Design And Implementation Of An Encryption Interface For IPv6Networks

With the rapid development of computer network and communication technology, and they are widely used on the internet, how to ensure information security issues has caused widespread concern in society. One core issue of network security is to ensure that participants can communicate in a rival existing environment. Usually we can use a secure data encryption algorithm to ensure the security of information, which requires communicating parties share the session key of the communication. In order to make the communicating parties share a session key, we introduce authenticated key exchange protocol. Digital signature technology implements the authentication between communicating parties, which ensure the true identity of them, and the use of public key encryption technology make sure the key exchange process cannot be known to the third parties.This paper discusses design and implementation of an encryption interface which supports IPV6Ethernet; in this system we developed parallel and serial access. Through the research and analysis of existing technology of secure encryption interface, we determine that our system requires authentication and data encryption. First of all, this paper describes the system architecture, software and hardware consititution of the secure encryption interface. Hareware is consititued by ARM processor, encryption chip, FPGA and other peripheral chips; Software is divided into three layers, the bottom layer is linux operating system, the middle layer is the driver module, and the upper layer is the application software. Then we describe the implementation of cipher components (SM2, SM3algorthm) in the secure encryption interface. And then we describe the implementation of interface module, which fulfil the function of the data access from external applications, the session key exchange protocol and encrypting communication process. At last we test the core cipher components in the secure interface, and verify its correctness, also the system function, parallel and serial communication, is tested successfully.The implementation of the secure interface, which follows the trend of network development and information security, and provides a communication tool supporting IPV6protocol, it has a broad prospect in the market.