Authenticated Encryption Using Working Blocks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption algorithms often fail to provide both message privacy and integrity, and not all are suitable for parallel computation or streaming operations, which can be inefficient for large data sets and modern computing devices with varying storage characteristics.
Innovation Solution
An authenticated encryption method that divides plaintext into working blocks, computes ciphertext and message authentication tags using deterministic keys and vectors, and combines them with a global message authentication tag to ensure both privacy and integrity, while allowing for parallel computation and streaming operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption algorithms are used, then message privacy may be provided, but message integrity cannot be guaranteed
Solution Approach 1:
The patent combines encryption and message authentication into a single authenticated encryption algorithm. The encryption function processes plaintext blocks to produce ciphertext blocks, while simultaneously computing authentication tags through a separate but integrated authentication function. This merging provides both confidentiality and integrity guarantees in one unified operation, resolving the contradiction between providing message privacy and ensuring message integrity.
2Productivity
If sequential encryption processing is used, then algorithm simplicity is maintained, but processing speed decreases for large data sets
Solution Approach 1:
The patent divides the plaintext message into multiple working blocks that can be processed independently in parallel. Each working block is processed through the encryption and authentication functions separately, allowing simultaneous computation across multiple processors or cores. This segmentation enables parallel processing while maintaining the integrity of the overall encryption scheme, significantly improving processing speed for large data sets.
3Productivity
If entire data sets are loaded into RAM, then processing speed improves, but memory requirements exceed available RAM for large data sets
Solution Approach 1:
The patent processes data in manageable working block segments rather than loading entire data sets into memory. Each working block is processed independently through the encryption and authentication functions, allowing streaming processing from storage devices directly. This approach maintains processing efficiency while reducing memory requirements to only the size of individual working blocks, enabling handling of data sets larger than available RAM.
4Loss of time
If parallel computation is implemented, then processing time is reduced, but algorithm compatibility becomes limited
Solution Approach 1:
The patent designs the authenticated encryption algorithm with a universal structure that supports both sequential and parallel computation modes. The encryption function and authentication function are formulated to accept working blocks in any order and produce correct results regardless of processing sequence. This multi-functionality allows the same algorithm to be efficiently implemented on various computing architectures, from single-core sequential processors to multi-core parallel systems, maximizing adaptability while minimizing processing time.
Data Source
AI summary
A computer-implemented authenticated encryption method for converting a plaintext message into a ciphertext message. The method includes dividing the plaintext message into at least two working blocks, each working block having a mathematical relationship to the plaintext message. For each working block, a working block ciphertext is computed as a function of such working block, a deterministic working block initialization vector, and a deterministic working block encryption key. For each working block, a message authentication tag is computed as a function of a deterministic working block message authentication key and at least one of (a) the working block ciphertext computed for such working block and an indication corresponding to the mathematical relationship of such working block to the plaintext message and (b) such working block. The method further includes computing a global message authentication tag as a function of the message authentication tag computed for each working block and a global message authentication key. The ciphertext message comprises the working block ciphertext computed for each working block and the global message authentication tag.