Encrypted Data Key Swapping via XOR Without Plaintext Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for changing the encryption of data require the plaintext to be exposed, making it vulnerable to attacks, and rely on expensive hardware security modules (HSMs) or are computationally demanding, especially when dealing with symmetric and asymmetric encryption.
Innovation Solution
A method using an exclusive OR (XOR) operation on encryption keys to swap the encryption without exposing the plaintext, allowing for efficient change of encryption properties without the need for secure hardware, using block ciphers like counter, Galois/counter, cipher feedback, or output feedback modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If ciphertext is decrypted using the original key and then encrypted with a new key, then the encryption can be changed, but the plaintext becomes exposed and vulnerable to attacks
Solution Approach 1:
The patent introduces an intermediary mechanism using a swap key (derived from XOR operation on old and new keys) to transform ciphertext directly from one encryption key to another without exposing plaintext. The swap key acts as a mediator that enables key transition while maintaining data confidentiality throughout the process.
Solution Approach 2:
The patent changes the encryption parameter by using XOR operation between the old key and new key to generate a swap key. This parameter transformation allows the ciphertext to be re-encrypted under a new key through a mathematical operation rather than through decryption and re-encryption, thus avoiding plaintext exposure.
2Object-affected harmful factors
If hardware security modules (HSMs) are used to change encryption, then data security is maintained, but the system becomes expensive and incompatible with cloud-based servers
Solution Approach 1:
The patent replaces the mechanical hardware security module system with a software-based cryptographic operation. Instead of requiring physical HSM devices to perform secure key change operations, the invention uses mathematical XOR operations that can be executed in software, eliminating the need for expensive hardware while maintaining security.
Solution Approach 2:
The patent uses a disposable swap key that is generated temporarily for the key change operation and then discarded. This temporary key enables the transformation without requiring persistent hardware security infrastructure, reducing both cost and complexity while maintaining security for the duration of the operation.
3Object-affected harmful factors
If homomorphic encryption is used to perform computation on ciphertext, then computation can be performed without decryption, but the computational cost and time requirements increase significantly
Solution Approach 1:
The patent uses a simple parameter change approach via XOR operation rather than complex homomorphic encryption mathematics. This parameter transformation method achieves the same security goal (keeping data encrypted during processing) but with dramatically lower computational overhead and faster execution speed.
Data Source
AI summary
This disclosure relates to a computer-implemented method, a data processing apparatus, a computer program, and a computer-readable storage medium for processing encrypted data. There is provided a computer-implemented method for processing encrypted data, comprising receiving a swap key, wherein the swap key is the product of an exclusive OR operation performed on a first key and a second key; receiving a first ciphertext, wherein the first ciphertext is encrypted with the first key and not encrypted with the second key; and performing an exclusive OR operation on the swap key and the first ciphertext to produce second ciphertext, such that the second ciphertext is encrypted with the second key and not encrypted with the first key.