ENCRYPTION OUTPUT DATA GENERATION METHOD AND SYSTEM

• US 20080310631A1
• Filed: 06/13/2007
• Published: 12/18/2008
• Est. Priority Date: 06/13/2007
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Lott, David Robert
• Granted Patent: US 7,925,886 B2
• Time in Patent Office: Days
• US Class Current: 380/255
• CPC Class Codes: H04L 2209/20 Manipulating the length of blocks of bits, e.g. padding or block truncation
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC

Abstract

A hashing method and system. The method comprises receiving by a computing system first source data. A first hash function is applied to first source data. A first hash output is generated by the first hash function as a result of applying the first hash function to first source data. The computing system performs an operation relating the first source data with at least a portion of the first hash output to generate second source data. The first hash function is applied to the second source data. A second hash output is generated as a result of applying the first hash function to the second source data.

Claims

1. A method, comprising:

receiving, by a computing system, first source data (S1);

first applying, by said computing system, a first hash function to said first source data (S1);

generating as a result of said first applying, by said first hash function, a first hash output (H1);

performing, by said computing system, an operation relating, said first source data (S1) with at least a portion of said first hash output (H1) to generate second source data (S2);

second applying, by said computing system, said first hash function (H1) to said second source data (S2); and

generating as a result of said second applying, by said first hash function, a second hash output (H2).

2. The method of claim 1, further comprising:

determining a numerical value (N1) for a first byte of said first hash output (H1); and

determining a total number (N2) of bytes in said first source data (S1).

3. The method of claim 2, further comprising:

calculating, by said computing system, a remainder (R), wherein said remainder (R)=N1 mod N2.

4. The method of claim 3, further comprising:

combining, by said computing system, said first hash output (H1) with a number (N3) of zeros equivalent to a value of said remainder (R) such that said first hash output (H1) comprises said zeros; and

second comparing said total number (N2) of bytes of said first source data (S1) with a number (N4) of bytes comprised by said first hash output (H1) comprising said zeros to determine if said total number (N2) of bytes is greater than said number (N4) of bytes.

5. The method of claim 4, wherein said second comparing determines that said number (N4) of bytes is greater than said total number (N2) of bytes, and wherein said method further comprises:

removing, by said computing system, at least one byte of said first hash output (H1) such that first hash output (H1) does not comprise said at least one byte of said first hash output (H1).

6. The method of claim 4, wherein said second comparing determines that said number (N4) of bytes is not greater than said total number (N2) of bytes.

7. The method of claim 1, wherein said portion of said first hash output (H1) comprises the entire hash output (H1).

8. The method of claim 1, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises XORing said first source data (S1) and said first hash output (H1) to form S1 XOR H1 as said second source data (S2).

9. The method of claim 1, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises concatenating said first source data (S1) with said first hash output (H1) to form S1H1 as said second source data (S2).

10. A computing system comprising a processor and a computer readable memory unit coupled to the processor, said memory unit containing instructions that when executed by the processor implement a hashing method, said method comprising:

receiving, by a computing system, first source data (S1);

first applying, by said computing system, a first hash function to said first source data (S1);

generating as a result of said first applying, by said first hash function, a first hash output (H1);

performing, by said computing system, an operation relating, said first source data (S1) with at least a portion of said first hash output (H1) to generate second source data (S2);

second applying, by said computing system, said first hash function (H1) to said second source data (S2); and

generating as a result of said second applying, by said first hash function, a second hash output (H2).

11. The computing system of claim 10, wherein said method further comprises:

determining a numerical value (N1) for a first byte of said first hash output (H1); and

determining a total number (N2) of bytes in said first source data (S1).

12. The computing system of claim 11, wherein said method further comprises:

calculating, by said computing system, a remainder (R), wherein said remainder (R)=N1 mod N2.

13. The computing system of claim 12, wherein said method further comprises:

combining, by said computing system, said first hash output (H1) with a number (N3) of zeros equivalent to a value of said remainder (R) such that said first hash output (H1) comprises said zeros; and

second comparing said total number (N2) of bytes of said first source data (S1) with a number (N4) of bytes comprised by said first hash output (H1) comprising said zeros to determine if said total number (N2) of bytes is greater than said number (N4) of bytes.

14. The computing system of claim 13, wherein said second comparing determines that said number (N4) of bytes is greater than said total number (N2) of bytes, and wherein said method further comprises:

removing, by said computing system, at least one byte of said first hash output (H1) such that first hash output (H1) does not comprise said at least one byte of said first hash output (H1).

15. The computing system of claim 13, wherein said second comparing determines that said number (N4) of bytes is not greater than said total number (N2) of bytes.

16. The computing system of claim 10, wherein said portion of said first hash output (H1) comprises the entire hash output (H1).

17. The computing system of claim 10, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises XORing said first source data (S1) and said first hash output (H1) to form S1 XOR H1 as said second source data (S2).

18. The computing system of claim 10, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises concatenating said first source data (S1) with said first hash output (H1) to form S1H1 as said second source data (S2).

19. A computer program product, comprising a computer usable medium having a computer readable program code embodied therein, said computer readable program code comprising an algorithm adapted to implement a hashing method within a computing system, said method comprising:

receiving, by a computing system, first source data (S1);

first applying, by said computing system, a first hash function to said first source data (S1);

generating as a result of said first applying, by said first hash function, a first hash output (H1);

performing, by said computing system, an operation relating, said first source data (S1) with at least a portion of said first hash output (H1) to generate second source data (S2);

second applying, by said computing system, said first hash function (H1) to said second source data (S2); and

generating as a result of said second applying, by said first hash function, a second hash output (H2).

20. The computer program product of claim 19, wherein said method further comprises:

determining a numerical value (N1) for a first byte of said first hash output (H1); and

determining a total number (N2) of bytes in said first source data (S1).

21. The computer program product of claim 20, wherein said method further comprises:

calculating, by said computing system, a remainder (R), wherein said remainder (R)=N1 mod N2.

22. The computer program product of claim 21, wherein said method further comprises:

combining, by said computing system, said first hash output (H1) with a number (N3) of zeros equivalent to a value of said remainder (R), wherein said first hash output (H1) additionally comprises said zeros; and

second comparing said total number (N2) of bytes of said first source data (S1) with a number (N4) of bytes comprised by said first hash output (H1) comprising said zeros to determine if said total number (N2) of bytes is greater than said number (N4) of bytes.

23. The computer program product of claim 22, wherein said second comparing determines that said number (N4) of bytes is greater than said total number (N2) of bytes, and wherein said method further comprises:

removing, by said computing system, at least one byte of said first hash output (H1) such that first hash output (H1) does not comprise said at least one byte of said first hash output (H1).

24. The computer program product of claim 22, wherein said second comparing determines that said number (N4) of bytes is not greater than said total number (N2) of bytes.

25. The computer program product of claim 19, wherein said portion of said first hash output (H1) comprises the entire hash output (H1).

26. The computer program product of claim 19, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises XORing said first source data (S1) and said first hash output (H1) to form S1 XOR H1 as said second source data (S2).

27. The computer program product of claim 19, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises concatenating said first source data (S1) with said first hash output (H1) to form S1H1 as said second source data (S2).

28. A process for integrating computing infrastructure, comprising integrating computer-readable code into a computing system, wherein the computing system comprises a computer usable medium, and wherein the code in combination with the computing system is capable of performing a hashing method comprising:

receiving, by a computing system, first source data (S1);

first applying, by said computing system, a first hash function to said first source data (S1);

generating as a result of said first applying, by said first hash function, a first hash output (H1);

performing, by said computing system, an operation relating, said first source data (S1) with at least a portion of said first hash output (H1) to generate second source data (S2);

second applying, by said computing system, said first hash function (H1) to said second source data (S2); and

generating as a result of said second applying, by said first hash function, a second hash output (H2).

29. The process of claim 28, wherein said method further comprises:

determining a numerical value (N1) for a first byte of said first hash output (H1); and

determining a total number (N2) of bytes in said first source data (S1).

30. The process of claim 29, wherein said method further comprises:

calculating, by said computing system, a remainder (R), wherein said remainder (R)=N1 mod N2.

31. The process of claim 30, wherein said method further comprises:

combining, by said computing system, said first hash output (H1) with a number (N3) of zeros equivalent to a value of said remainder (R), wherein said first hash output (H1) additionally comprises said zeros; and

second comparing said total number (N2) of bytes of said first source data (S1) with a number (N4) of bytes comprised by said first hash output (H1) comprising said zeros to determine if said total number (N2) of bytes is greater than said number (N4) of bytes.

32. The process of claim 31, wherein said second comparing determines that said number (N4) of bytes is greater than said total number (N2) of bytes, and wherein said method further comprises:

removing, by said computing system, at least one byte of said first hash output (H1) such that first hash output (H1) does not comprise said at least one byte of said first hash output (H1).

33. The process of claim 31, wherein said second comparing determines that said number (N4) of bytes is not greater than said total number (N2) of bytes.

34. The process of claim 28, wherein said portion of said first hash output (H1) comprises the entire hash output (H1).

35. The process of claim 28, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises XORing said first source data (S1) and said first hash output (H1) to form S1 XOR H1 as said second source data (S2).

36. The process of claim 28, wherein said performing said operation relating said first source data (S1) with said first hash output (H1) comprises concatenating said first source data (S1) with said first hash output (H1) to form S1H1 as said second source data (S2).