Method and device for protecting data on basis of AES real-time encryption

Abstract

The invention relates to a method and a device for protecting data on the basis of AEC real-time encryption. The method comprises the following steps: generating an initial key by a true random number generator in a system, storing the generated initial key into a nonvolatile memory, and then generating each-round expandable sub-keys by the initial key in the nonvolatile memory. The invention has the following advantages: in the whole process, only commands for starting the true random number generator is controlled by a processor, the other procedures are realized by a hardware circuit, the processor and software are prohibited from participation, and bus transaction is not involved, thereby ensuring the safety of the key and preventing the key from being revealed; a sub-key expansion RAM is lead in by adopting AES crypto-algorithm encryption, an address automatically adds 1 or subtracts 1 according to each-round encryption/decryption operation, thereby solving the system speed bottleneck problem caused by too long elapsed time for expanding the key in the AES algorithm realized by the traditional method; and a buffer is added between the processor and the channel of the AES algorithm, thus improving the encrypting/decrypting speed, and realizing programme operating on an encrypted memorizer in real time.

Description

technical field [0001] The invention relates to the field of SOC integrated circuit design, in particular to a data protection method and device based on AES real-time encryption. Background technique [0002] In the embedded SoC system, it is a hot and difficult problem in the current embedded system application to effectively protect the key content in the memory and achieve real-time encryption of the memory. At present, the key technical problems that need to be solved urgently in this field are as follows: First, the management of keys, whether it is a symmetric cipher or asymmetric cipher, its security largely depends on the key. During operation, the key is leaked, which is easily intercepted and cracked by attackers. For key management, traditional practices fall into the following categories: [0003] a) Input from outside the system will increase the risk of being intercepted by attackers during channel transmission, or use asymmetric ciphers (such as RSA, etc.) ...

AI Technical Summary

Problems solved by technology

In addition, this algorithm is encrypted with the mature and safe AES encryption algorithm. According to the characteristics of the AES algorithm, a 32x128 structure sub-key expansion RAM is introduced. The address of this RAM will be automatically increased or decreased by 1 according to each round of encryption / decryption operations to solve the problem. The AES algorithm implemented by the traditional method has a system speed bottleneck problem due to the time-consuming key expansion

Images