ENCRYPTION ALGORITHM WITH RANDOMIZED BUFFER

• US 20110182419A1
• Filed: 03/30/2007
• Published: 07/28/2011
• Est. Priority Date: 03/30/2007
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Data Services Incorporated (Verizon Communications Inc.)
• Inventors: COOMER, Brad
• Granted Patent: US 9,059,838 B2
• Time in Patent Office: Days
• US Class Current: 380/28
• CPC Class Codes: H04L 2209/20 Manipulating the length of blocks of bits, e.g. padding or block truncation
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A system obtains a key and first and second plaintext, where the first plaintext is identical to the second plaintext. The system uses the key to encrypt the first plaintext to a first ciphertext and the second plaintext to a second ciphertext using a same encryption algorithm, where the first ciphertext is different than the second ciphertext.

Claims

1. A method, comprising:

obtaining a first item of plaintext and an encryption key;

encrypting the first item of plaintext using an encryption algorithm and the encryption key to produce first ciphertext;

obtaining a second item of plaintext, wherein the second item of plaintext is identical to the first item of plaintext; and

encrypting the second item of plaintext using the encryption algorithm and the encryption key to produce second ciphertext, where the second ciphertext is different than the first ciphertext.

2. The method of claim 1, further comprising:

decrypting the first ciphertext and the second ciphertext using a same decryption algorithm to produce the first item of plaintext and the second item of plaintext.

3. The method of claim 1, further comprising:

obtaining first and second randomized data from a random data generator;

appending the first randomized data to the first item of plaintext prior to encrypting the first item of plaintext; and

appending the second randomized data to the second item of plaintext prior to encrypting the second item of plaintext.

4. The method claim 3, wherein obtaining first and second randomized data from the random data generator comprises:

generating the first and second randomized data based on a different time at which the first and second randomized data are generated.

5. The method of claim 1, further comprising:

segmenting the first item of plaintext into a plurality of portions;

altering the encryption key to obtain a different key value for each portion of the first item of plaintext; and

determining a different cipher value for each portion of the first item of plaintext based on the different key value.

6. The method of claim 5, wherein the first ciphertext is based on the different cipher value for each portion of the first item of plaintext.

7. The method of claim 6, further comprising:

segmenting the second item of plaintext into a plurality of portions;

altering the encryption key to obtain a different key value for each portion of the second item of plaintext; and

determining a different cipher value for each portion of the second item of plaintext based on the different key value.

8. The method of claim 7, wherein the second ciphertext is based on the different cipher value for each portion of the second item of plaintext.

9. A system, comprising:

a first data buffer configured to store first and second plaintext, where the first plaintext is identical to the second plaintext; and

an encryption module configured to use a key to encrypt the first plaintext to a first ciphertext and the second plaintext to a second ciphertext using a same encryption algorithm, wherein the first ciphertext is different than the second ciphertext.

10. The system of claim 9, comprising:

a second data buffer configured to store the first and second ciphertext; and

a decryption module configured to use the key to decrypt the first ciphertext to the first plaintext and the second ciphertext to the second plaintext using a same decryption algorithm.

11. The system of claim 9, further comprising:

a random data generator configured to produce first random data for the first plaintext and second random data for the second plaintext, wherein the first random data is different than the second random data,

wherein the first data buffer is further configured to;

append the first random data to the first plaintext prior to the encryption module encrypting the first plaintext, and

append the second random data to the second plaintext prior to the encryption module encrypting the second plaintext.

12. The system of claim 9, wherein the encryption module is further configured to:

segment the first plaintext into multiple portions,

alter the key to obtain a different key value for each portion of the multiple portions, and

determine a different cipher value for each portion of the first plaintext based on a respective different key value.

13. The system of claim 12, wherein the encryption module is further configured to use the key to encrypt the first plaintext to the first ciphertext based on the different cipher value for each portion of the first plaintext.

14. The system of claim 13, wherein the encryption module is further configured to:

segment the second plaintext into multiple portions,

alter the key to obtain a different key value for each portion of the multiple portions, and

determine a different cipher value for each portion of the second plaintext based on a respective different key value.

15. The system of claim 14, wherein the encryption module is further configured to use the key to encrypt the second plaintext to the second ciphertext based on the different cipher value for each portion of the second plaintext.

16. A method, comprising:

obtaining plaintext and an encryption key;

obtaining randomized data;

appending the randomized data to the plaintext; and

encrypting the randomized data together with the plaintext using the encryption key to produce ciphertext.

17. The method of claim 16, wherein obtaining the randomized data comprises:

generating the randomized data based on a time at which the randomized data is generated.

18. The method of claim 16, wherein encrypting the randomized data together with the plaintext using the encryption key to produce ciphertext comprises:

segmenting the randomized data and plaintext into multiple portions;

altering the encryption key to obtain a different key value for each portion of the multiple portions, and

determining a different cipher value for each portion of the randomized data and plaintext based on a respective different key value.

19. The method of claim 18, wherein encrypting the randomized data together with the plaintext using the encryption key to produce ciphertext further comprises:

using the encryption key to encrypt the randomized data and the plaintext to the first ciphertext based on the different cipher value for each portion of the randomized data and plaintext.

20. A method, comprising:

obtaining plaintext and an encryption key;

segmenting the plaintext into multiple data portions;

altering the encryption key to obtain a different key value for each portion of the multiple portions of plaintext;

determining a different cipher value for each portion of the multiple portions of plaintext based on the different key value; and

generating ciphertext for the plaintext based on the different cipher value for each portion of the plaintext.