to make sure absolute security of the key.

为确保环保排污重要数据交互、存储的安全性以及后台系统与前端总量计量设备数据传输的安全性,本文结合现有的排污许可证制度,提出了将国密SM1加密算法非接触CPU卡作为信息载体在环保排污上的应用模式,并对目前在浙江省环保领域应用的具体案例进行了剖析.

In order to guarantee the environmental protection pollution discharge important data alternately, the memory security as well as the backstage system with the front end total quantity measurement equipment data transmission security, this article unifies the existing pollution discharge permit system, proposed must contacts the country dense SM1 algorithm the non-contact CPU card to take the information carrier in environmental protection pollution discharge application pattern, and has carried on the analysis to at present in the Zhejiang Province environmental protection domain application concrete case.