| 张翠玲,孙琪,何峥,唐洪峰,姜郁峰,李帅良,李汉明.基于SM2SM3算法的域名系统安全扩展应用研究[J].高技术通讯(中文),2026,36(5):478~488 |
| 基于SM2SM3算法的域名系统安全扩展应用研究 |
| Research and application on DNS security extentions based on SM2SM3 algorithm |
| |
| DOI：10. 3772 / j. issn. 1002 - 0470. 2026. 05. 004 |
| 中文关键词: 域名系统；域名系统安全扩展；域名系统安全扩展签名算法替换；SM系列密码算法 |
| 英文关键词: domain name system (DNS), DNS security extensions, DNS security extentions algorithm rollover, SM cryptography algorithms |
| 基金项目: |
| 作者 | 单位 | | 张翠玲 | （中国互联网络信息中心北京 100070） | | 孙琪 | | | 何峥 | | | 唐洪峰 | | | 姜郁峰 | | | 李帅良 | | | 李汉明 | |
|
| 摘要点击次数: 27 |
| 全文下载次数: 12 |
| 中文摘要: |
| 域名系统（domain name system, DNS）作为互联网的基础设施，负责将人类可读的域名转换为机器可读的互联网协议(Internet protocol，IP)地址。然而，传统的DNS协议在设计时并未充分考虑安全性，容易受到诸如缓存投毒、中间人攻击等安全威胁。域名系统安全扩展（DNS security extensions, DNSSEC）通过引入数字签名机制，确保DNS响应的完整性和真实性，能够有效提升DNS系统的安全性，从而有效防止这些攻击。DNSSEC支持多种密码算法，RFC(request for comments)9563规定了在DNSSEC中使用SM2SM3算法的公钥记录、签名记录格式以及算法号。为推广国家商用密码(Shang Mi，SM)算法在DNSSEC领域的应用，本文对基于SM2SM3算法的DNSSEC应用关键问题进行了分析研究并提出解决方案。 |
| 英文摘要: |
| As the infrastructure of the Internet, the domain name system (DNS) is responsible for translating human-readable domain names into machine-readable Internet procotol (IP) addresses. However, traditional DNS protocols did not adequately consider security in their design and are susceptible to security threats such as cache poisoning and man-in-the-middle attacks. DNS security extensions (DNSSEC) ensures the integrity and authenticity of DNS responses by introducing a digital signature mechanism, which can effectively enhance DNS security to avoid these attacks. DNSSEC supports multiple cryptographic algorithms, and RFC 9563 specifies the format of DNS public key (DNSKEY) and resource record signature (RRSIG) resource records, and the algorithm number for using the SM2SM3 algorithm in DNSSEC. To promote the application of Shangmi algorithms in the field of DNSSEC, this paper analyzes and investigates the key challenges from both software and operational perspectives, and proposes solutions for DNSSEC implementation based on SM2SM3 algorithm. |
|
查看全文
查看/发表评论 下载PDF阅读器 |
| 关闭 |
|
|
|
