SSL encryption and decryption method, system, and computer-readable storage medium

Abstract

The invention discloses an SSL encryption / decryption method, a system and a computer-readable storage medium. The SSL encryption / decryption system comprises a client, a server and an encryption / decryption server. The method comprises the following steps: the client generates a random number password in the SSL encryption / decryption process and generates the random number password to the encryption / decryption server. The encryption / decryption server encrypts the random number password asymmetrically and returns the encrypted random number ciphertext to the client; the client sends the random number ciphertext to the server. The server sends a decryption request of the random number ciphertext to the encryption / decryption server. The encryption and decryption server decrypts the random number ciphertext and sends the decrypted random number cipher to the server. The server implements the subsequent SSL encryption process with the client according to the random number password. The invention reduces the hardware cost of the client and the server, does not affect the internal hardware design of the client and the server, and reduces the overall cost of a system comprising a plurality of groups of the client and the server.

Description

technical field [0001] The invention relates to the technical field of network communication security, in particular to an SSL encryption and decryption method, system and computer-readable storage medium. Background technique [0002] SSL (Secure Sockets Layer, Secure Sockets Layer), and its successor, Transport Layer Security (TLS), is a security protocol that provides security and data integrity for network communications, and is used to encrypt network connections at the transport layer . [0003] HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer) is to add the SSL layer under HTTP, that is, the secure version of HTTP, and its encryption method is realized based on SSL. HTTPS was originally used to provide authentication and encrypted communication methods, and now it is widely used in online security-sensitive communications, such as transaction payments. [0004] SSL encryption process such as figure 1 shown. [0005] 1. The client initiates an HTTPS req...

AI Technical Summary

Problems solved by technology

However, the encryption in step 5 usually uses an asymmetric encryption algorithm. There is no special instruction in the current CPU, and only ordinary CPU instructions can be used for decryption. Because a large number of calculations are involved, the decryption performance of this step is very poor.

[0013] The current way to solve this problem is to add encryption and decryption cards on the client and server. However, this method will increase the hardware cost of each client and server. For the decryption system, it may be necessary to add an encryption and decryption card in each client, resulting in excessive system cost; and it will also affect the hardware design of the client and server itself

Images