Implementation method of sm4-gcm network encryption transmission system based on fpga

Abstract

The invention relates to an FPGA-based SM4-GCM network encryption transmission system implementation method, comprising the following steps: S1, receiving required data from a data preparation module, and sending parameters and keys into a random number module and a key expansion module respectively to generate Corresponding random number and extended key; S2, send the random number and plaintext to the encryption module for encryption; S3, send the obtained ciphertext, key and random number to the message authentication module to generate the HMAC value; S4, add / At the same time of decryption, the system will update the key required for the next time through the SM3 algorithm and the Pascal algorithm; the present invention uses the shake-128 algorithm in Keccak to realize the generation of random numbers, and improves the security of random numbers. And the optimization of message authentication operation improves its resource utilization and working frequency, and is more suitable for high-speed network environment; uses SM3 algorithm and Pascal algorithm to realize the safe change of keys, and combines with GMAC module to ensure the correctness of system key update sex.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to an implementation method of an FPGA-based SM4-GCM network encrypted transmission system. Background technique [0002] In recent years, with the development of 5G network technology, the rate of data transmission on the network has become faster and faster, and the amount of data has become larger and larger; at the same time, the attacks on the data transmission process have become more and more acute. In order to ensure the security of data transmission, data is often encrypted before transmission. However, due to the improvement of network data transmission rate and the upper limit of software encryption itself, the encryption rate requirements cannot be fully satisfied in high-speed networks, so the use of hardware to implement encrypted transmission has become a feasible solution. [0003] In the implementation process, in order to meet the high throughput of n...

AI Technical Summary

Problems solved by technology

However, the traditional hardware-based key exchange is implemented by asymmetric encryption method. The disadvantage is that the call of this part is not frequent, but it occupies a lot of resources and increases the cost.

And the encryption must wait for the key exchange to be completed. For a system with frequent key changes, the key exchange will undoubtedly greatly slow down the overall encryption / decryption efficiency of the system.

Secondly, due to the calculation method of GMAC, the message authentication part often slows down the operation of encryption / decryption in the environment of network encrypted transmission, which becomes the bottleneck of system performance.

[0005] In view of the key update and message authentication problems in the SM4_GCM method in the encrypted transmission network mentioned above, it is urgent to design an implementation method for improvement

Images