ENCRYPTION/DECRYPTION ENGINE WITH SECURE MODES FOR KEY DECRYPTION AND KEY DERIVATION

• US 20090282264A1
• Filed: 02/17/2009
• Published: 11/12/2009
• Est. Priority Date: 05/08/2008
• Status: Active Grant

• Current Assignee: Texas Instruments, Inc.
• Original Assignee: Texas Instruments, Inc.
• Inventors: VIAL, Aymeric S., SIMON, Jean-Yves, AMIEL, Frederic P. R.
• Granted Patent: US 8,347,112 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

In at least some embodiments, an electronic device comprises a processor and an encryption/decryption (E/D) engine coupled to the processor via a bus. The E/D engine selectively operates in a first mode and a second mode. For the first mode, an E/D engine output is provided to the bus. For the second mode, the E/D engine output is not provided to the bus and is accessible only to the E/D engine.

Claims

1. An electronic device, comprising:

a processor; and

an encryption/decryption (E/D) engine coupled to the processor via a bus,

wherein the E/D engine selectively operates in a first mode and a second mode,

wherein, for the first mode, an E/D engine output is provided to the bus,

wherein, for the second mode, the E/D engine output is not provided to the bus and is accessible only to the E/D engine.

2. The electronic device of claim 1 wherein an input key selectively used with the first mode is diversified and wherein the diversified key is used as an input key for the E/D engine during the second mode.

3. The electronic device of claim 1 wherein an input key selectively used with the second mode is diversified and wherein the diversified key is used as an input key for the E/D engine during the first mode.

4. The electronic device of claim 1 wherein, during the second mode, an application key derived by the E/D engine is stored in a localized secure storage that forms part of a feedback loop between an output line of the E/D engine and a key input line of the E/D engine.

5. The electronic device of claim 4 wherein, for a third mode, the application key is retrieved from the localized secure storage for use as an input key of the E/D engine and wherein, during the third mode, the E/D engine output is provided to the bus.

6. The electronic device of claim 4 wherein, for a third mode, the application key is retrieved from the localized secure storage and is diversified for use as an input key of the E/D engine and wherein, during the third mode, the E/D engine output is provided to the bus.

7. The electronic device of claim 4 wherein, for a fourth mode, the application key is retrieved from the localized secure storage and is diversified for use as an input key of the E/D engine and wherein, during the fourth mode, the E/D engine output is provided to the bus if the E/D engine performs an encryption operation and is not provided to the bus if the E/D engine performs a decryption operation.

8. The electronic device of claim 4 wherein, for a fourth mode, the application key is retrieved from the localized secure storage for use as an input key of the E/D engine and wherein, during the fourth mode, the E/D engine output is provided to the bus if the E/D engine performs an encryption operation and is not provided to the bus if the E/D engine performs a decryption operation.

9. Security logic, comprising:

an encryption/decryption (E/D) engine having a data input line, a data output line, and a key input line; and

output restriction logic coupled to the data output line, the output restriction logic selectively prevents an E/D engine output from being forwarded outside the security logic; and

a feedback loop between the data output line and the key input line, wherein the feedback loop couples to the output restriction logic and selectively forwards an E/D engine output to the key input line.

10. The security logic of claim 9 wherein the output restriction logic comprises a demultiplexer that selectively directs the E/D engine output toward a data bus outside the security logic.

11. The security logic of claim 9 wherein the feedback loop comprises key selection logic that selects one of a plurality of keys for input to said key input line.

12. The security logic of claim 11 wherein the key selection logic comprises a localized secure storage that selectively stores the E/D engine output.

13. The security logic of claim 12 wherein the key selection logic selectively forwards a key stored in the localized secure storage to the key input line.

14. The security logic of claim 12 wherein the key selection logic selectively diversifies a key stored in the localized secure storage and forwards the diversified key to the key input line.

15. The security logic of claim 11 wherein the key selection logic receives a master key and diversifies the master key and wherein the key selection logic selectively forwards the master key or the diversified master key to the key input line.

16. The security logic of claim 11 wherein the key selection logic comprises a set of multiplexers that forward one a plurality of keys to the key input line based on mode selection signals, the plurality of keys corresponding to a key master key (KMK), a diversified KMK, an application key (K_app) and a diversified K_app.

17. The security logic of claim 16 wherein the mode selection signals comprise a first secure mode signal, a second secure mode signal, and an encryption/decryption mode signal.

18. A method for encryption/decryption (E/D) engine modes, comprising:

determining if a secure mode is selected; and

if the secure mode is selected, hiding an output of the E/D engine in a feedback loop accessible only by the E/D engine.

19. The method of claim 18 further comprising using a key for a non-restricted mode and diversifying the key for use during the secure mode.

20. The method of claim 18 further comprising using a key for the secure mode and diversifying the key for use during a non-restricted mode.