Authenticated Encryption Bandwidth Reduction via Merged IV and Tag
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authenticated encryption methods experience low encryption efficiency due to increased bandwidth requirements, particularly in wireless sensor networks where communication bandwidth is critical, and often require protocol changes when adding message authentication functions.
Innovation Solution
An information processing device and method that performs authenticated encryption by generating an initial vector, encrypting it using a shared key block encryption, and then using the encrypted initial vector to generate a pseudorandom number sequence and hash value, combining these with the plaintext to form the ciphertext, thereby reducing bandwidth increase while maintaining encryption efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authenticated encryption methods are used, then message authentication is achieved, but bandwidth increase becomes significant
Solution Approach 1:
The patent merges the initial vector and authentication tag into a single combined structure that is encrypted together with the plaintext. Instead of transmitting separate IV and tag components, the invention combines them into one integrated authentication tag that serves both initialization and authentication functions simultaneously, thereby reducing overall bandwidth consumption.
Solution Approach 2:
The authentication tag in this invention serves multiple functions: it acts as both the initialization vector for decryption and the authentication credential. This multi-functional design eliminates the need for separate IV transmission, allowing the same data structure to fulfill multiple cryptographic roles and reduce total data volume.
2Reliability
If authentication tag and initial vector are transmitted separately with ciphertext, then authentication is ensured, but communication bandwidth increases
Solution Approach 1:
The invention combines the authentication tag and initial vector into a single integrated structure that is encrypted together with the plaintext. This merging eliminates the need for separate transmission of authentication credentials and initialization data, thereby improving communication efficiency while maintaining authentication reliability.
3Ease of manufacture
If conventional encryption modes are used, then encryption is achieved, but falsification detection capability is lacking
Solution Approach 1:
The patent integrates encryption and authentication into a single unified process where the authentication tag is encrypted together with the plaintext using the same cryptographic operations. This merging provides both encryption confidentiality and falsification detection capabilities without requiring separate authentication protocols, maintaining ease of implementation while enhancing reliability.
Data Source
AI summary
An information-processing device is provided with: a plaintext input unit for inputting plaintext; an initial vector generation unit for generating an initial vector; a common key block encryption unit for performing common key block encryption on the initial vector and generating an encrypted initial vector; a pseudorandom number generation unit which, accepting the encrypted initial vector as input, generates a pseudorandom number series in the same length as the plaintext; a keyed hash unit which, accepting the first portion of a ciphertext in which the pseudorandom number series and the plaintext are exclusive-OR'ed as input, generates a hash value; and a ciphertext output unit for concatenating the second and first portions of a ciphertext in which the hash value and the encrypted initial vector are exclusive-OR'ed and outputting the concatenated portions as a ciphertext.