Cryptography for secure shell in emulated environments
AssigneeUnisys Corporation
InventorsKevin F. Clayton, Yuko Onishi, Raymond Campbell
Life of this patent
Estimating the term…
Abstract
Calls from an application in an emulated environment to a module in the operating system hosting the emulated environment may be combined to reduce the overhead of accessing the module. An application handling secure shell (SSH) communications may execute multiple calls to a cryptographic module in the host operating system. Because many calls to the cryptographic module during SSH communications follow patterns, two or more related calls may be combined into a single combined call to the cryptographic module. For example, a call to generate a server-to-client key and a call to generate a client-to-server key may be combined into a single call.
Claims20
A method for providing secure communications to an application in an emulated environment, comprising:
- providing an interface for the application executing in the emulated environment of a host operating system, in which the application accesses a security module in the host operating system through calls to the interface;
- identifying two or more related calls, from the application to the module, for processing data during secure shell communications, in which the two or more related calls comprise at least one of:
- a call to a CreateHash function;
- a call to a HashData function;
- and
- a call to a GetHashValue function;
- combining the two or more related calls into a single call;
- and
- executing a single combined call to the module of the host operating system to perform the two or more related calls.
A computer program product for providing secure communications to an application in an emulated environment, comprising:
- a non-transitory computer-readable medium comprising:
- code to provide an interface for an application executing in an emulated environment of a host operating system, in which the application accesses a security module in the host operating system through calls to the interface;
- code to identify two or more related calls, from the application to the module, for processing data during secure shell communications, in which the two or more related calls comprise at least one of:
- a call to a CreateHash function;
- a call to a HashData function;
- and
- a call to a GetHashValue function;
- code to combine the two or more related calls into a single call;
- and
- code to execute a single combined call to the module of the host operating system to perform the two or more related calls.
An apparatus for providing secure communications to an application in an emulated environment, comprising:
- a processor;
- and
- a memory coupled to the processor, in which the processor is configured:
- to provide an interface for an application executing in an emulated environment of a host operating system, in which the application accesses a module in the host operating system through calls to the interface;
- to identify two or more related calls, from the application to the module, for processing data in secure shell communications, in which the two or more related calls comprise at least one of:
- a call to a CreateHash function;
- a call to a HashData function;
- and
- a call to a GetHashValue function;
- to combine the two or more related calls into a single call;
- and
- to execute a single combined call to the module of the host operating system to perform the two or more related calls.
Dependencies are inferred from the claim text.