关键词: SSL/TLS协议, SM2算法, RSA算法, 自动切换算法, OpenSSL

Abstract: Based on observation?that security of national commercial cipher algorithms（national cipher  algorithms） is stronger than general cipher algorithms, and the performance is weaker than general cipher algorithms, an automatic switching algorithm between SM2 and RSA based on OpenSSL is designed in order to improve system security under the premise of performance standards. SSL/TLS handshake protocol is given the priority to use SM2 algorithm, before new connections per second reaches a certain peak. When the new connection rate of SM2 can not meet the demand, the system automatically switches to the RSA algorithm to reach the higher rate. The algorithm is extended on the data structure and function of OpenSSL. The experimental results show that the SM2 algorithm and RSA algorithm can be switched automatically when the new SSL/TLS connection rate reaches a certain value. The algorithm can effectively improve the system security under the premise of meeting the performance requirements.

Key words: SSL/TLS, SM2 algorithm, RSA algorithm, automatic switching algorithm, OpenSSL