12 results about "Block cipher" patented technology

The present disclosure relates to an authenticated encryption method, apparatus, system, and computer program for providing enhanced security and extension of a nonce length, and more specifically, the present disclosure discloses a method for performing authenticated encryption using a computing apparatus, the method including: producing a plurality of intermediate values, based on a given input value; generating a random number, based on a combination of a plurality of intermediate random values produced by performing block cipher-based encoding on the plurality of intermediate values; and performing encryption or decryption, based on the random number.

The application discloses a kind of light security communication method and system for agricultural perception node.The method includes that 256-bit static master key is preset in the bottom layer security storage area of perception node and heterogeneous convergence gateway, and the unique hardware serial number is read as node identification;Synchronous acquisition environmental data and visual feature data, splice into long payload plaintext;Derive dynamic session key, use dynamic session key to drive stream cipher to encrypt long payload plaintext, static master key drives block cipher to encrypt short header, and encapsulates into data frame;Data frame is sent through wireless channel, and heterogeneous convergence gateway receives and reversely decrypts short header to extract dynamic anti-fake factor, and replay attack verification is carried out;After verification, dynamic session key is reconstructed to restore data and uploaded to cloud data management server.The application also discloses a system using the above light security communication method for agricultural perception node, realizes the high security node legitimacy authentication and anti-replay attack under limited hardware computing power.

The invention discloses a parallel message authentication code construction method and system for quantum security. The method comprises the following steps: 1) selecting an adjustable block cipher algorithm key K, nonlinear transformation theta and the length tau of a message identification code by a participant; 2) the sender executes an MAC generation scheme, takes the key K, the temporary value N and the message M as input, outputs a message identification code and sends the message identification code to the receiver; the flow of the MAC generation scheme is as follows: a) dividing a message M into a plurality of n-bit groups; b) encrypting the ith group Mi by using an algorithm, and inputting theta to obtain a state Si after the output and the state Si-1 are subjected to XOR; c) intercepting the leftmost side tau bit of the state Sm corresponding to the last group as a message identification code; and 3) the receiver executes an MAC verification scheme, and verifies whether (MAC, M) is correct or not by taking the key K, the temporary value N, the message M and the message authentication code MAC as input.

A block cipher method and apparatus using round repetition for providing, from a plaintext message (10), a ciphertext message (50) and a global tag (52) is disclosed. The plaintext message is converted into a plurality of ordered plaintext blocks (11) which are successively processed during a round for computing:—a cryptogram (30) by encrypting input data (20) using a single cryptographic key, said cryptogram comprising a first segment (31) and a second segment (32)—a ciphertext block (51) by performing a first operation (41) using, as operands: said first segment (31) said current plaintext block (11) and said second segment (32). At each next round said input data is newly determined based on the current ciphertext block and an updated reproducible data. The ciphertext message is determined by concatenating the ciphertext blocks and the global tag by a second operation (42) using computed authentication local tags as operands.

The application discloses a multi-functional hash function construction method and circuit device based on a turbo encoder, and proposes a new security strategy and a new overall structure for ICCS new commercial secret hash standard collection.The overall structure is as follows: a master control unit is a turbo encoder, a controlled unit is a nonlinear logic iterator, the controlled unit works in a block cipher mode or a strong permutation mode, and the c.r of the controlled unit is preferably outputted, and the c.r is outputted and updated by the master control unit, and the plaintext block updates the state of the master control unit.The application point is that the c.l of the controlled unit is not directly modified and directly outputted, and the security capacity c.l is used to resist the original image attack and the collision attack.The technical effect is that the maximum code rate + the anti-original image / state capacity is an optimal design, the sponge structure is enabled to increase the code rate, a large state capacity large input large output overall structure is constructed by supporting a plurality of small state capacity overall structures, the controlled units are basically the same, so that one circuit supports a combination mode / decomposition mode, and one set of code covers a family of algorithms.The multi-function is hash / xof, mac or duplex mode.

This invention discloses a threshold implementation method and system for an S-box block cipher, belonging to the field of information security block cipher protection technology. The method includes the following steps: mapping intermediate state data of the secret sharing share from the native domain to the composite domain to obtain multiple subdomain components, which are then registered and used as first guard variables; based on the subdomain components, introducing a first set of fresh random numbers to perform threshold calculations for composite domain inversion, obtaining multiple intermediate operation result shares, while simultaneously generating and registering a second guard variable; based on the intermediate operation result shares, performing at least one subdomain multiplication operation that reuses the first guard variable as an input mask, and a low-order nonlinear operation protected by a second set of fresh random numbers, to obtain operation result shares; synthesizing the final output mask share based on the operation result shares, and refreshing it using the second guard variable; this invention significantly reduces resource consumption while ensuring first-order security through cross-stage reuse of guard variables.

A processing system includes a processing circuit, memory controller, and memory cipher engine. The memory cipher engine receives a write request from the processing circuit to a first address and determines address data for a memory area containing the first address. This address data is provided to a block-cipher cryptographic circuit, which generates an encrypted address upon request. During this process, the memory cipher engine de-asserts a ready signal to the processing circuit and sets a data signal to the memory controller to a default value. After the block-cipher cryptographic circuit signals encryption readiness, the memory cipher engine issues a write request to the memory controller for the first address. In the subsequent data phase, it provides a value to the memory controller generated by combining the original data with part of the encrypted address. The cipher engine waits for completion and re-asserts the ready signal.

Method and device for encrypting digital data, associated method and device for decryption. This method for encrypting digital data forming a message comprising a sequence of initial blocks, each having an associated index, includes an initialization step implementing a triplet of cryptographic parameters to provide an internal key, and a chain (62) of block ciphers of the initial blocks depending on the internal key.The method comprises a partition (50) of the message into at least two sub-messages, each comprising a start block of first index and an end block of second index, and an encryption of each sub-message, comprising: — an application (54) of a cryptographic transformation on elements of the triplet of cryptographic parameters to obtain an intermediate internal key, — a combination (56) of the intermediate internal key with said first and second indices, and then a further application (58) of the cryptographic transformation on the result of the combination to obtain said internal key associated with the sub-message. Figure for the abstract: Figure 2.

The application discloses a kind of new FLM structure's group cipher algorithm implementation method and system, the method includes: obtaining plaintext or ciphertext and equally divided into four branches;Based on sub-key and new FLM structure, Nr round encryption operation or decryption operation is executed to plaintext or ciphertext to obtain ciphertext or plaintext, i.e. each round operation in new FLM structure encryption operation includes cyclic shift transformation, round constant XOR, round key addition transformation, F function and P1 permutation;Two P2 permutations are added in decryption operation, and the order of sub-key and round constant used in decryption operation is opposite to that used in encryption operation.The password algorithm designed in the application can be decrypted by adding two P2 permutations not occupying hardware resources based on encryption operation, can realize high consistency of encryption and decryption, reduces algorithm hardware resource consumption;Also, all branch data is changed in a round, improves the diffusion of algorithm.

An encryption circuit includes an iterative block cipher circuit. The iterative block cipher circuit has a counter input for a row index, a key input for receiving a secret key, and an output for providing an encrypted counter value in response to performing a block cipher process using the row index as a counter the secret key. The encryption circuit uses the iterative block cipher circuit during a row operation to a memory.

The present disclosure relates to the field of CRAFT block cipher arithmetic circuit, and proposes a CRAFT block cipher arithmetic circuit construction method and device for secure multi-party computation, which comprises the following steps: constructing a linear calculation part arithmetic circuit according to the linear calculation part of the CRAFT block cipher; determining the original polynomial corresponding to the S-box according to the S-box truth table of the CRAFT block cipher; optimizing the original polynomial to reduce the number of multiplications to obtain an optimized polynomial; constructing the arithmetic circuit of the S-box in the CRAFT block cipher according to the optimized polynomial; and cascading the linear calculation part arithmetic circuit and the S-box arithmetic circuit according to the CRAFT round number to obtain a complete CRAFT block cipher arithmetic circuit, which is applied to a secure multi-party computation protocol. The present disclosure reduces the communication required for calculation in the secure multi-party computation protocol and improves the execution efficiency of the secure multi-party computation protocol.

This invention provides an automated search method and apparatus for intermediate encounter differential error injection attacks. The method includes: traversing fault injection rounds and intermediate encounter rounds; constructing an automated search model based on the fault injection rounds and intermediate encounter rounds; the automated search model introduces a differential activity variable and an additional binary variable, whereby the differential activity variable represents the differential propagation state from the fault injection round to the round before the intermediate encounter round, and the additional binary variable represents whether the state value from the intermediate encounter round to the last round can be determined by a first key subset or a second key subset; solving the automated search model and outputting the optimal key recovery path. This method, through automated modeling and optimization, achieves efficient and accurate searching for intermediate encounter differential error injection attack paths, significantly improving the efficiency and reliability of security assessment for SPN structure block cipher algorithms, and providing quantifiable key round protection basis for hardware protection design.