摘要： 引入流概念来结构化数据报通信单元,介绍了基于流的数据报加密方案。本技术不必通过交换消息而获取密钥,保留了数据报的无连接性,采用了流状态表和密钥缓冲机制,为面向会话的安全服务提供了较高的效率,还论述了该方案在BSD内核中的实现技术。

关键词: 数据流, 数据报加密, 密钥缓冲

Abstract: In this paper, we advocate the use of flows as a basis for structuring secure datagram communications. Our technology achieves zero-message keying, thus preserving the connectionless nature of datagram, and makes use of flow state table and key cache, thus providing the per-packet processing efficiency of session-oriented schemes. And we provide a description of our implementation in the 4.4BSD kernel.

中图分类号: 

• TP309.7