基于国密 SM1算法的 CPU 卡应用

摘要

为了解决 Mifare 1加密技术、算法的破解带来的安全隐患，经过市场调研和技术对比，发现 CPU 卡采用动态密码和双向认证，安全性有较大提升。而基于国密 SM1算法的 CPU 卡采用国家密码管理局组织制定的国密 SM1算法，高达128 b 的密钥长度以及算法本身的强度和不公开性保证了通信的安全性，用这类 CPU 卡来代替原有的 IC 卡，用于解决门禁卡片的安全问题。通过系统一年以来的试运行，达到了设计目标。%In order to solve the potential safety hazard brought by the breaking of Mifare 1 encryption technology and algo⁃rithm,through market survey and technology comparison,it is found that dynamic password and mutual authentication applied to CPU card can increase its security. The CPU card based on SM1 cryptographic algorithm adopts SM1 cryptographic algorithm drafted by State Password Bureau,its password length with 128 b,strength and non⁃public properties of the algorithm guarantee the safety of communication. If this kind of CPU card is used instead of the original IC card,the security problem of entrance guard card can be solved. The actual application of the system for one year proved that the system reached the design goal.