Linux下的網(wǎng)絡(luò)層加密解密的實(shí)現(xiàn)

論文字?jǐn)?shù):10714,頁數(shù):27

摘  要
隨著網(wǎng)絡(luò)技術(shù)在各行各業(yè)中的廣泛應(yīng)用，網(wǎng)絡(luò)安全逐漸成為一個重要的問題。Linux是一個優(yōu)秀的、開源的操作系統(tǒng)，非常適合作為一些新技術(shù)的測試平臺。本文修改Linux操作系統(tǒng)內(nèi)核的網(wǎng)絡(luò)協(xié)議，以實(shí)現(xiàn)對網(wǎng)絡(luò)通信數(shù)據(jù)的加密。先介紹了網(wǎng)絡(luò)數(shù)據(jù)加密的發(fā)展和現(xiàn)狀。接著分析了網(wǎng)際協(xié)議、DES加密算法和Linux下的網(wǎng)際協(xié)議的實(shí)現(xiàn)和套接字結(jié)構(gòu)。然后，實(shí)現(xiàn)了DES算法，對內(nèi)核進(jìn)行了修改，添加了一些功能性內(nèi)核模塊。在此基礎(chǔ)上設(shè)計和實(shí)現(xiàn)了一個位于IP層的端到端加密的系統(tǒng)，整個系統(tǒng)嵌入到Linux內(nèi)核中，可以通過內(nèi)核模塊對其進(jìn)行操作，來實(shí)現(xiàn)其功能。該系統(tǒng)的主要特點(diǎn)是針對IP地址判斷是否進(jìn)行加密操作。最后，通過測試驗證了系統(tǒng)設(shè)計的正確性。

關(guān)鍵字：網(wǎng)絡(luò)層；Linux內(nèi)核；端到端；加密；模塊；網(wǎng)絡(luò)通信The Implementation of Encryption and Decryption at Net Layer based on Linux

Abstract
With the abroad use of network technology in various trades, network security is becoming an important issue. Linux is an excellent Open-source Operating System and is very suitable for the test of some new technology. In this paper, the network protocol stack of the Linux operating system kernel is changed to encrypt network communication data. Firstly, introduces the development and actuality of the network data encryption. Secondly, analyses the inernet protocol, the DES encryption algorithm, and the implementation of internet protocol and the socket structure in the linux kernel. Whereafter, realizes the DES algorithm, changes the kernel, and adds some functional kernel modules. And then, an IP end-to-end encryption system is designed and implemented, and it is embeded in the linux kernel, we can achieve its function through kernel module. Lastly, a test is given to testify the correctness of the design.

Key Words: Net layer; Linux kernel; End-to-end; Encrypt; Module; Network communications

目    錄

1 引言 1
2 網(wǎng)絡(luò)數(shù)據(jù)加密技術(shù) 1
2.1 鏈路加密 1
2.2 節(jié)點(diǎn)加密 2
2.3 端到端加密 2
3 系統(tǒng)的總體分析 3
3.1 網(wǎng)際協(xié)議分析 3
3.2 套接字結(jié)構(gòu)分析 5
3.3 Linux下IPv4的實(shí)現(xiàn) 6
3.4 DES算法介紹 8
4 系統(tǒng)的設(shè)計與實(shí)現(xiàn) 12
4.1 系統(tǒng)的總體設(shè)計 12
4.2 模塊部分的設(shè)計與實(shí)現(xiàn) 13
4.3 DES算法實(shí)現(xiàn) 15
4.4 對內(nèi)核函數(shù)的修改 18
5 網(wǎng)絡(luò)層加密系統(tǒng)的測試 18
結(jié) 論 21
參考文獻(xiàn) 21
致 謝 22
聲 明 23