Encryption and decryption method, device and system

Abstract

The embodiment of the invention provides an encryption and decryption method, device and system, aiming to at least solve the problem that the verification between initiating end equipment and response end equipment cannot be performed under an existing AES-SIV mechanism in the case that the initiating end equipment does not know an MAC address of the response end equipment in advance. The methodincludes the following steps: enabling first equipment to acquire a first public key of second equipment; generating a first key and a first public key hash value at least according to the first public key of the second equipment; generating a first vector at least according to a preset MAC address and an MAC address of the first equipment; encrypting a first plaintext at least according to the first key and the first vector to generate a first ciphertext; sending a first message to the second equipment, or sending a second message to third equipment, and enabling the third equipment to send athird message to the second equipment, wherein the first message or the second message or the third message at least includes the first ciphertext, the first public key hash value and a first publickey of the first equipment; or, the scheme of the invention is applicable to the field of communication.

Description

Technical field [0001] The present invention relates to the field of communications, in particular to encryption and decryption methods, devices and devices. Background technique [0002] The device provisioning protocol (English: device provisioning protocol, abbreviation: DPP) is usually used for authentication between the initiator device and the responder device. Among them, in the process of performing verification, it is necessary to use an advanced encryption standard-synthetic initialization vector (English: advanced encryption standard-synthetic initialization vector, abbreviation: AES-SIV) mechanism. [0003] Under the AES-SIV mechanism, the initiator device at least uses the shared key of the responder device and the vector (English: vector) generated by the initiator device to encrypt the plaintext to obtain the ciphertext; the responder device uses at least the initiator device The shared key of the device and the vector generated by the responding device decrypt the ...

AI Technical Summary

Problems solved by technology

[0006] Embodiments of the present invention provide encryption and decryption methods, devices, and systems to at least solve the problem that under the existing AES-SIV mechanism, the initiating device and the response cannot be completed if the initiating device does not know the MAC address of the responding device in advance. The problem of authentication between end devices

Images