SQL Server透明数据加密方法分析

本文介绍了透明数据加密方法的理论知识和实现方法,分析了该加密方法的缺点和限制,并为方法的使用给出了一些建议.     

一个灵活的非对称签名与加密服务的实现

XML Web服务作为面向服务开发的核心．在实际应用中如果只采用简单用户身份验证的SOAP（Simple Object Aecess Protocol）消息传递还存在许多安全漏洞，并不能防止SOAP消息在传递过程中的XMl数据截取、篡改等严重的安全性威胁。文章在非对称签名与加密的原理及XML Web服务技术的基础上．提出了建立一个用户自定义的灵活的非对称签名与加密服务的方法。说明了此方法的特点，并给出了．NET平台上的部分实现代码。     

随机数在加密技术中的应用分析

加密技术是一种重要的信息系统安全技术，本文介绍了随机数的概念以及其在加密技术中的重要作用和主要应用。     

A computer package for measuring the strength of encryption algorithms

Designers and users of encryption algorithms used in cipher systems need a systematic approach in examining their ciphers prior to use, to ensure that they are safe from cryptanalytic attack. This paper describes a computer package used for assessing the security of newly-developed encryption algorithms.     

A uniform-complexity treatment of encryption and zero-knowledge

We provide a treatment of encryption and zero-knowledge in terms of uniform complexity measures. This treatment is appropriate for cryptographic settings modeled by probabilistic polynomial-time machines. Our uniform treatment allows the construction of secure encryption schemes and zero-knowledge proof systems (for allNP) using only uniform complexity assumptions. We show that uniform variants of the two definitions of security, presented in the pioneering work of Goldwasser and Micali, are in fact equivalent. Such a result was known before only for nonuniform formalization. Nonuniformity is implicit in all previous treatments of zero-knowledge in the sense that a zero-knowledge proof is required to “leak no knowledge” onall instances. For practical purposes, it suffices to require that it isinfeasible to find instances on which a zero-knowledge proof “leaks knowledge.” We show how to construct such zero-knowledge proof systems for every language inNP, using only a uniform complexity assumption. Properties of uniformly zero-knowledge proofs are investigated and their utility is demonstrated. This research was partially supported by the Fund for Basic Research Administered by the Israeli Academy of Sciences and Humanities. Revision of this work was supported by Grant No. 89-00312 from the United States-Israel Binational Science Foundation (BSF), Jerusalem, Israel.     

企业网络信息安全问题及其解决方案研究

本文介绍了企业信息安全问题及其解决方案，文中首先对企业网络建设面临的安全威胁进行了阐述，然后以目前企业普遍采用的一种网络环境为例提出了详细的安全解决方案，最后就信息加密问题进行了讨论。     

冶金企业中网络数据信息安全研究

研究了冶金企业数据信息对内对外的安全性：数据信息对外的安全性通过防火墙和虚拟专用网技术(VPN)实现，对内的信息安全通过数据加密和数字签名技术来保证。文中重点研究了数据加密技术和数字签名技术，并给出了混合加密和数字签名联合使用的实现策略，该策略已在数家冶金企业中实施并得到检验。     

3G系统全网安全体制的探讨与分析

文章基于3GPP体制探讨了3G系统的安全机制，重点分析了3G认证与密钥分配协议、加密与完整性保护的过程及其安全性，并针对核心网部分，从ATMPRM出发讨论了将安全功能置于ATM协议栈中不同位置时的几种安全方案。     

A Software-Optimized Encryption Algorithm

We describe the software-efficient encryption algorithm SEAL 3.0. Computational cost on a modern 32-bit processor is about 4 clock cycles per byte of text. The cipher is a pseudorandom function family: under control of a key (first preprocessed into an internal table) it stretches a 32-bit position index into a long, pseudorandom string. This string can be used as the keystream of a Vernam cipher. Received 3 May 1996 and revised 17 September 1997     

基于DSP的高速RSA加解密实现

在开发RSA加解密算法用DSP实现的基础上,给出了几种提高RSA运算速度的方法,给出了一种高效的长整数求余算法,引入窗口法幂乘算法,并结合到求余算法中,最后提出了伪余数的概念。结果表明,经过引入上述方法,提高了RSA加解密算法的速度。