Abstract: The present disclosure provides a secure communication implementation method with software and hardware collaborative encryption. The method includes: after receiving a first network packet, querying, by an extended framework for routing and management (XFRM) module, a first mapping table through message identification information of the first network packet to obtain SA information corresponding to the message identification information; encapsulating the SA information in the first network packet and sending an encapsulated first network packet to a programmable logic (PL) hardware module; after receiving the encapsulated first network packet, parsing, by the PL hardware module, the SA information from the encapsulated first network packet, performing Internet protocol security (IPSec) protection on the first network packet based on the SA information to obtain a secured first network packet.

Abstract: The present disclosure provides a secure communication implementation method with software and hardware collaborative encryption. The method includes: after receiving a first network packet, querying, by an extended framework for routing and management (XFRM) module, a first mapping table through message identification information of the first network packet to obtain SA information corresponding to the message identification information; encapsulating the SA information in the first network packet and sending an encapsulated first network packet to a programmable logic (PL) hardware module; after receiving the encapsulated first network packet, parsing, by the PL hardware module, the SA information from the encapsulated first network packet, performing Internet protocol security (IPSec) protection on the first network packet based on the SA information to obtain a secured first network packet.