Block Cipher Encryption Pipeline With Segmented State Stores
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing devices face challenges in implementing block cipher encryption schemes efficiently, particularly in processing multiple data packets without stalling, due to the complexity of operations and the need for simultaneous encryption and authentication processing.
Innovation Solution
A device with a processing pipeline that includes separate state stores and circuitry for encryption and authentication operations, allowing for the simultaneous processing of multiple data packets by using state information generated from previous packets to prevent stalling and enable efficient encryption and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a processing pipeline is implemented for block cipher encryption with separate encryption and authentication circuitry, then processing throughput is improved, but device complexity increases due to multiple state stores and pipeline control mechanisms
Solution Approach 1:
The processing pipeline is segmented into distinct functional units: encryption processing circuitry, authentication processing circuitry, first state store, second state store, and pipeline control circuitry. Each unit handles a specific aspect of the encryption/authentication process, allowing parallel operation and improving throughput while maintaining manageable complexity through modular design
Solution Approach 2:
The patent introduces a temporal dimension to the processing pipeline by implementing multi-stage state storage and retrieval mechanisms. State information is stored in separate state stores at different pipeline stages and retrieved when needed, enabling overlapping encryption and authentication operations across multiple data packets without conflict
2Measurement precision
If authentication processing is performed sequentially after encryption processing for each data packet, then processing accuracy is maintained, but processing time increases causing pipeline stalling
Solution Approach 1:
Authentication processing is initiated in advance for data packets that have already been encrypted but are still moving through the pipeline. The authentication circuitry begins processing ciphertext blocks from earlier packets while later packets are being encrypted, overlapping the two operations in time and eliminating idle pipeline stages
Solution Approach 2:
The pipeline maintains continuous useful action by ensuring that both encryption and authentication circuitries are constantly processing data packets without idle cycles. The pipeline control circuitry coordinates state retrieval and data forwarding to keep both processing paths fully utilized, maximizing throughput while maintaining accuracy
3Stability of the object's composition
If state information from previous data packets is stored and reused, then encryption consistency is maintained, but memory requirements increase due to multiple state stores
Solution Approach 1:
Different state stores are allocated for different purposes: the first state store holds encryption state information specific to the encryption circuitry, while the second state store holds authentication state information specific to the authentication circuitry. This localized state management ensures encryption consistency where needed while minimizing overall memory requirements by storing only necessary state information in each location
Data Source
AI summary
The device implements a processing pipeline having distinct circuitry for performing encryption/decryption operations and authentication operations and having state stores associated with the respective operations. The state stores store state associated with a given encryption frame, enabling the respective operations to be performed when blocks of data reach that stage in the pipeline. Due to the complexity of operations in a block cipher encryption scheme, the pipeline is deep, which provide the possibility for processing multiple data packets at any one time. The provision of the state stores at the stages in the pipeline at which they are required prevents stalling when a new data packet is received.