76 results about "Block cipher" patented technology

According to the instant application, there are provided systems and methods to create a quantum secure / resistant secure communication channel (QSR-SCC) for communication between two or more end-points at or within devices, applications, services, APIs, secure communication protocols, etc. In one example of a QSR-SCC, a quantum secure / resistant private network (QSR-PN) extends existing VPN solutions using one time pad (OTP) based keys, augmented handshake mechanisms, and interchangeable ciphers, for example, stream ciphers or block ciphers, for enhancing security associated with the QSR-PN.

The invention belongs to the field of passwords, and discloses an anti-quantum message authentication code construction method and system adopting an adjustable block cipher. The MAC generation method comprises the steps that two communication parties share a key value K generated by a key generation algorithm, the label length tau = Tag is agreed, the tau is limited to be smaller than or equal to n, and n represents the packet length; and taking the key K, the message M and the unique value N as input to generate a tau-bit message authentication code Tag. Furthermore, the MAC verification method verifies the generated message authentication code, and judges whether the message is correct or not and whether the message is accepted or not. According to the method, the adjustment handle value is an encryption result of a unique value initially, and then the adjustment handle is updated by using a function h when the adjustable block cipher is called every time. The method has the quantum attack resisting capability, and compared with the existing known MAC scheme with the quantum attack resisting capability, the required storage is small under the condition of providing the same quantum security intensity.

The invention relates to a time-sensitive network end-to-end secure communication method, and belongs to the technical field of communication. According to the method, a TSN terminal system of Linux is used for realizing bidirectional identity authentication and key agreement based on an SM2 cryptographic algorithm, and an SM4-CCM algorithm is used for realizing time-sensitive network security communication and data integrity verification; the SM2 national secret algorithm is an asymmetric encryption algorithm, a signature pair is generated based on an elliptic curve discrete logarithm problem, the two parties negotiate a shared key through elliptic curve point operation, a public key of a receiver is used for encryption, and only a private key can be used for decryption; sM4-CCM is a combination of an SM4 block cipher algorithm and a CCM mode, and is used for providing confidentiality, integrity and authenticity of data; according to the CCM mode, through combination of CTR encryption and CBC-MAC authentication, efficient authentication encryption is realized. The method can be used for real-time secure communication in a high-reliability industrial scene.

The present disclosure relates to an authenticated encryption method, apparatus, system, and computer program for providing enhanced security and extension of a nonce length, and more specifically, the present disclosure discloses a method for performing authenticated encryption using a computing apparatus, the method including: producing a plurality of intermediate values, based on a given input value; generating a random number, based on a combination of a plurality of intermediate random values produced by performing block cipher-based encoding on the plurality of intermediate values; and performing encryption or decryption, based on the random number.

The invention discloses an anti-quantum block cipher coprocessor operation method for a computer monitoring system, and the method comprises the following steps: S1, loading data to generate a random number and a secret key, and splicing the random number and the secret key with a preset initialization vector to generate an input state; s2, receiving the associated parameters and the plaintext, and performing preprocessing to generate grouping mask shares; s3, performing parallel encryption on the grouped mask shares based on an input state to generate a plurality of mask ciphertexts and mask authentication tags; and S4, performing linear reconstruction on the mask ciphertext to finally run to obtain a complete ciphertext, decomposing plaintext data into a plurality of mask shares for parallel processing, effectively diluting data structure features, and fundamentally cutting off a way of acquiring key information by an attacker through power consumption analysis. Compared with the prior art, the parallel computing advantage of reconfigurable hardware is fully utilized, efficient execution of cryptographic operation is achieved, the whole data processing process is completed in the register, and the influence of memory access delay on system performance is remarkably reduced.

The application discloses a kind of light security communication method and system for agricultural perception node.The method includes that 256-bit static master key is preset in the bottom layer security storage area of perception node and heterogeneous convergence gateway, and the unique hardware serial number is read as node identification;Synchronous acquisition environmental data and visual feature data, splice into long payload plaintext;Derive dynamic session key, use dynamic session key to drive stream cipher to encrypt long payload plaintext, static master key drives block cipher to encrypt short header, and encapsulates into data frame;Data frame is sent through wireless channel, and heterogeneous convergence gateway receives and reversely decrypts short header to extract dynamic anti-fake factor, and replay attack verification is carried out;After verification, dynamic session key is reconstructed to restore data and uploaded to cloud data management server.The application also discloses a system using the above light security communication method for agricultural perception node, realizes the high security node legitimacy authentication and anti-replay attack under limited hardware computing power.

Methods for updating 256-bit cryptographic keys using a cryptographic key update system include the transmission of a first transmission, a second transmission, and a third transmission. The second transmission is a symmetric key encryption using a cipher key consisting of a concatenation of a plurality of parameters and a new cryptographic key.The sender derives the encryption key by transforming an authentication key and a bit sequence of constant values ​​based on a one-way compression function, which is one of the following: a Modification Detection Code 2 (MDC-2) cryptographic hash function with an advanced 128-bit encryption standard (AES-128) as the underlying block cipher, a Modification Detection Code 4 (MDC-4) cryptographic hash function with the advanced 128-bit encryption standard (AES-128) as the underlying block cipher, the Hirose compression function with the advanced 256-bit encryption standard (AES-256) as the underlying block cipher, and a 256-bit hash function.

To provide an efficient and secure solution for managing encryption of a software image updated on a secure element.SOLUTION: The present invention relates to methods, apparatuses and systems for implementing an encryption scheme for providing a software image to a secure element. The software image is converted into a sequence of ciphered blocks, which is protected with an authentication tag to obtain a sequence of protected blocks, which are then transmitted to an update agent on the secure element. The steps of converting the software image into a sequence of ciphered blocks and protecting the sequence of ciphered blocks with an authentication tag are implemented by an authenticated encryption function using a same block cipher.SELECTED DRAWING: Figure 3

The invention discloses a parallel message authentication code construction method and system for quantum security. The method comprises the following steps: 1) selecting an adjustable block cipher algorithm key K, nonlinear transformation theta and the length tau of a message identification code by a participant; 2) the sender executes an MAC generation scheme, takes the key K, the temporary value N and the message M as input, outputs a message identification code and sends the message identification code to the receiver; the flow of the MAC generation scheme is as follows: a) dividing a message M into a plurality of n-bit groups; b) encrypting the ith group Mi by using an algorithm, and inputting theta to obtain a state Si after the output and the state Si-1 are subjected to XOR; c) intercepting the leftmost side tau bit of the state Sm corresponding to the last group as a message identification code; and 3) the receiver executes an MAC verification scheme, and verifies whether (MAC, M) is correct or not by taking the key K, the temporary value N, the message M and the message authentication code MAC as input.

The invention discloses a block cipher algorithm identification method based on multi-scale pooling characteristics. The method comprises the following steps: normalizing a ciphertext data set after encrypting a public data set, and carrying out multi-scale segmentation; constructing calculation methods of a repetition degree feature, a compression ratio feature, a frequency deviation, a run observation value and a structural strength feature, calculating a feature vector of each segmented ciphertext, and carrying out pooling calculation to obtain a feature data set of the ciphertext; inputting the feature data set into the constructed gradient boosting decision-making tree for training to obtain an optimal decision-making tree; and for unknown ciphertext data, the trained optimal gradient boosting decision tree is used as a classifier to complete the identification of the cryptographic algorithm. The method is based on multiple scales, adopts multiple feature calculation methods to quantify subtle differences of different ciphertext data, and performs feature fusion through pooling calculation, so that the feature extraction capability of the ciphertext data is improved, and the cryptographic algorithm recognition accuracy of the model is improved.

A block cipher method and apparatus using round repetition for providing, from a plaintext message (10), a ciphertext message (50) and a global tag (52) is disclosed. The plaintext message is converted into a plurality of ordered plaintext blocks (11) which are successively processed during a round for computing:—a cryptogram (30) by encrypting input data (20) using a single cryptographic key, said cryptogram comprising a first segment (31) and a second segment (32)—a ciphertext block (51) by performing a first operation (41) using, as operands: said first segment (31) said current plaintext block (11) and said second segment (32). At each next round said input data is newly determined based on the current ciphertext block and an updated reproducible data. The ciphertext message is determined by concatenating the ciphertext blocks and the global tag by a second operation (42) using computed authentication local tags as operands.

The invention relates to a block cipher side channel analysis method based on experience accumulation and three-dimensional decision, and belongs to the technical field of cipher security analysis and side channel analysis. Aiming at the problems of large search space, low information utilization rate, computing power waste and the like in the traditional correlation coefficient energy analysis, the method provides an analysis framework combining a dynamic hierarchical screening mechanism and a cross validation strategy. The method comprises the following steps: randomly initializing each byte of a key to generate a candidate set; constructing a three-dimensional decision-making structure comprising a data layer, a statistical layer and a decision-making layer so as to record and analyze correlation coefficient distribution; screening conditions are automatically tightened through dynamic threshold attenuation, and the search range is gradually reduced; and adopting a multi-stage single-byte perturbation and cross validation strategy to carry out iterative optimization and ranking on each byte candidate value, and finally selecting an optimal key combination to carry out verification. According to the method, the success rate, robustness and convergence speed of side channel analysis are effectively improved, and the method is suitable for key recovery of block cipher.

The application discloses a GPU-based ARX type block cipher optimal differential characteristic search method, which first selects a high-probability differential transition to split the whole search process into forward search and reverse search; differential transition construction and probability calculation are taken as kernel functions, a GPU-based parallel scheme is designed, and the differential transition probability of different states in each round is calculated in parallel; the GPU parallel calculation result and the set probability threshold are taken as the determination condition of pruning in the search process, the optimal differential characteristic is searched round by round according to the branch and bound strategy, the forward and reverse searches are completed, and the optimal differential characteristics of the two parts are obtained; finally, the optimal differential characteristics of the two parts are spliced to obtain the optimal differential characteristics of the complete rounds. The search method can effectively reduce the recursion depth, improve the search efficiency through parallel calculation, shorten the calculation time and improve the search speed of the ARX type block cipher optimal differential characteristic.

A method for updating a 256-bit cryptographic key by a cryptographic key update system includes transmitting a first transmission, a second transmission, and a third transmission. The second transmission is symmetric key encryption under a serial key encryption key and a new cryptographic key of a plurality of parameters. The transmitter derives a key encryption key by converting an authentication key and a constant bit string based on a one-way compression function, the one-way compression function is one of the following functions: taking a 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 2 (MDC-2) of a bottom block password, taking the 128-bit advanced encryption standard (AES-128) as a password hash function of a modified detection code 4 (MDC-4) of the bottom block password, and taking a 256-bit advanced encryption standard (AES-256) as a Hirose compression function of the bottom block password; and a 256-bit hash function.

A method for cryptographic sortition among a group of parties includes committing, by a first party, to a set of n party-specific secret keys k1, kn for a block cipher E and obtaining, by the first and a second party, a common input x and an index r. The method further includes encrypting, by the first party, the input x with the r-th key kr of the committed keys k1, . . . , kn, thereby generating an output y1 of the block-cipher E, and publishing the output y1 with the key kr used for encryption. The method further includes encrypting, by the second party, the common input x with the published key kr, thereby generating an output y1′ of the block-cipher E, and comparing the generated output y1′ with the published output y1. The method can be used to optimize the cryptographic sortition and support secure decision making.

The application relates to a grouping cipher identification method based on a quantum self-organizing fuzzy neural network. The method comprises the following steps: acquiring ciphertext data to be identified and encoding the ciphertext data into an input quantum state; processing the ciphertext data to be identified and an activation intensity vector of a multi-expert system by using a biological heuristic gating network and a neural synapse excitation-inhibition mechanism to determine a net synapse input value of each quantum expert; adopting a Top-K sparsification strategy to select k quantum experts with the maximum net synapse input value from the multi-expert system to form an activated expert subset; analyzing the net synapse input value and the corresponding activation intensity of each quantum expert in the activated expert subset to determine the final gating weight of each quantum expert in the activated expert subset; inputting the input quantum state into each quantum expert in the activated expert subset to identify the grouping cipher type, and obtaining a final grouping cipher type identification result. Resource consumption is reduced.

The invention discloses a cryptographic algorithm-mode classification method and system based on a BCAM-LGST model, and belongs to the technical field of information security and cryptographic analysis. Comprising the following steps: converting an original ciphertext into a fixed-length sequence and a grayscale image in parallel, and constructing complementary bimodal data representation; the method comprises the following steps: extracting high-level probability features of a sequence by adopting a LightGBM model as semantic priori, and carrying out cross-modal depth fusion on a priori-guided hierarchical dual-channel gating modulation mechanism and image structure features extracted by Swin Transform; and introducing spatial position association of a spatial perception enhancement matrix enhancement feature, and carrying out multi-scale feature modeling on a fusion feature under prior guidance by using layered window attention, so as to finally realize end-to-end joint classification. The block cipher algorithm-mode joint identification method can quickly, accurately and robustly realize block cipher algorithm-mode joint identification, and is suitable for practical engineering scenes such as network security level protection, cipher application security evaluation, digital forensics, encrypted traffic analysis and compliance auditing.

A secure firmware update system for Internet of Things (IoT) devices using simple cryptographic mechanisms. The system includes: a communication interface configured to receive firmware update data packets from an update server over a wired or wireless network; a secure update processing unit that is operationally coupled with the communication interface, wherein the secure update processing unit comprises the following: a cryptographic verification processing unit configured to authenticate firmware update data packets using a simple digital signature scheme selected from hash-based signatures, restricted-environment optimized elliptic curve signatures, or message authentication codes (MACs) generated by block ciphers with reduced rounds; a decryption module configured to decrypt encrypted firmware payloads using light symmetric encryption techniques stored in secure non-volatile memory, with the decryption keys provided in a tamper-proof form; an integrity check control unit configured to perform rolling hash-based validation of decrypted firmware segments to ensure end-to-end update integrity while minimizing RAM usage; and a memory management unit configured to store the validated firmware payload in a secondary memory partition separate from a primary execution partition, thereby enabling atomic firmware switching and rollback protection.

The application discloses a multi-functional hash function construction method and circuit device based on a turbo encoder, and proposes a new security strategy and a new overall structure for ICCS new commercial secret hash standard collection.The overall structure is as follows: a master control unit is a turbo encoder, a controlled unit is a nonlinear logic iterator, the controlled unit works in a block cipher mode or a strong permutation mode, and the c.r of the controlled unit is preferably outputted, and the c.r is outputted and updated by the master control unit, and the plaintext block updates the state of the master control unit.The application point is that the c.l of the controlled unit is not directly modified and directly outputted, and the security capacity c.l is used to resist the original image attack and the collision attack.The technical effect is that the maximum code rate + the anti-original image / state capacity is an optimal design, the sponge structure is enabled to increase the code rate, a large state capacity large input large output overall structure is constructed by supporting a plurality of small state capacity overall structures, the controlled units are basically the same, so that one circuit supports a combination mode / decomposition mode, and one set of code covers a family of algorithms.The multi-function is hash / xof, mac or duplex mode.

This invention relates to a design method for a highly adjustable block cipher operating mode, belonging to the field of information security. This invention uses a handle and internal variables encrypted from the handle to adjust the input, output, and key of the block cipher respectively to encrypt data blocks. The adjustable block cipher proposed in this invention relies solely on the block cipher without using a hash function, thus avoiding the loss of handle information. It can be implemented using standard block algorithms with consistent security, facilitating use in various scenarios. This invention significantly increases the handle length it can accommodate, reaching five times the block length, basically meeting the needs for adjustable block cipher handle length in currently known scenarios.

The invention relates to a lightweight password white box security assessment method based on a neural discriminator, and belongs to the technical field of information security and password engineering. According to the method, the ciphertext difference serves as a positive sample, an ideal random permutation hypothesis is introduced, random difference vectors obeying uniform distribution are generated to serve as negative samples, and a difference data set is constructed. And feature extraction and dichotomy training are carried out on the difference bit vector by using a depth discriminator, so that the statistical difference between the real difference and the random difference is learned. The trained discriminator is used for reasoning samples collected by the target white box, the distinguishing advantage is calculated according to the classification accuracy, an equivalent security bit or security level is given accordingly, and automatic and quantitative evaluation of the security of the white box is achieved. The method has the advantages of being independent of manual design of experts, automatic in evaluation process and lightweight in model, and can be used for safety evaluation and monitoring of lightweight block cipher white-box testing in a resource-constrained equipment environment.

A kind of security data transmission method suitable for open source Hongmeng terminal equipment between, this method deeply integrates the distributed architecture of open source Hongmeng.1, by HMAC-SM3 two-way authentication to build "super terminal" trust domain, and the authentication system is integrated into the distributed identity authentication of Hongmeng.2, the data to be transmitted is encapsulated as Hongmeng atomization service, which is uniformly distributed by the distributed task scheduling center, and the encryption and authentication are completed in the distributed security sandbox using SM4-CCM block cipher mode.3, the present application utilizes the trusted device group mechanism and distributed database / file system to perform security hierarchical management on the keys and data throughout their life cycle. Finally, based on the device capability perception, the transmission strategy is dynamically adjusted, and the seamless networking of heterogeneous network devices is realized through the distributed soft bus. This scheme forms a native security transmission system deeply coupled with the underlying capabilities of Hongmeng system, effectively solving the security and efficiency problems of cross-device data flow.

The invention belongs to the technical field of cryptography and quantum computing crossing, and particularly relates to a block cipher distinguishing method based on a quantum-classical neural network, and the method comprises the steps: combining a quantum convolutional neural network with a classical residual network through constructing a mixed quantum-classical network architecture, and carrying out the discrimination of the block cipher. The encryption results of different rounds of the block cipher algorithm are efficiently distinguished; the problems that an existing quantum cryptographic analysis method is low in efficiency and weak in distinguishing capacity when the block cipher algorithm is processed are solved, the multi-round block cipher algorithm can be effectively distinguished under the condition of low computing resource consumption, and a brand new technical path is provided for safety analysis of the block cipher.

The application discloses a hardware grouping-based password task dynamic scheduling method and system, relates to the technical field of data encryption, and solves the technical problem that the prior art only considers password tasks and device real-time load information, and does not fully utilize hardware information and processing capacity of password devices and other auxiliary password task scheduling technologies; the application comprises the following steps: classifying password devices according to hardware characteristics of the password devices; grouping the classified password devices according to historical task processing data of the password devices; constructing a DNN model and training the DNN model to obtain a password task classification model; determining a password device category corresponding to a to-be-processed password task by using the password task classification model; storing password tasks of different categories of password devices, and respectively performing task scheduling by using dynamic scheduling algorithms; and the application classifies password devices according to hardware characteristics, and further groups the password devices according to task quantity and processing efficiency, so that the matching degree of password tasks and corresponding password devices is higher.

The application provides a neural discriminator-based block cipher key security analysis method, including: generating a plaintext pair according to a given input differential characteristic; performing specified round encryption on the plaintext pair by using a block key to obtain a primary ciphertext pair, performing full-round encryption on the plaintext pair by using a random block key to obtain a complete ciphertext pair, calculating the intermediate state difference of the primary ciphertext pair, and labeling the complete ciphertext pair according to an intermediate difference screening mechanism to construct a training sample; training a deep learning neural network model by using the training sample; inputting a ciphertext pair to be analyzed into the trained deep learning neural network model, and outputting a classification result of whether the ciphertext pair meets a preset differential characteristic condition. The application exhibits excellent adaptability to unknown encryption rounds and key variants, and improves the effect of cipher security analysis.

The invention belongs to the technical field of information security, and discloses a block cipher differential automatic security assessment method, which comprises the following steps: constructing a base vector-based space for searching iterative differential features based on a base vector, the base vector-based space being a subset of a block cipher n-dimensional differential space; decomposing a differential search space based on the base vector-based space; when the iterative differential features are searched, the number of active S boxes in each round is restrained; in the decomposed differential search space, automatically searching iteration differential features of the block cipher by being limited by the constraint of the number of the active S boxes; and evaluating the security of the block cipher based on the iterative differential features. According to the method, on the basis of basis vector space division and active S-box constraint, the search complexity is reduced to be within a calculation feasible range while the search effect is ensured, and the efficiency of searching the iterative differential features is improved.

The application discloses an attack positioning method, device and system of a group white-box cryptographic algorithm and a storage medium, and relates to the technical field of information security. The method is used to at least solve the problem that in the process of a white-box cryptographic fault injection attack experiment, a key execution point of injected faults cannot be accurately identified and an accurate injection timing cannot be accurately determined, resulting in poor attack precision and low attack efficiency. The method comprises the following steps: collecting side channel waveforms generated in the execution process of the group white-box cryptographic algorithm in real time; analyzing the morphological characteristics of the side channel waveforms to determine a target round of attack; determining a target waveform region with a waveform difference degree less than a difference degree threshold from a preset reference waveform from the actual side channel waveforms generated in the target round; and determining an attack positioning point according to the target waveform region.

The application provides a working method of a block cipher algorithm with combined feedback, wherein, during encryption, a previous plaintext encryption result and a feedback variable generated in a previous encryption process are input into a combined feedback function to obtain a feedback variable required in a current encryption process, the obtained feedback variable is subjected to an XOR operation with a current plaintext, and then the plaintext is subjected to encryption processing to obtain ciphertext after encryption of the current plaintext; during decryption, a previous ciphertext and a feedback variable generated in a previous decryption process are input into the combined feedback function to obtain a feedback variable required in a current decryption process, the current ciphertext is subjected to decryption processing, and then a result obtained through the decryption processing is subjected to an XOR operation with the feedback variable to obtain plaintext after decryption of the current ciphertext; wherein, the feedback variable required in the first encryption or decryption can be set according to requirements. The application has CPA security and BW-CPA security based on a non-repeated nonce, can be implemented in an online mode, and is applied to an online message processing application scene.

The application discloses an implementation method of a novel hardware-oriented lightweight block cipher ASPF, and relates to the technical field of information encryption. The cipher is obtained by dividing plaintext into four-branch plaintext data groups and then processing the plaintext data groups through two different F functions, so that the structure of the encryption algorithm is more flexible, the hardware implementation efficiency is higher, and a permutation layer is additionally added, so that the diffusion speed is improved. In addition, the resource consumption of the cipher algorithm on hardware is very low, and the cipher algorithm can be used in an environment with limited resources, especially in the case that the hardware resource consumption is relatively harsh or the encrypted data is relatively large.

The invention relates to the technical field of quantum keys, and discloses a quantum key update cycle determination method, a quantum key update cycle security assessment method, equipment and a medium. The method comprises the following steps: acquiring a security parameter, a grouping number, a security level lower bound and an allowed lowest security level; according to the security parameters, the grouping number, the security level lower bound, the allowed lowest security level and a target function, the maximum encryption file quantity of the single quantum key is determined, and the target function is a function which is determined according to a differentiated dominant function under the CPA and describes the incidence relation of the quantum key security level changing along with the quantum key encryption file quantity; and determining a quantum key encryption file quantity which is not greater than the maximum encryption file quantity of the single quantum key as an updating period of the quantum key. According to the method, the quantization of the security level of the combination of the quantum key and the block cipher applied to encrypted communication is realized, so that a reliable quantum key updating period can be determined, and reliable security evaluation is carried out on the quantum key.