Nonce Authentication in Authenticated Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption systems face challenges in ensuring the secure use of nonces, as they often require uniqueness and the same cryptographic key and nonce to be used in both encryption and decryption, which can lead to insecure usage and increased vulnerability to cryptographic attacks.
Innovation Solution
Implementing an authenticated encryption mode, such as AES-GCM or AES-CBC, where the nonce is authenticated prior to decryption, using additional authenticated data (AAD) to ensure the nonce's integrity and binding it to the cryptographic key, thereby preventing insecure nonce usage and enhancing data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption systems use nonces without authentication, then encryption operations can be performed, but the system becomes vulnerable to cryptographic attacks and insecure nonce usage
Solution Approach 1:
The system performs preliminary authentication of the nonce and additional authenticated data (AAD) before executing the decryption operation. This preliminary check verifies the integrity and authenticity of inputs, preventing cryptographic attacks before they can compromise the encryption security.
Solution Approach 2:
The patent introduces an authentication mechanism as an intermediary step between receiving encryption/decryption requests and performing the cryptographic operations. This intermediary validates nonces and AAD, acting as a protective barrier against insecure nonce usage and cryptographic attacks.
2Reliability
If the system enforces strict nonce uniqueness and binding constraints, then encryption integrity is maintained, but the complexity of the encryption system increases
Solution Approach 1:
The patent combines nonce authentication and AAD verification into a single integrated authentication step that occurs before decryption. By merging these security functions into one cohesive process, the system maintains strict nonce binding constraints without proportionally increasing overall system complexity.
Data Source
AI summary
Data security is enhanced by receiving a request that identifies an encrypted data key, an authentication tag, and additional authenticated data that includes at least a nonce. In some cases, the authentication tag is cryptographically derivable from the encrypted data key and the additional authenticated data. A system, in some cases, determines whether the nonce is authentic and decrypts the encrypted data key by using at least a cryptographic key and the nonce, thereby resulting in a plaintext data key that is usable in various contexts.