Cryptographic Mask Protection for Interruptible Cipher Instructions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic processing methods, such as XTS-AES, face inefficiencies in handling interruptions during cryptographic operations, particularly in maintaining security and resuming processing without exposing sensitive mask values.
Innovation Solution
A single instruction is used to perform cryptographic operations like encryption/decryption, allowing for interruption and resumption while protecting the mask value by generating it internally and updating power block sequencing values, ensuring security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic operations are performed using traditional methods with mask values, then cryptographic processing can be completed, but the mask values are exposed during processing which compromises security
Solution Approach 1:
The patent extracts the mask value generation and updating operations from the main cryptographic processing flow, performing them internally within the cryptographic unit rather than exposing them externally. This separation ensures mask values remain protected while enabling continuous cryptographic operations.
Solution Approach 2:
The patent changes the state of the mask value parameter by continuously updating it based on the power block sequencing value during cryptographic operations. This dynamic parameter change ensures that even if a mask value is temporarily exposed, it becomes invalid for subsequent operations, maintaining security.
2Productivity
If cryptographic processing is interrupted and resumed, then processing continuity is maintained, but traditional methods require re-generating mask values which reduces efficiency
Solution Approach 1:
The patent performs preliminary updating of the mask value during the cryptographic operation based on the power block sequencing value, so that when an interruption occurs and resumption is needed, the updated mask value is already prepared. This eliminates the time-consuming re-generation process and maintains high processing efficiency.
3Reliability
If mask values are protected by generating them internally, then security is improved, but the complexity of the cryptographic processing increases
Solution Approach 1:
The patent merges the mask value generation, updating, and cryptographic processing operations into a single integrated process within the cryptographic unit. By combining these functions, the patent avoids the complexity of separate external operations while maintaining security through internal mask value protection.
4Adaptability or versatility
If power block sequencing values are updated during cryptographic operations, then resumption after interruption is enabled, but the processing overhead increases
Solution Approach 1:
The patent implements self-service by having the cryptographic unit automatically update the power block sequencing value and corresponding mask value during normal operation without external intervention. This automation enables smooth interruption and resumption while minimizing processing overhead, as the updates occur as part of the standard cryptographic flow.
Data Source
AI summary
A cipher instruction is executed that includes encrypting a confidential value. A power block sequencing value is obtained as input to the cipher instruction, and a mask value is generated using the encrypted confidential value and the power block sequencing value. A cipher operation is performed on at least a portion of a message specified by the cipher instruction using the mask value. The power block sequencing value is updated, based on performing the cipher operation of the at least the portion of the message, to provide an updated power block sequencing value to be used in re-execution of the cipher instruction based on the cipher instruction being interrupted. The updated power block sequencing value is to be provided as input to the cipher instruction based on the cipher instruction being re-executed to re-generate the mask value to be used in continuing the cipher operation of the message.