Addition Mask Value Generator for Secure ChaCha20 Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption technologies lack secure adders capable of performing secure addition operations without revealing the original input data values, which is crucial for protecting data in electronic products.
Innovation Solution
The development of an addition mask value generator and an encryptor that utilize a mask generator, controller, and secure adders to generate and apply mask values, ensuring that addition operations are performed securely within the ChaCha20 encryption algorithm.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional adders are used in encryption algorithms, then addition operations can be performed efficiently, but the original input data values are revealed during calculation
Solution Approach 1:
The patent introduces mask values as intermediary elements that are combined with input data before addition operations. These mask values act as mediators that protect the original input data from being revealed during the addition process, while still allowing the addition operation to proceed correctly. The mask values are carefully managed through the computation process and removed or discarded after use, ensuring security.
Solution Approach 2:
The patent applies masking operations to the input data before performing addition operations. By preliminarily combining the input data with mask values through XOR operations, the original data is hidden before the addition takes place. This preliminary action ensures that even if the addition result is observed, the original input data cannot be directly inferred.
2Reliability
If mask values are applied to protect input data during addition, then data security is improved, but the device complexity increases due to additional operation circuits
Solution Approach 1:
The patent divides the masking process into multiple distinct operation circuits, each responsible for specific masking operations. The addition mask value generator is segmented into first, second, third, and fourth operation circuits that handle different aspects of mask value generation and management. This segmentation allows for modular design and easier verification of security properties while managing complexity through structured organization.
Solution Approach 2:
The mask values generated by the addition mask value generator serve multiple functions: they protect input data during addition operations, are used in subsequent XOR operations, and are ultimately discarded after contributing to the encrypted output. This multi-functionality of the mask values justifies the additional circuit complexity by providing comprehensive security protection across multiple operation stages.
Data Source
AI summary
An addition mask value generator is provided. A first operation circuit is configured to obtain first intermediate data according to first output mask value and fourth output mask value. A second operation circuit is configured to obtain the addition output mask value of a first mask group according to first intermediate data and fourth input mask value. A third operation circuit is configured to obtain second intermediate data according to second output mask value and third output mask value. A fourth operation circuit is configured to obtain the addition output mask value of a second mask group according to second intermediate data and second input mask value. The first and second addition input mask values of first mask group are first and second input mask values. The first and second addition input mask values of second mask group are third input mask value and first intermediate data.