AES Substitution Check Circuitry for Encryption Error Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data encryption systems, such as those using the Advanced Encryption Standard (AES), are prone to errors due to malicious attacks, chip defects, or harsh environments, leading to unrecoverable user data and significant damage.
Innovation Solution
An apparatus and method incorporating a search circuitry and substitution check circuitry that utilize an 8-to-K lookup table to convert values and detect errors by employing check formulae, generating error signals when discrepancies are found, thereby ensuring accurate data encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional AES encryption is used without error detection, then encryption speed is maintained, but data integrity cannot be guaranteed due to malicious attacks, chip defects, or harsh environments
Solution Approach 1:
The patent applies preliminary action by pre-calculating and storing check values in lookup tables before encryption operations. The check circuitry uses these pre-prepared values to quickly verify encryption results without performing complex calculations during the actual encryption process, thus ensuring data integrity while maintaining encryption speed.
Solution Approach 2:
The patent introduces check circuitry and lookup tables as intermediary components between the encryption core and the output. These intermediaries perform error detection by comparing expected check values with actual encryption results, thereby guaranteeing data integrity without requiring fundamental changes to the AES encryption algorithm itself.
2Reliability
If check circuitry is added to detect errors during encryption, then data integrity is improved, but encryption processing time increases
Solution Approach 1:
The lookup tables are pre-computed and stored with their corresponding check values before runtime. During encryption, the check circuitry simply performs lookup and comparison operations rather than complex calculations, enabling fast error detection that minimally impacts encryption processing speed.
Solution Approach 2:
The patent replaces complex real-time error detection calculations with simpler table lookup and comparison operations. This substitution of computational mechanics reduces the processing overhead of error detection, allowing it to proceed in parallel with or immediately following the encryption operation without significantly delaying overall processing.
3Measurement precision
If lookup tables with check values are used, then error detection precision is improved, but hardware resource consumption increases
Solution Approach 1:
The patent uses compact lookup tables that store only the essential check values needed for error detection, rather than storing complete encryption state information. This partial storage approach provides sufficient precision for error detection while minimizing the hardware resources required for table storage.
Solution Approach 2:
The lookup tables store pre-computed check values that are generated once and then reused for multiple encryption operations. This approach discards the need to re-calculate check values during each encryption, recovering computational resources while maintaining high error detection precision through the stored reference values.
Data Source
AI summary
The invention introduces an apparatus for detecting errors during data encryption. The apparatus includes a search circuitry and a substitution check circuitry. The key generation circuitry is arranged operably to convert a first value of one byte corresponding to a plaintext, an intermediate encryption result, or a round key into a second value of a K-bit according to an 8-to-K lookup table, where K is an integer ranging from 10 to 15 and the second value comprises (K minus 8) bits of a Hamming parity. The substitution check circuitry is arranged operably to employ check formulae corresponding to the 8-to-K lookup table to determine whether an error is occurred during a conversion of the first value of the one byte into the second value of the K-bit, and output an error signal when finding the error, where a total amount of the formulae is K minus 8.