高性能密码服务器的并行数据处理

随着大型电子商务和电子政务系统中客户数量的增多,主机端密码系统的性能成为提供安全服务的限制因素。提出了一种基于可编程密码模块的密码服务器体系结构。通过在模块中使用密码算法代理抽象密码芯片运算资源,管理机可以调度系统计算资源支持多模块内多密码芯片间的并行密码运算。在IBMService345和SJW系列PCI密码卡上,设计实现了基于算法代理间并行运算的高性能密码服务器。测试结果显示:用20个SSX04模幂运算芯片间并行签名(1024 bitRSA)速率达到1100次/s;用10个对称密码算法芯片并行加密(ECB模式),系统吞吐率达到312.6Mbps。

Parallel data processing of high-performance cryptographic co-server

With more and more clients attached to a host, performance of cryptographic operations at the host has become a constraint that prevents the achievement of acceptable secure services at large e-commerce and e-governments. A cryptographic co-server architecture based on the programmable secure crypto modules is presented. By using crypto algorithm agents to abstract computation resource of crypto chips in modules, the crypto-manager can schedule system resources to support parallel data processing among crypto chips in crypto modules. Based on an IBM Services345 machine and series of SJW PCI crypto cards, the high-performance cryptographic co-server was designed and implemented by carrying cryptography computations in parallel among crypto algorithm agents. The test results indicate that: when computation in parallel among 20 SSX04 chips, the performance of generate 1024 -bit RSA digital signature is 1 100 operations per second; when computation in parallel among 10 symmetric chips, the throughput of encryption (ECB mode) was 312.6Mbps.