基于PCIE密码模块在可信平台上的研究

摘要

To meet the application requirements in cryptographic module on the trusted platform, which was connected to cryptographic module using the high-speed PCI express, and three improvement from the hardware layer to the application layer were undertaken.Cryptographic service DLL at the application layer was increased.The device driver was extended at the system la-yer (multi-user mechanism).Transmitted data in the command packet format were packaged at the hardware layer.The cryptographic module read data with DMA (directional memory access) block transfer and the multi-user operation was implemented.Experimental results show that the processing speed of cryptographic algorithm achieves higher throughput.%为满足密码模块在可信平台上的应用需求,采用高速通信接口PCI-Express与密码模块连接,从应用层到硬件层进行三点改进:在应用层中,创建密码服务函数动态库;在系统层中,对设备驱动程序进行功能扩展(实现多用户机制);在硬件层中,对传输的数据进行命令包格式封装.密码模块以DMA(directional memory access)块传输方式读取数据,实现多用户操作.实验结果表明,密码算法处理速度达到了预期的吞吐率.