摘要
数据库加密中,主要采取敏感字段的加密设计机制,敏感字段同密钥一一对应,但如果所有的密钥全部预设势必产生新的安全问题。因此,数据库加密密钥如何产生及保管便成为重中之重。为此,可以采取一种密钥派生机制,实行二级密钥管理,包括管理密钥与加密密钥。加密密钥用于加密敏感字段,它是通过DES加密算法,对管理密钥进行的16轮加密迭代中,提取的每轮迭代结果。管理密钥需要预先设定,但为数不多;加密密钥通过程序实现,动态生成,无需预设。用户只需要保管好少数几个管理密钥即可,无需考虑加密密钥的安全存储与通讯。通过DES加密算法派生加密密钥,可以实现保管少数管理密钥,派生256倍级的加密密钥,基本可以解决数据库加密中对密钥的需求,同时又保障了加密密钥的安全存储与管理。
One encryption design mechanism based on sensitive fields is mainly adopted in database encryption,which sensitive fields is correspondence to keys one by one.But if all the keys are fixed in advance,new security problem will emerge.So how to generate and save the encryption keys is of grent importance.One derivative echanism of two-stage encryption key is adopted,including management keys and encryption keys.encryption keys which come from the transformed results in sixty round of DES encryption algorithm on main keys are used to encrypt sensitive fields.Only a few management keys are needed to set in advance,but the encryption keys are dynamically generated by programming.What the user needs to do is to store several management keys safely,without considering the security storage and communication of the encryption keys.The way of deriving encryption keys by DES Encryption Algorithm can meet the needs of encryption keys in database encryption,and derive 256 times encryption keys for the safety storage and management of the encryption keys.
出处
《广西师范大学学报（自然科学版）》
CAS
北大核心
2011年第3期125-130,共6页
Journal of Guangxi Normal University:Natural Science Edition
基金
国家自然科学基金资助项目(61073189)
关键词
DES加密算法
二级密钥
管理密钥
加密密钥
DES encryption algorithm
double encryption-key
management key
encryption key
