Authenticated Encryption Scheme Using Embedded Integrity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems require additional computational steps and do not fully utilize hardware and software optimizations for secure encryption and message integrity, especially in one-pass authenticated encryption schemes.
Innovation Solution
The method employs a predetermined block cipher with a secret key for both encryption and decryption, using a safe initial vector to embed message integrity checks within the cipher-text blocks, allowing for a single pass encryption and decryption process while generating pseudo-random numbers to ensure message integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional MAC-based authenticated encryption schemes are used, then message integrity is ensured, but computational cost increases by 10 to 100%
Solution Approach 1:
The patent merges the encryption process with the message integrity check by embedding the MAC generation within the cipher-text block formation itself. Instead of separate encryption and MAC generation steps, the integrity check is integrated into the encryption operation, allowing both confidentiality and authentication to be achieved in a single pass without the 10-100% computational overhead of traditional schemes.
2Reliability
If traditional MAC-based authenticated encryption schemes are used, then message integrity is ensured, but the number of processing steps increases
Solution Approach 1:
The patent combines multiple functions into a single integrated operation. The encryption algorithm simultaneously performs confidentiality protection and message authentication by embedding the integrity check within the cipher-text block. This eliminates the need for separate encryption and MAC generation steps, reducing the total number of processing operations while maintaining both security properties.
Solution Approach 2:
The encryption scheme achieves multi-functionality by using a single cryptographic operation that simultaneously provides confidentiality and message authentication. The same encryption process that produces the cipher-text also generates the embedded integrity check, making the system universal in its ability to perform both functions without requiring separate dedicated mechanisms.
3Reliability
If traditional MAC-based authenticated encryption schemes are used, then message integrity is ensured, but hardware and software optimizations are not fully utilized
Solution Approach 1:
By merging encryption and integrity checking into a single pass operation, the patent enables better utilization of hardware and software resources. The integrated approach allows for optimized single-pass processing that can take advantage of cryptographic accelerators and parallel processing capabilities more effectively than sequential MAC-based schemes, thereby improving overall productivity and resource efficiency.
Data Source
AI summary
The present invention provides encryption schemes and apparatus, which are more efficient than the existing single pass authenticated encryption schemes, while providing the same level of security. The initial vectors, which are an essential part of these schemes, are chosen in an incremental and safe fashion. This also leads to an incremental method for generating the pair-wise differentially uniform sequences or XOR-universal sequences which are another essential part of such schemes. The incrementality of the generation of these sequences extends to even across different plain-text messages being encrypted, leading to substantial savings in time to encrypt. A further step of encryption is shown to be redundant and leads to savings over earlier schemes. Another embodiment describes splitting the plain-text blocks into two sets, and using the block-cipher in encrypt mode on one set and the block-cipher in decrypt mode on the other set, leading to beneficial hardware solutions.