Dynamic S-Box AES With Fusion Functions for Side-Channel Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems, such as AES and RSA, are vulnerable to attacks in quantum computing environments, particularly side-channel attacks, and existing post-quantum cryptography solutions are resource-intensive and inefficient for IoT devices.
Innovation Solution
Implementing AES with frequent S-box updates and a fusion function to enhance security, using secure S-boxes and reducing computational load through look-up operations, thereby enhancing resistance to side-channel attacks and maintaining security in quantum environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If AES uses traditional static S-boxes, then the encryption process is simple and fast, but it becomes vulnerable to side-channel attacks and quantum computing threats
Solution Approach 1:
The patent implements dynamic S-box generation by introducing a non-linear function that transforms subkeys into S-box values during each encryption round. This dynamic transformation allows the S-boxes to change with each round, preventing adversaries from exploiting static patterns while maintaining computational efficiency through algorithmic generation rather than storage of multiple S-box tables.
Solution Approach 2:
The patent changes the parameters of the encryption process by deriving S-box values from subkeys through a non-linear function. This parameter transformation ensures that the S-box characteristics vary with each round based on the evolving subkey values, thereby enhancing security against side-channel attacks without requiring external updates or complex key management infrastructure.
2Reliability
If AES implements frequent S-box updates to resist attacks, then security against side-channel attacks improves, but computational load and latency increase
Solution Approach 1:
The patent replaces the mechanical approach of storing and switching between multiple pre-computed S-box tables with an algorithmic system that generates S-box values on-the-fly through a non-linear function. This substitution eliminates the need for extensive memory access and table lookups, reducing computational overhead while maintaining the security benefits of dynamic S-box transformation.
Solution Approach 2:
The encryption algorithm becomes self-sufficient by generating its own round-specific S-box values from the subkeys during the encryption process itself. This self-service mechanism eliminates the need for external key management systems to provide multiple S-box tables, reducing system complexity and computational load while ensuring that each round uses unique, attack-resistant S-box transformations.
3Reliability
If post-quantum cryptography algorithms are used to counter quantum threats, then security against quantum attacks improves, but key sizes and computational requirements become too large for IoT devices
Solution Approach 1:
The patent enhances the security parameters of AES by introducing a non-linear transformation layer that derives round-specific S-box values from subkeys. This parameter transformation creates a more complex security landscape that resists quantum attacks while maintaining the original AES key sizes and computational structure, making it suitable for resource-constrained IoT devices.
Solution Approach 2:
The patent introduces dynamic transformation of cryptographic parameters during the encryption process, where S-box values change with each round based on subkey derivation. This dynamic approach provides quantum resistance by preventing the kind of static pattern analysis that quantum algorithms excel at, while keeping the computational overhead minimal compared to full post-quantum cryptography implementations.
Data Source
AI summary
A method and system for implementing Advanced Encryption Standard (AES) with frequent S-box update and fusion function application is proposed. Initially, a first fusion function input is obtained based on an XOR of an input plaintext and a first cryptographic key. Thereafter, a set of encryption rounds is executed for generating a state output. This includes applying a fusion function on a fusion function input for generating a fusion function output and performing an XOR on the fusion function output and a second cryptographic key for obtaining an encryption output. The first fusion function input is the fusion function input for a first encryption round, the encryption output is the fusion function input for a following encryption round, and the encryption output obtained after last encryption round is the state output. Finally, a final round of AES encryption is executed based on the state output to obtain a ciphertext.