Chained Message Authentication for AES-GCM Peripheral Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authenticated-encryption communication methods between peripheral and host devices suffer from inconsistent deployment of authentication and encryption, varying cryptographic schemes, and susceptibility to side-channel attacks, particularly in implementing the AES-GCM standard.
Innovation Solution
The solution involves using a standardized AES-GCM encryption scheme with IV construction that concatenates diversification constants, deterministic values, and dynamic shared secret values to ensure IV uniqueness without transmitting IVs, enhancing resistance to side-channel attacks and maintaining cryptographic integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standardized AES-GCM encryption scheme is implemented with proper IV construction, then cryptographic integrity and resistance to side-channel attacks is improved, but device complexity increases due to the need to manage diversification constants, deterministic values, and dynamic shared secret values
Solution Approach 1:
The patent applies preliminary action by pre-establishing the AES-GCM cryptographic framework and IV construction methodology before actual communication occurs. The system pre-configures diversification constants and deterministic values, and establishes dynamic shared secret values through preliminary authentication handshakes, so that subsequent encrypted communications can proceed efficiently with already-prepared cryptographic parameters.
Solution Approach 2:
The patent applies segmentation by dividing the IV construction into distinct components: diversification constants (fixed), deterministic values (derived from communication parameters), and dynamic shared secret values (exchanged during authentication). This segmentation allows each component to be managed independently, reducing overall system complexity while maintaining cryptographic integrity.
2Reliability
If authentication and encryption are consistently deployed across all communication channels, then security against side-channel attacks is improved, but development cost and implementation complexity increases
Solution Approach 1:
The patent applies universality by implementing a single standardized AES-GCM cryptographic scheme that serves multiple communication channels simultaneously. The same encryption algorithm, key management approach, and IV construction methodology are universally applied across all peripheral-host communications, eliminating the need to develop and maintain separate cryptographic implementations for different channels, thereby reducing development costs while maintaining consistent security.
3Reliability
If IV uniqueness is ensured through concatenation of diversification constants, deterministic values, and dynamic shared secret values without transmitting IVs, then resistance to side-channel attacks is improved, but communication protocol complexity increases
Solution Approach 1:
The patent applies the intermediary principle by using the dynamic shared secret value as a mediator between the diversification constants and deterministic values. This shared secret, established through authentication handshakes, binds the fixed and variable components of the IV construction together without requiring direct transmission of the complete IV, thereby ensuring uniqueness while simplifying the communication protocol.
4Adaptability or versatility
If multiple replaceable print apparatus components communicate with host device, then system versatility is improved, but authentication and verification operations become more complex
Solution Approach 1:
The patent applies homogeneity by implementing uniform authentication and verification procedures for all replaceable print apparatus components. The same AES-GCM encryption scheme, IV construction methodology, and authentication handshake process are applied regardless of the specific component type (printhead, cartridge, ink supply, etc.), allowing the system to handle diverse components through a standardized cryptographic interface, thereby managing complexity while maintaining versatility.
Data Source
AI summary
Disclosed herein are systems and methods for authenticated-encryption and authenticated-decryption operations for conducting authenticated-encryption communications between a host device and a peripheral device. A sending device performs authenticated-encryption operations that apply a symmetric encryption algorithm on plaintext to encrypt the data and generate an authentication tag or message authentication code (“MAC”). The sending device sends the ciphertext and a shared subset of the tag to the receiving device, and stores a non-shared subset of the tag in cache. The receiving device performs authenticated-decryption operations that verify the tag and decrypt the ciphertext to recover the data by applying the effective inverse of the symmetric encryption algorithm (or decryption algorithm) and using the known parameters.