一种数据隔离加密技术的研究及实现
|
摘要
本文概述了数据物理隔离技术及存储信息加密技术的发展过程。在深入研究了常见物理隔离技术实现方案中存在的各种问题后，提出了一种基于CPLD的全新实现方案；同时，对于存储信息的加密也进行了研究，详细阐述了基于移位寄存器的非线性组合序列密码的设计方法，提出了完整的设计流程，并设计了一个基于FPGA的非线性组合反馈序列密码芯片，该芯片能提供高质量的伪随机密钥流。经实验板测试表明，我们提出的物理隔离技术的实现方案能弥补现有一些系统的不足，如：各分区容量设置灵活，各分区间切换方便等。加密芯片经仿真测试表明：加密算法所生成的密钥序列具有良好的伪随机特性，并且对密钥的变化具有良好的扩散性和严格的雪崩特性(SAC)，也就是说，该算法能够产生高质量的伪随机密钥流。从而能提供很高的信息保护能力。
In this thesis we genally describe the developing process of the technology of physical isolation and data encryption. After deeply studying all kinds of problems of current actualization methods, we put forward to a new actualization method of the technology of physical isolation on the base of CPLD. We make a lot of research on data encryption and describe the design method of the encryption chip on the base of LFSR (linear feedback shift register). After putting forward to the whole design procedure, we design an encryption chip on the base of LFSR, which can provide the high-quantity data stream of encrtption. Through testing the testing board, we conclude that the new actualization method has such advantages as setting randomly the capacity of a hard disk, translating the working disk conveniently and so on. By the mock test of the encryption chip, we make a conclusion that the encryption data stream which is generated by the chip has such advantages as good randomicity, good expandability in correspondence with change of password and SAC (strict avalanche criterion). That is to say, it can provide such a high-quantity data stream of encryption that we can improve the ability of data encryption.
In this thesis we genally describe the developing process of the technology of physical isolation and data encryption. After deeply studying all kinds of problems of current actualization methods, we put forward to a new actualization method of the technology of physical isolation on the base of CPLD. We make a lot of research on data encryption and describe the design method of the encryption chip on the base of LFSR (linear feedback shift register). After putting forward to the whole design procedure, we design an encryption chip on the base of LFSR, which can provide the high-quantity data stream of encrtption. Through testing the testing board, we conclude that the new actualization method has such advantages as setting randomly the capacity of a hard disk, translating the working disk conveniently and so on. By the mock test of the encryption chip, we make a conclusion that the encryption data stream which is generated by the chip has such advantages as good randomicity, good expandability in correspondence with change of password and SAC (strict avalanche criterion). That is to say, it can provide such a high-quantity data stream of encryption that we can improve the ability of data encryption.
引文
1．孔斌物理隔离的引申——安全网闸，国家保密技术研究所，保密工作。
2．杜虹 加强电子政务安全建设，摘自2002年8月，计算机安全。
3．物理隔离——让数据河水不犯井水，摘自4．19互联网周刊。
4．张连杰，物理隔离是涉密网信息安全的必要保证，计算机安全。
5．禹晓庆，第三代物理隔离技术产品，2001年7期，保密工作。
6．王育民，刘建伟，通信网的安全——理论与技术，西安电子科技大学出版社。
7．卢开澄，计算机密码学．清华大学出版社，1998．12。
8．杨义先，林须端，编码密码学，人民邮电出版社，P519 520 199212。
9. National Bureau ofstandards, NBS FIPS PUB 46, "DataEncryption Standard", Nationd Bureauofstandards, U. SDepartmentotCommerce, Jan1977.
10. 5. R. L. LILier, A. Sh[Illlir, and L. M. Adleman, "A Method for Obtalnong Digital Signature and Public Key Cryptosystems", Communications of * theications ACM,VZI; No, 2, p 120-126, Feb 1978.
11. C. E, Shanmon, "Communication Theory of Secrecy Systems", Bell System kchology Jounal Vol. 28, p656_715, 1949.
12．王恒青，宋如敏，微机硬盘管理实用详解。
13. ATA/ATAPI-5, Revision 3 29 February 2000, T13 Technical Editor.
14. W. Diffie and M. E. Hellman, "New Direction In Cryptography", IEEE Tansactlon on Information Theory, Vol .IT 22, No6, p644_654, 1976.
15. O.GOLDREICH, H. KRAWCZYK, and M. LUBY"On the existence of pseudorandom generators", Proceedings of the IEEE 29th gAnual Symposium on Foundations of Compute Science p 12_24.1998.
16. J.L. MASSEY and S. SERCONEK, "A Fourier transform aproachto the linear complexityex... of nonlinearly filtered sequences", Advances in Cryptology- - CRYPTO' 94 (LNCS839) p332A140, 1994.
17．宋万杰，罗丰，吴顺军，CPLD技术及其应用，西安电子科技大学，2000．6。
18．赵曙光，郭万有，杨颂华．可编程逻辑器件原理、开发及应用，电子科技大学出版社。
19．杨恒，卢飞成，FPGA／VHDL快速工程实践入门与提高，北京航空航天大学出版社。
20．黄正谨，CPLD系统设计技术入门与应用，电子工业出版社。
21．徐志军，徐光辉，CPLD／FPGA的开发与应用，电子工业出版社。
22．陈云洽，CPLD应用技术与数字系统设计，电子工业出版社。
23．任晓东，文博，CPLD／FPGA高级应用开发指南，电子工业出版社。
24．廖裕评，陆瑞强，CPLD数字电路设计，清华大学出版社。
25．ALREAR公司主页HTTP://WWW.ALTERA.COM。
2．杜虹 加强电子政务安全建设，摘自2002年8月，计算机安全。
3．物理隔离——让数据河水不犯井水，摘自4．19互联网周刊。
4．张连杰，物理隔离是涉密网信息安全的必要保证，计算机安全。
5．禹晓庆，第三代物理隔离技术产品，2001年7期，保密工作。
6．王育民，刘建伟，通信网的安全——理论与技术，西安电子科技大学出版社。
7．卢开澄，计算机密码学．清华大学出版社，1998．12。
8．杨义先，林须端，编码密码学，人民邮电出版社，P519 520 199212。
9. National Bureau ofstandards, NBS FIPS PUB 46, "DataEncryption Standard", Nationd Bureauofstandards, U. SDepartmentotCommerce, Jan1977.
10. 5. R. L. LILier, A. Sh[Illlir, and L. M. Adleman, "A Method for Obtalnong Digital Signature and Public Key Cryptosystems", Communications of * theications ACM,VZI; No, 2, p 120-126, Feb 1978.
11. C. E, Shanmon, "Communication Theory of Secrecy Systems", Bell System kchology Jounal Vol. 28, p656_715, 1949.
12．王恒青，宋如敏，微机硬盘管理实用详解。
13. ATA/ATAPI-5, Revision 3 29 February 2000, T13 Technical Editor.
14. W. Diffie and M. E. Hellman, "New Direction In Cryptography", IEEE Tansactlon on Information Theory, Vol .IT 22, No6, p644_654, 1976.
15. O.GOLDREICH, H. KRAWCZYK, and M. LUBY"On the existence of pseudorandom generators", Proceedings of the IEEE 29th gAnual Symposium on Foundations of Compute Science p 12_24.1998.
16. J.L. MASSEY and S. SERCONEK, "A Fourier transform aproachto the linear complexityex... of nonlinearly filtered sequences", Advances in Cryptology- - CRYPTO' 94 (LNCS839) p332A140, 1994.
17．宋万杰，罗丰，吴顺军，CPLD技术及其应用，西安电子科技大学，2000．6。
18．赵曙光，郭万有，杨颂华．可编程逻辑器件原理、开发及应用，电子科技大学出版社。
19．杨恒，卢飞成，FPGA／VHDL快速工程实践入门与提高，北京航空航天大学出版社。
20．黄正谨，CPLD系统设计技术入门与应用，电子工业出版社。
21．徐志军，徐光辉，CPLD／FPGA的开发与应用，电子工业出版社。
22．陈云洽，CPLD应用技术与数字系统设计，电子工业出版社。
23．任晓东，文博，CPLD／FPGA高级应用开发指南，电子工业出版社。
24．廖裕评，陆瑞强，CPLD数字电路设计，清华大学出版社。
25．ALREAR公司主页HTTP://WWW.ALTERA.COM。