AES Encryption Table with Nested Key Data for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional AES encryption methods are vulnerable to decryption through analysis of the relationship between input and output, making the data not sufficiently secure against reverse engineering.
Innovation Solution
A data processing apparatus and method that employs a selector to choose sub-round data, a converter to process this data using a table that reflects key data from a later round process, and an exclusive OR calculator to generate encrypted or decrypted data, thereby increasing the difficulty of decrypting the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional AES encryption methods are used, then the encryption process is simple and fast, but the data can be decrypted through analysis of the relationship between input and output
Solution Approach 1:
The encryption process is divided into multiple round processes (at least two rounds), where each round uses different key data. The first round uses first key data and the second round uses second key data, segmenting the key usage across different processing stages to prevent single-point analysis attacks
Solution Approach 2:
Key data from a later round process is prepared and integrated into the table structure before the encryption process begins. The table is configured to include key data from the second round process (which occurs later) in advance, making it impossible for attackers to analyze relationships without knowing future key data
Solution Approach 3:
The table structure is designed to contain multiple layers of key data nesting. The table includes both first key data (from the current round) and second key data (from a later round) within its structure, creating a nested configuration where inner key data is protected by outer key data layers
2Reliability
If key data from later round processes is integrated into the table, then it becomes difficult to estimate key data and decrypt the data, but the processing structure becomes more complex
Solution Approach 1:
The table structure is designed to serve multiple functions simultaneously: it acts as both the encryption transformation table and the key data storage structure. By configuring the table to include key data from multiple rounds (first key data and second key data), the same table structure achieves both data transformation and key protection functions
Solution Approach 2:
The patent merges the key data storage with the encryption transformation table. Instead of separate key storage and transformation tables, the key data from different rounds are integrated directly into the table structure, combining what would traditionally be separate components into a unified structure
Data Source
AI summary
A data processing apparatus that encrypts or decrypts data by Advanced Encryption Standard in which a plurality of key data are respectively prepared for a plurality of round processes that are performed in order, includes a selector that selects sub-round data of 4 bytes from input data that is a process target of a first round process; a converter that converts each data of 1 byte of the sub-round data, based on a first table by which a result same as performing a predetermined process is output, to generate converted data of 4 bytes; and an exclusive OR calculator that calculates exclusive OR of the converted data of the sub-round data, respectively, the predetermined process including an encryption process or a decryption process using at least a part of key data prepared for a second round process which is performed later than the first round process.