Deterministic Block Cipher Encryption Without Initial Value

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional block cipher algorithms that use an initial value can incur communication and storage costs, compromise security, and result in non-deterministic encryption, which is undesirable in applications like deduplication and searchable encryption.

Innovation Solution

The method performs encryption without using an initial value, utilizing a hash function to reduce computational costs and maintain determinism, by generating preliminary and finalized ciphertexts using block cipher operations without an initial value, and employing CBC or CBC-CTR modes with empty or fixed IVs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If an initial value is used in traditional block cipher algorithms, then encryption can be performed, but communication and storage costs increase

Engineering Contradiction:
Improveencryption implementationVSAvoidcommunication and storage costs
Core Design Contradiction:
Ease of manufactureVSQuantity of substance

Solution Approach 1:

The patent extracts and removes the initial value component from the encryption process. By eliminating the initial value requirement, the system reduces communication overhead (no need to transmit initial values) and storage costs (no need to store initial values), while maintaining encryption functionality through alternative mechanisms.

Inventive Principle:
Principle #2Taking out (Extraction)

2Ease of manufacture

If an initial value is used in traditional block cipher algorithms, then encryption can be performed, but security may be compromised

Engineering Contradiction:
Improveencryption implementationVSAvoidsecurity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent removes the initial value component that may introduce security vulnerabilities. By eliminating this component and replacing it with a security-focused design using key-dependent initialization, the system achieves both ease of implementation and enhanced security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary mechanism where the encryption key itself serves as the basis for initialization rather than a separate initial value. This intermediary approach ensures that the initialization process is tightly bound to the security mechanism, eliminating potential security gaps while maintaining implementation simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of manufacture

If an initial value is used in traditional block cipher algorithms, then encryption can be performed, but the encryption becomes non-deterministic

Engineering Contradiction:
Improveencryption implementationVSAvoiddeterminism
Core Design Contradiction:
Ease of manufactureVSStability of the object's composition

Solution Approach 1:

The patent extracts and removes the initial value component that causes non-determinism. By eliminating this variable element and replacing it with a deterministic key-based initialization process, the system achieves both ease of implementation and deterministic encryption output.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent changes the initialization parameter from a variable initial value to a fixed key-dependent value. This parameter change ensures that the same plaintext and key always produce the same ciphertext, achieving determinism while maintaining implementation simplicity.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11070356B2Text encryption
Publication Date: 2021.07.20 HEWLETT PACKARD ENTERPRISE DEV LP
  • US11070356B2 patent drawing
  • US11070356B2 patent drawing
  • US11070356B2 patent drawing

AI summary

In one example in accordance with the present disclosure, a method may receiving a plaintext to be encrypted. The plaintext may include a first block, a second block and a third block. The method may include generating a preliminary ciphertext based on the first block and the second block and generating, using an encryption key, a first ciphertext using an encryption operation receiving the third block and the preliminary ciphertext as inputs. The method may also include generating, using the encryption key, a first finalized ciphertext using the encryption operation receiving the first block and the first ciphertext as inputs and generating, using the encryption key, a second finalized ciphertext using the encryption operation receiving the second block and the first finalized ciphertext as inputs.