Systems and methods for protecting data secrecy and integrity

• US 20050060560A1
• Filed: 09/24/2004
• Published: 03/17/2005
• Est. Priority Date: 12/22/1999
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Sibert, W. Olin
• Granted Patent: US 7,694,133 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0625 with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

A technique for integrating message authentication with encryption and decryption is disclosed. Intermediate internal states of the decryption operation are used to generate a validation code that can be used to detect manipulation of the encrypted data. The technique is optimized with respect to processing time, execution space for code and runtime data, and buffer usage. The technique is generally applicable to a variety of block ciphers, including TEA, Rijndael, DES, RC5, and RC6.

Claims

1-50. -50. (Canceled)

51. A computer program product configured to encrypt data, the computer program product including a computer-readable medium embodying instructions for:

receiving a data file;

encrypting the data file;

preparing the data file for transmission, the instructions for preparing the data file for transmission including instructions for;

decrypting a copy of the encrypted data file;

receiving a first internal state from the computer code for decrypting the copy of the encrypted data file; and

generating a first validation code by using, at least in part, the first internal state; and

transmitting the encrypted data file and the first validation code.

52. The computer program product of claim 51, wherein the computer readable medium is selected from the group consisting of:

CD-ROM, DVD, MINIDISC, floppy disk, tape, flash memory, ROM, RAM, system memory, hard drive, optical storage, and a data signal embodied in a carrier wave.

67. The computer program product of claim 51, further including instructions for executing a cipher algorithm used in one or both of the encryption or decryption processes.

68. The computer program product of claim 67, wherein a mixing function is executed in association with the cipher algorithm.

69. The computer program product of claim 67, wherein the cipher algorithm is a block cipher.

70. The computer program product of claim 69, wherein a mixing function is executed in association with the block cipher.

71. The computer program product of claim 70, wherein the block cipher is performed in one or more rounds and the mixing function is executed once for every round.

53. A computer-readable medium containing information including a data structure configured to enable integrated decryption and authentication of an encrypted data file, the data structure including:

an encrypted data file; and

a first validation code, the first validation code being operable to verify the authenticity of the encrypted data file;

wherein the encrypted data file and the first validation code are configured for use with an integrated decryption and validation procedure that is operable to produce decrypted data and to use at least one internal decryption state to generate a second validation code, the second validation code being equal to the first validation code if the encrypted data are not modified before decryption.

54. The computer-readable medium of claim 53, in which the data file includes a binary representation of a computer program.

55. The computer-readable medium of claim 53, wherein the computer readable medium is selected from the group consisting of:

CD-ROM, DVD, MINIDISC, floppy disk, tape, flash memory, ROM, RAM, system memory, hard drive, optical storage, and a data signal embodied in a carrier wave.

56. A computer program product configured to encrypt data, the computer program product embodying computer-readable instructions for:

receiving a data file;

encrypting the data file;

preparing the data file for transmission, the instructions for preparing the data file for transmission including instructions for;

decrypting a copy of the encrypted data file;

receiving a first internal state from the computer code for decrypting the copy of the encrypted data file; and

generating a first validation code by using, at least in part, the first internal state;

executing a mixing function in association with one or both of the encryption or decryption processes; and

transmitting the encrypted data file and the first validation code.

57. The computer program product of claim 56, wherein the mixing function is utilized in the generation of the first validation code.

58. The computer program product of claim 57, wherein the mixing function yields an output validation value used to generate the first validation code.

59. The computer program product of claim 58, wherein the mixing function combines a state value with an input validation value to yield the output validation value.

60. The computer program product of claim 59, wherein the state value is a internal intermediate state value.

61. The computer program product of claim 56, wherein the mixing function is used in one or both of encoding of the data file or decoding of the data file.

62. The computer program product of claim 56, further including instructions for executing a cipher algorithm that utilizes the mixing function to process data during the encryption process.

63. The computer program product of claim 62, wherein the data processed by the cipher algorithm is input ciphertext.

64. The computer program product of claim 62, wherein the data to be processed by the cipher algorithm is split into portions prior to processing.

65. The computer program product of claim 64, wherein the data to be processed by the cipher algorithm is split into two portions prior to processing.

66. The computer program product of claim 65, wherein the two portions are comprised of a first half and a second half that are about equal.

72. A computer program product configured to encrypt data, the computer program product embodying computer-readable instructions for:

receiving a data file;

encrypting the data file via a block cipher executed in rounds, including a key divided into subkeys;

preparing the data file for transmission, the instructions for preparing the data file for transmission including instructions for;

decrypting a copy of the encrypted data file;

receiving a first internal state from the computer code for decrypting the copy of the encrypted data file; and

generating a first validation code by using, at least in part, the first internal state; and

transmitting the encrypted data file and the first validation code.

73. The computer program product of claim 72, wherein the block cipher key is divided into four subkeys that are used in pairs in alternate rounds such that all four subkeys are used in each pair of rounds.

74. The computer program product of claim 72, wherein the block cipher includes a changing input.

75. The computer program product of claim 72, wherein the block cipher processes data via two round functions.

76. The computer program product of claim 74, wherein the two round functions are executed via a Fesitel cipher procedure.