Key variable generator for an encryption/decryption device

• US 4,369,332 A
• Filed: 09/26/1979
• Issued: 01/18/1983
• Est. Priority Date: 09/26/1979
• Status: Expired due to Term

• Current Assignee: Unisys Corporation
• Original Assignee: Burroughs Incorporated (Terreno Realty Corp.)
• Inventors: Campbell, Carl M. Jr.
• Primary Examiner(s): Cangialosi, Sal
• Application Number:
  US06/078,913
• Time in Patent Office: 1,210 Days
• Field of Search: 178/22, 178/22.07, 178/22.18, 340/149 R
• US Class Current: 380/43
• CPC Class Codes: H04L 2209/125 Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations
• CPC Class Codes: H04L 9/0625 with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator

Abstract

An apparatus and method for generating a unique working key variable for controlling the operation of an encryption/decryption device during each user specified time period. The apparatus generates each working key variable by encrypting a user specified value, unique for each specified time period, under control of a fixed key variable stored in the apparatus. After the user specified value has been encrypted, the apparatus utilizes the encrypted (working) key variable to control the encryption/decryption of data during the corresponding user specified time period.

Claims

1. An apparatus for generating a working key variable for use in a cryptographic device, said cryptographic device including an input for incoming data, an input for a key variable and an output for translated data, said apparatus comprising:

plug-in means, engageable with said cryptographic device by an operator, said plug-in means for initiating and controlling the generation of one of said working key variables, said plug-in means including

switchable means, settable by said operator, said switchable means for entering an operator specified variable,

memory means for storing a fixed key variable, and

control means for causing the transfer of said operator specified variable to the incoming data input of said cryptographic device and the transfer of said fixed key variable to the key variable input of said cryptographic device, said control means additionally for activating said cryptographic device, wherein said operator specified variable is encrypted in accordance with said fixed key variable, whereby said working key variable is produced at the translated data output of said cryptographic device; and

means, connected to the translated data output of said cryptographic device and the key variable input of said cryptographic device, said latter means for supplying said generated working key variable as the key variable input to said cryptographic device.

2. The apparatus in accordance with claim 1 further including:

first input register means, connected to the incoming data input of said cryptographic device, said first input register means for inputting the incoming data to said cryptographic device; and

first transfer means, connected between said switchable means and said first input register means and responsive to said control means, said first transfer means for transferring the contents of said switchable means into said first input register means.

3. The apparatus in accordance with claim 2 wherein said first transfer means includes:

first register means, connected to said switchable means, said first register means for storing the contents of said switchable means; and

first byte transfer means, connected between one byte position of the output of said first register means and one input byte position of said first input register means, said first byte transfer means for transferring the connected output of said first register means to the connected input of said first input register means.

4. The apparatus in accordance with claim 3 wherein said first byte transfer means includes means, connected to said first register means for rotating the contents of said first register means at least one bit position.

5. The apparatus in accordance with claim 4 wherein:

said first byte transfer means is connected between the high order byte position of the output of said first register means and the low order input byte position of said first input register means; and

said first register rotating means includes means for rotating the contents of said first register means one byte position left.

6. The apparatus in accordance with claim 4 wherein said first input register means further includes means for shifting the contents of said first input register means one byte position left.

7. The apparatus in accordance with claim 2 wherein said switchable means includes at least one variable selector switch for entering the operator specified variable.

8. The apparatus in accordance with claim 1 or 2 further including:

second input register means, connected to the key variable input of said cryptographic device, said second input register means for inputting the key variable to said cryptographic device; and

second transfer means, connected between said memory means and said second input register means and responsive to said control means, said second transfer means for transferring the contents of said memory means to said second input register means.

9. The apparatus in accordance with claim 8 wherein said memory means includes a read only memory.

10. The apparatus in accordance with claim 8 wherein said second transfer means includes:

second register means, connected to said memory means, said second register means for storing the contents of said memory means; and

second byte transfer means, connected between one byte position of the output of said second register means and one input byte position of said second input register means, said second byte transfer means for transferring the connected output of said second register means to the connected input of said second input register means.

11. The apparatus in accordance with claim 10 wherein said second byte transfer means includes means, connected to said second register means, for rotating the contents of said second register means at least one bit position.

12. The apparatus in accordance with claim 11 wherein:

said second byte transfer means is connected between the high order byte position of the output of said second register means and the low order byte position of said second input register means; and

said second register rotating means includes means for rotating the contents of said second register means one byte position left.

13. The apparatus in accordance with claim 11 wherein said second input register means includes means for shifting the contents of said second input register one byte position left.

14. The apparatus in accordance with claim 8 wherein said generated working key variable supply means includes:

output register means for storing the translated data output of said cryptographic device; and

third transfer means, connected between the output of said output register means and the input to said second input register means, said third transfer means for transferring the contents of said output register means into said second input register means.

15. The apparatus in accordance with claim 14 wherein said third transfer means is connected between the high order byte position of the output of said output register means and the low order byte position of the input to said second input register means.

16. The apparatus in accordance with claim 15 wherein said output register means includes means for shifting the contents of said output register means at least one bit position.

17. The apparatus in accordance with claim 1 further including

first byte transfer means, connected between one byte position of the output of said switchable means and one byte position of the incoming data input of said cryptographic device and responsive to said control means, said first byte transfer means for transferring the connected output of said switchable means to the connected incoming data input of said cryptographic device.

18. The apparatus in accordance with claim 17 wherein said first byte transfer means is connected between the high order byte position of the output of said switchable means and the low order byte position of the incoming data input to said cryptographic device.

19. The apparatus in accordance with claim 1 or 17 further including

second byte transfer means, connected between one byte position of the output of said memory means and one byte position of the key variable input to said cryptographic device and responsive to said control means, said second transfer means for transferring the connected output of said memory means to the connected key variable input of said cryptographic device.

20. The apparatus in accordance with claim 19 wherein said second byte transfer means is connected between the high order byte position of the output of said memory means and the low order byte position of the key variable input to said cryptographic device.

21. The apparatus in accordance with claim 1 or 2 wherein said generated working key variable supply means includes:

output register means for storing the translated data output of said cryptographic device; and

third transfer means, connected between the output of said output register means and the input to said key variable supply means, said third transfer means for transferring the contents of said output register means into said key variable supply means.

22. The apparatus in accordance with claim 21 wherein said third transfer means is characterized as being connected between the high order byte position of the output of said output register means and the low order byte position of the input of said key variable supply means.

23. The apparatus in accordance with claim 1 or 2 or 17 wherein said generated key variable supply means includes third transfer means, connected between the translated data output of said cryptographic device and the input to said key variable supply means, said third transfer means for transferring the translated data output of said cryptographic device into said key variable supply means.

24. The apparatus in accordance with claim 23 wherein said third transfer means is characterized as being connected between the high order byte position of the translated data output of said cryptographic device and the low order byte position of the input of said key variable supply means.

25. The method of generating a working key variable in accordance with claim 1 wherein said step d further includes the step of waiting until said cryptographic device has completed encrypting the contents of said incoming plain text data means before proceeding to said step e.

26. The method in accordance with claim 1 wherein the entire contents of said key variable input means is replaced by said generated working key variable in said step e.

27. A method of generating a working key variable for use in a cryptographic device, said cryptographic device including input means for accepting incoming plain text data, input means for accepting a key variable and an output for translated data, said method comprising the steps of:

a. providing said cryptographic device with an operator selected variable and a fixed value;

b1. transferring the high order byte of the provided operator selected variable into the low order byte position of said incoming plain text data means;

b2. shifting the contents of said incoming plain text data means one byte position left;

b3. shifting the provided operator selected variable one byte position left;

b4. repeating steps b1 through b3 until the entire provided operator selected variable has been transferred into the incoming plain text data means;

c. storing said fixed value in the key variable input means;

d. operating said cryptographic device wherein said operator selected variable stored in said incoming plain text data means is encrypted in accordance with said fixed value stored in said key variable input means, wherby a working key variable is generated at the translated data output of said cryptographic device; and

e. storing the generated working key variable in said key variable input means.

28. The method of generating a working key variable in accordance with claim 27 wherein said step c comprises the steps of:

j. transferring the high order byte of the provided fixed value into the low order byte position of the key variable input means;

k. shifting the content of said key variable input means one byte position left;

l. shifting the provided fixed value one byte position to the left; and

m. repeating steps j through l until the entire provided fixed value has been transferred into said key variable input means.

29. The method of generating a working key variable in accordance with claim 27 or 28 wherein said step e comprises the steps of:

n. transferring the high order byte of the translated output of said cryptographic device into the low order byte position of said key variable input means;

o. shifting the contents of said key variable input means one byte position left;

p. shifting the translated data output of said cryptographic device one byte position left; and

q. repeating steps n through p until the entire translated data output of said cryptographic device has been transferred into said key variable input means.