Authenticated Encryption Tag Generation for INT-RUP Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Efficient authenticated encryption systems like OCB and OTR are not INT-RUP secure, leading to potential attacks when unverified plaintext is leaked, especially in scenarios with limited memory, as they fail to prevent decryption-misuse attacks.
Innovation Solution
An encryption and decryption system that divides plaintext into blocks, generates partial checksums, calculates a meta checksum using a keyed hash function, and produces a tag for tampering detection, ensuring INT-RUP security by encrypting the meta checksum to generate a secure authentication tag.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If efficient authenticated encryption systems like OCB and OTR are used, then encryption speed and resource efficiency are improved, but INT-RUP security deteriorates making them vulnerable to decryption-misuse attacks when unverified plaintext is leaked
Solution Approach 1:
The patent segments the plaintext into multiple blocks and processes each block independently through the encryption function with unique tweaks. This segmentation allows the system to maintain efficiency while enhancing security by preventing attackers from exploiting relationships between blocks in unverified plaintext leakage scenarios
Solution Approach 2:
The patent performs preliminary authentication tag generation using partial checksums of encrypted blocks before final decryption verification. This preliminary action ensures that even if unverified plaintext is leaked, attackers cannot exploit it without satisfying all linear constraints, thereby maintaining INT-RUP security
2Quantity of substance
If memory constraints on the decryption side are reduced, then resource efficiency is improved, but the risk of unverified plaintext leakage increases enabling decryption-misuse attacks
Solution Approach 1:
The patent introduces authentication tags as intermediary elements that mediate between the encrypted data and the decryption process. These tags provide verification without requiring additional memory storage of unverified plaintext, thus reducing memory constraints while preventing decryption-misuse attacks through the mathematical constraints of the authentication mechanism
3Ease of manufacture
If implementation errors occur in the encryption program, then ease of implementation is improved, but unverified plaintext may be leaked enabling security attacks
Solution Approach 1:
The patent implements beforehand cushioning by generating authentication tags that mathematically constrain any potential unverified plaintext leakage. Even if implementation errors occur and unverified plaintext is inadvertently released, the authentication mechanism ensures attackers cannot exploit it without satisfying all linear constraints, thus cushioning against security breaches from implementation errors
Data Source
AI summary
An encryption device includes an encryption unit that encrypts blocks, obtained by dividing a plaintext, with use of an auxiliary variable, a partial checksum generation unit that generates a plurality of partial checksums on the basis of the blocks obtained by dividing the plaintext, a meta checksum generation unit that generates a meta checksum on the basis of the partial checksums generated by the partial checksum generation unit, and a tag generation unit that generates a tag to be used for detecting tampering, on the basis of the meta checksum generated by the meta checksum generation unit. The encryption device outputs a ciphertext encrypted by the encryption unit and the tag generated by the tag generation unit.