Incremental Authenticated Encryption for Large Data Streams
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional encryption techniques are inefficient for large data sets, prone to errors, and vulnerable to attacks, particularly when decrypting or authenticating only a portion of an encrypted file, and often require accessing the entire file.
Innovation Solution
Incremental authenticated encryption divides data into segments, encrypts each independently, and generates segment-specific authentication tags, allowing for partial decryption and authentication without accessing the entire file, while also providing security against chosen ciphertext attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional encryption techniques are used to encrypt large data sets, then security is provided, but decryption and authentication require accessing the entire file, reducing efficiency
Solution Approach 1:
The patent divides the encrypted data file into multiple segments, where each segment can be independently decrypted and authenticated. This segmentation allows users to access only the required portions of the data without needing to process the entire file, thereby improving efficiency and reducing access time while maintaining security through segment-specific authentication tags.
2Reliability
If traditional encryption techniques combine security and authentication, then security is enhanced, but implementation becomes error-prone and difficult
Solution Approach 1:
The patent merges security encryption and authentication into a unified incremental authenticated encryption process. By combining these functions at the segment level with integrated authentication tags, the system achieves both security and authentication simultaneously while simplifying implementation compared to separate traditional approaches.
3Object-affected harmful factors
If traditional encryption techniques are used, then data is encrypted, but vulnerability to ciphertext attacks increases
Solution Approach 1:
The patent applies preliminary anti-action by incorporating authentication tags with each encrypted segment that preemptively defend against ciphertext attacks. These tags verify the integrity and authenticity of segments before decryption, preventing attackers from successfully manipulating or analyzing encrypted data, thus countering potential attacks before they can compromise security.
Data Source
AI summary
Incremented authenticated encryption involves dividing a data stream to be encrypted into multiple data segments and encrypting each of the data segments. For each encrypted data segment, an authorization tag is generated. Each segment's authorization tag may be based on the corresponding segment's position in the sequence of data segments within the data stream. A segment authorization tag may be generated based on an segment initialization vector that may be incremented with each segment authorization tag. Each data segment may be encrypted independently of the others. Similarly, each encrypted data segment may be decrypted and authenticated independently of the others. Additionally, a final authentication tag may be generated. The final authentication tag may be used to authenticate all the data segments of the data stream as a whole.