Encryption of streams of addressed information to be used for program code protection

• US 5,058,164 A
• Filed: 05/03/1990
• Issued: 10/15/1991
• Est. Priority Date: 05/03/1990
• Status: Expired due to Term

• Current Assignee: National Semiconductor Corporation (Texas Instruments, Inc.)
• Original Assignee: National Semiconductor Corporation (Texas Instruments, Inc.)
• Inventors: Elmer, Thomas I., Nguyen, Tuan T., Lin, Rung-Pan
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/518,117
• Time in Patent Office: 530 Days
• Field of Search: 380/4, 380/6, 380/9, 380/28, 380/50, 380/42, 380/49
• US Class Current: 713/190
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

An encryption method is taught which chooses certain bytes of data, stored in a particular on-chip memory, as encryption keys. These chosen bytes are used to encrypt themselves, and all of the remaining data in the above mentioned particular memory. The chosen bytes do not have values specifically assigned for encryption, they are merely chosen, according to a rule, from the body of data to be encrypted. When this technique is implemented, each byte of data, stored in the mentioned memory, is combined (for example using an exclusive NOR gate) with one of the designated encryption key bytes prior to disclosure. The user is not required to provide, program, or safeguard a set of key bytes separately. Additionally, no silicon area is wasted in storing such bytes. An intruder would need certain pieces of the original data in order to decipher the results of this encryption technique. Additionally, this technique degrades gracefully. The keys are chosen such that encrypted data does not have a single common dependency. Thus, in the event a single key is discovered, only a very small portion of the encrypted data will be disclosed.

Claims

1. A method for encrypting data comprising the steps of:

receiving a data address defining a location with a memory means containing data to be encrypted;

providing a key address based upon said data address, said key address defining a location within said memory means the contents of which will serve as an encryption key; and

utilizing said encryption key to encrypt said data, thereby providing encrypted data.

2. A method as in claim 1 wherein said step of providing a key address comprises the step of altering said data address to provide said key address.

3. A method as in claim 2 wherein said step of altering said data address to provide said key address comprises the step of setting one or more bits of said data address to predefined values.

4. A method as in claim 2 wherein said step of altering said data address to provide said key address comprises the step of performing a function on one or more bits of said data address, said function selected from the group of functions consisting of logical functions and arithmetic functions.

5. A method as in claim 1 wherein said step of encrypting comprises logically combining one or more bits of said data and said encryption key.

6. A method as in claim 1 wherein said step of encrypting comprises arithmetically combining one or more bits of said data and said encryption key.

7. A data device comprising:

memory means for storing data;

an address bus for receiving a data address defining a location within said memory means;

a data bus for carrying data related to the data stored within said memory means at a location defined by said data address;

means for providing a key address based upon said data address, said key address defining a location within said memory means, the contents of which will serve as an encryption key associated with said address; and

means for encrypting said data with said encryption key in order to provide encrypted data on said data bus.

8. A data device as in claim 7 wherein said data device comprises an integrated circuit and said means for encrypting operates in response to at least one control signal which is not readily available external to said integrated circuit.

9. A data device as in claim 8 wherein said means for encrypting operates asynchronously.

10. A data device as in claim 7 wherein said means for providing a key address comprises means for altering said data address to provide said key address.

11. A data device as in claim 10 wherein said key address is provided by setting one or more bits of said data address to predefined values.

12. A data device as in claim 11 wherein the selection of bits which serve as said one or more bits varies for different data addresses.

13. A data device as in claim 12 wherein the selection of said one or more bits is dependent on the value of one or more bits selected from the bits forming said data and said data address.

14. A data device as in claim 10 wherein said key address is provided by performing a function on one or more bits of said data address, said function selected from the group of functions consisting of logical functions and arithmetic functions.

15. A data device as in claim 14 wherein the selection of bits which serve as said one or more bits is dependent on the value of one or more bits selected from the bits forming said data and said data address.

16. A data device as in claim 15 wherein the selection of said one or more bits is dependent on the value of one or more bits selected from the bits forming said data and said data address.

17. A data device as in claim 7 wherein said means for encrypting comprises means for logically combining one or more bits selected from the bits forming said data and said encryption key.

18. A data device as in claim 17 wherein the selection of said one or more bits is dependent on the value of one or more bits selected from the bits forming said data and said data address.

19. A data device as in claim 7 wherein said means for encrypting comprises means for arithmetically combining one or more bits selected from the bits forming said data and said encryption key.

20. A data device as in claim 19 wherein the selection of said one or more bits is dependent on the value of one or more bits selected from the bits forming said data and said data address.