AES S-Box Update Scheme for Side-Channel Resistant Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems, such as AES and RSA, are vulnerable to attacks in quantum computing environments, particularly side-channel attacks, and current post-quantum cryptography solutions are inefficient for resource-constrained IoT devices.
Innovation Solution
Implementing AES with frequent S-box updates and a fusion function to enhance security, using secure S-boxes and reducing computational load through look-up operations, thereby increasing resistance to side-channel attacks and maintaining security in quantum environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If AES uses fixed S-boxes for encryption, then computational speed is maintained, but security is compromised to side-channel attacks and quantum attacks
Solution Approach 1:
The patent implements dynamic S-box updates during the encryption process. Instead of using fixed S-boxes, the system generates and updates S-boxes frequently throughout the encryption operation, making the substitution tables changeable and adaptive. This dynamic approach enhances security against side-channel attacks and quantum attacks while managing computational complexity through efficient update mechanisms.
Solution Approach 2:
The patent employs periodic S-box updates at predetermined intervals during the encryption process. The S-boxes are regenerated and applied in periodic cycles, creating a rhythm of substitution that prevents adversaries from exploiting static patterns. This periodic action maintains security without requiring continuous complex computations, balancing reliability and device complexity.
2Reliability
If AES is updated frequently with new S-boxes, then resistance to side-channel attacks increases, but computational load increases
Solution Approach 1:
The patent applies partial updates to S-boxes rather than complete regeneration each time. By updating only necessary portions or using selective update strategies, the system achieves enhanced resistance to side-channel attacks without the full computational overhead of complete S-box regeneration. This partial action approach reduces computational load while maintaining security improvements.
Solution Approach 2:
The patent performs preliminary S-box generation and preparation before the main encryption process. By pre-computing and storing multiple S-box variants in advance, the system reduces the computational burden during actual encryption operations. This preliminary action allows frequent S-box updates during encryption without imposing excessive computational load on resource-constrained devices.
3Reliability
If post-quantum cryptography algorithms are used, then security against quantum attacks is improved, but key sizes and computation time increase
Solution Approach 1:
The patent modifies AES parameters to enhance quantum resistance without adopting full post-quantum algorithms. By changing parameters such as increasing iteration counts, implementing custom S-box generation methods, and adjusting key schedules, the system achieves improved security against quantum attacks while maintaining computation times compatible with resource-constrained IoT devices. This parameter change approach avoids the excessive computation time of standard PQC algorithms.
Data Source
AI summary
A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.