面向嵌入式系统的加密算法性能检测方法

嵌入式系统信息安全是保障工业控制系统安全的必然要求,然而有限成本的硬件资源可能无法有效支撑加密算法应用所带来的额外计算开销。为研究面向嵌入式系统中加密算法移植的可行性和对系统性能的影响,提出了一个嵌入式系统加密算法性能度量方法,通过构建等效度量实现系统侧和密码侧两部分抽象层次的联系。实验利用该方法,以运行时间延迟、吞吐量和系统资源使用率为度量指标,完成对包括国产加密算法与轻量级算法等在内的多种不同配置加密算法的性能测评。实验结果表明加密算法密钥长度的增长会增加算法执行的延时,算法分组大小的增大会提高算法的运行速度,使用不同加密模式造成的性能影响随加密算法不同而表现出差异性。直接部署加密算法检测任务执行时系统的指标值可以简化测量,相比其他抽象模型在工业场景中的应用更有实际意义。

Methods of encryption algorithm performance detection oriented to embedded system

Embedded system security is an inevitable requirement for ensuring the security of industrial control systems. However, the cost-limited hardware resources may not be able to effectively support the additional calculation overhead brought by the application of encryption algorithms. In this paper, we focusd on the feasibility of the migration of encryption algorithms for embedded systems and the impact on the system performance. And a performance benchmark method of encryption algorithm for embedded system was proposed to realize the connection between the system side and the cipher side by constructing equivalent metrics. The experiment carried out by this method covered the performance benchmark of encryption algorithms with different configurations including domestic encryption algorithm and lightweight cryptography algorithm with running time delay, throughput and system resource utilization as metrics. The experimental results show that the increase in the encryption algorithm key length will increase the algorithm execution delay, and the increase in the algorithm packet size will accelerate the algorithm''s running speed. The performance impact caused by the use of different encryption modes will vary with the encryption algorithm. Direct deployment of encryption algorithm to detect system index values during task execution can simplify the measurement and is more practical than the application of other abstract models in industrial scene.