SYSTEM AND METHODS FOR ENCRYPTION WITH AUTHENTICATION INTEGRITY

• US 20110286596A1
• Filed: 01/28/2010
• Published: 11/24/2011
• Est. Priority Date: 01/29/2009
• Status: Active Grant

• Current Assignee: Fortress Applications Ltd.
• Original Assignee: Fortress Applications Ltd.
• Inventors: Gressel, Carmi David, Salmon, Timothy James, Courtois, Nicolas Tadeusz, Mintz, Itzhak, Hecht, Avi, Bard, Gregory Van, Granot, Ran
• Granted Patent: US 8,280,056 B2
• Time in Patent Office: Days
• US Class Current: 380/268
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A data integrity system including a transmitter, having a TX pseudorandom function generator, a TX switching function having a transmitting option and a TX combiner operative to receive, from a Host, an initialization data entity including at least one word, [TA1], in an initialization phase, to receive, during normal operation, two data entities of interest each including at least one data word of interest [TA2] and [TA3] respectively; to receive a first data entity including at least one word [TC1] comprising a randomized data entry, from the TX pseudorandom function generator, to generate a first XOR sum of the initialization data entity'"'"'s word [TA1] and the at least one randomized data entity [TC1], in at least one iteration of an initialization phase; and, during normal operation, to generate and to output a second XOR sum [TA2⊕TC2=TB2] and a third XOR sum [TA3⊕TC3=TB3], wherein TB2 and TB3 are randomized data entities, wherein the words TA1, TA2 and TA3 are operative to initialize the data integrity system including enabling the data integrity system to encrypt the TA2 word and to generate an identifying hash value output using the TA3 word.

Claims

1. A data integrity system including:

a transmitter, having a TX pseudorandom function generator, a TX switching function having a transmitting option and a TX combiner;

the TX combiner being operative to receive, from a Host, an initialization data entity including at least one word, [TA1], in an initialization phase, to receive, during normal operation, two data entities of interest [DOI 1=TA2] and [DOI 2=TA3] each including at least one data word of interest, [TA2] and [TA3] respectively;

to receive a first data entity including at least one word [TC1] comprising a randomized data entry, from the TX pseudorandom function generator, to generate a first XOR sum [TA1⊕

TC1=TB1] of said initialization data entity'"'"'s word [TA1] and said at least one randomized data entity [TC1], in at least one iteration of an initialization phase; and

, during normal operation, to generate and to output a second XOR sum [TA2⊕

TC2=TB2] and a third XOR sum [TA3⊕

TC3=TB3], wherein TB2 and TB3 are randomized data entities,

wherein said words TA1, TA2 and TA3 are operative to initialize said data integrity system including enabling said data integrity system to encrypt said TA2 word and to generate an identifying hash value output using said TA3 word.

2. A system according to claim 1 and also comprising a receiver, including an RX pseudorandom function generator which is functionally equivalent to said TX pseudorandom function generator, an RX switching function having both a transmitting option and a receiving option and an RX combiner.

3. A system according to claim 1 wherein said second XOR sum includes an encoding of said data entities of interest [TA2] and [TA3] and two unpredictable data entities each comprising at least one data word [TC2] provided by the TX pseudorandom function generator.

4. A system according to claim 1 wherein said third XOR sum includes an encoding of said data entities of interest [TA2] and [TA3] and two unpredictable data entities each comprising at least one data word [TC3] provided by the TX pseudorandom function generator.

5. A system according to claim 1 wherein said TX switching function is operative to route said first, second and third XOR sums [TB1], [TB2] and [TB3] to serve as inputs to said TX pseudorandom function generator.

6. A system according to claim 1 wherein the TX pseudorandom function generator is operative to receive the first, second and third XOR sums [TB1], [TB2] and [TB3] from the TX combiner, to generate the randomized'"'"'data entities [TC1], [TC2] and [TC3] therefrom and to generate said randomized data entities to the TX combiner.

7. A system according to claim 6 wherein the randomized data entries [TC1], [TC2] and [TC3] are functions f0, f1 and f2 respectively of the XOR sums [TB I], [TB2] and [TB3] respectively.

8. A system according to claim 7 and wherein said functions f0, f1 and f2 each comprise an intractable randomizing function of at least one of the pseudorandom function generators operative to be affected by at least one of said XOR sums.

9. A system according to claim 2 wherein the RX switching function is operative to receive, from a Host, a data entity [RA1] shared with the transmitter such that [RA1=TA1] and wherein said data entity [RA1] is XOR summed to at least one word data entity [RC1] which is output from the RX pseudorandom function generator;

and to route an output [RB1=RC1⊕

RA1] of said combiner to said RX pseudorandom function generator during at least one iteration of the initialization phase.

10. A system according to claim 9 and wherein, in a second, normal operation, phase said RX switching function is operative to receive an output of the TX combiner including encoded data of interest TX XOR sums [TB2=TC2⊕

TA2) and [TB3=TC3⊕

TA3) and to route RX inputs [TB1] and [TB2] to said RX pseudorandom function generator.

11. A system according to claim 10 wherein TA2 comprises a DOI1 file including clear text and wherein said DOI1 File comprises at least one unpredictable word data entity including [TC2=ƒ

1(TB1] from the TX pseudorandom function generator.

12. A system according to claim 10 wherein TA3 comprises a DOI2 file including a Hash Generating Word repeated if data is more than 1 word in length, and wherein said DOI2 File comprises at least one unpredictable word data entity including [TC3=ƒ

2(TB2] from the TX pseudorandom function generator.

13. A system according to claim 9 wherein the RX combiner is operative during the initialization phase to receive said initialization data entity [RA1=TA1] in at least one iteration of said initialization iteration phase.

14. A system according to claim 9 wherein the RX combiner is operative during normal operation to receive the at least one word encoded data entities [TB2] and [TB3], from the TX XOR combiner output.

15. A system according to claim 14 wherein said shared first input data [RA1=TA1] is XOR summed to [RC1=ƒ

1((RB1)] from said RX pseudorandom function generator and is not output to a Host Sampler.

16. A system according to claim 9 wherein the RX combiner is operative during normal operation to generate XOR sums of said two TX data outputs [TB2] and [TB3] with two RX unpredictable data entities from RX pseudorandom function generator [RC2] and [RC3] thereby to reconstruct data of interest.

17. A system according to claim 16 wherein said data of interest includes [(TA2⊕

((RC2=TC2)=TB3)⊕

TB3=TA2=DOI 1=reconstructed clear text] and [(TA3⊕

((RC3=TC3)=TB3⊕

TB3=TA3=DOI 2 the Hash Generation Word repeated at least once], thereby indicating the validity of DO 1 because (x⊕

x=0 and x⊕

0=x).

18. A system according to claim 9 wherein, when in normal operation, the RX pseudorandom function generator is operative to receive said [TB2] data and [TB3] data directly via said RX switching function thereby to generate at least two unpredictable identical data entities [RC2=TC2] and [RC3=TC3] and thereby to continue maintenance of identical RX pseudorandom function generator and TX pseudorandom function generator binary state variables.

19. A system according to claim 18 wherein said [TB2] data and [TB3] data are received simultaneously.

20. A system according to claim 1 wherein said words TA1, TA2 and TA3 are operative to initialize said data integrity system including enabling said data integrity system to simultaneously encrypt said TA2 word and generate an identifying hash value output using said TA3 word.

21. A system according to claim 1 and also including a population of data integrity systems each having a TA3 word and wherein each individual data integrity system'"'"'s TA3 word is unique to said individual data integrity system.

22. A data integrity method including:

providing a transmitter, having a TX pseudorandom function generator, a TX switching function having a transmitting option and a TX combiner;

using the TX combiner to receive, from a Host, an initialization data entity including at least one word, [TA1], in an initialization phase, to receive, during normal operation, two data entities of interest [DOI 1=TA2] and [DOI 2=TA3] each including at least one data word of interest, [TA2] and [TA3] respectively;

to receive a first data entity including at least one word [TC1] comprising a randomized data entry, from the TX pseudorandom function generator, to generate a first XOR sum [TA1⊕

TC1=TB I] of said initialization data entity'"'"'s word [TA1] and said at least one randomized data entity [TC1], in at least one iteration of an initialization phase; and

, during normal operation, to generate and to output a second XOR sum [TA2⊕

TC2=TB2] and a third XOR sum [TA3⊕

TC3=TB3], wherein TB2 and TB3 are randomized data entities, wherein said words TA1, TA2 and TA3 are operative to initialize said data integrity system including enabling said data integrity system to encrypt said TA2 word and to generate an identifying hash value output using said TA3 word.

23. A randomness enhancing method operative to enhance randomness of a pseudo random function computation system including a pseudo random function generator, the method comprising:

using at least one word length concatenation of at least two relatively prime length maximum length linear feedback shift register data words to output a unique pseudo random word count sequence; and

combining the random word count sequence to at least one input to at least one pseudo random function computation system inputs thereby to add pseudo randomness to the pseudo random function generator.

24. (canceled)

25. (canceled)