AES Encryption Key Obfuscation via Multi-Table XOR Transformations

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional AES encryption schemes may fail to adequately obfuscate key data, making it vulnerable to decryption.

Innovation Solution

An information processing apparatus that uses a processor and memory to perform a series of transformations on data using exclusive OR operations with randomly generated components and key data, stored in specific tables, to obfuscate the key data during encryption and decryption processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional AES encryption scheme is used, then encryption/decryption can be performed, but key data may be decrypted and is not adequately obfuscated

Engineering Contradiction:
ImprovesecurityVSAvoidencryption process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The encryption process is divided into multiple distinct transformation stages: first transformation using a first table with mixed components, second transformation using a second table, third transformation using a third table, and final XOR calculation. Each transformation segment performs a specific function to progressively obfuscate the key data, preventing straightforward decryption while maintaining cryptographic security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Multiple intermediate transformation tables (first table, second table, third table) are introduced as mediators between the input data and final encrypted output. These intermediary tables with randomly generated mixed components complicate the encryption path, making it difficult to reverse-engineer the key data while still producing valid AES encryption.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple transformation tables with random components are used to obfuscate key data, then security is enhanced, but the encryption process becomes more complex

Engineering Contradiction:
Improveobfuscation effectivenessVSAvoidnumber of transformation steps
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Multiple cryptographic operations (XOR with random components, table lookups, permutations) are merged into a unified multi-table transformation process. The first table, second table, and third table each contain pre-computed mixed components that combine multiple cryptographic operations, reducing the need for separate execution steps while maintaining security.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The transformation tables are pre-computed and stored with randomly generated mixed components before the actual encryption operation. This preliminary preparation allows the runtime encryption process to simply perform table lookups and XOR operations, enhancing obfuscation effectiveness without significantly increasing computational complexity during execution.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10148427B2Information processing apparatus, method for processing information, and medium
Publication Date: 2018.12.04 FUJI ELECTRIC CO LTD
  • US10148427B2 patent drawing
  • US10148427B2 patent drawing
  • US10148427B2 patent drawing

AI summary

An information processing apparatus for encrypting or decrypting data by AES scheme, includes a processor; and a memory storing a first table including mixed components based on exclusive OR of first random components and key data, a second table, and a third table. The processor executes selecting four bytes of sub-round data from the data; a first transformation based on the first table, for each of one-byte data items of the sub-round data, to generate first data by taking exclusive OR of the one-byte data items and the mixed components; a second transformation based on the second table to transform the first data into second data; a third transformation based on the third table to transform the second data into multiple items of third data; calculating exclusive OR of the third data.