Method and apparatus for encryption, decryption and authentication using dynamical systems

• US 5,365,589 A
• Filed: 02/07/1992
• Issued: 11/15/1994
• Est. Priority Date: 02/07/1992
• Status: Expired due to Term

• Current Assignee: Eatoni Ergonomics Incorporated
• Original Assignee: Howard A. Gutowitz
• Inventors: Gutowitz, Howard A.
• Primary Examiner(s): Swann, Tod R.
• Application Number:
  US07/832,476
• Time in Patent Office: 1,012 Days
• Field of Search: 380/21, 380/23, 380/25, 380/28, 380/30, 380/43, 380/46, 380/49, 380/50, 364/717
• US Class Current: 380/43
• CPC Class Codes: H04L 2209/043 of tables, e.g. lookup, substitution or mapping
• CPC Class Codes: H04L 2209/125 Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations
• CPC Class Codes: H04L 9/001 using chaotic signals
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority

Abstract

A method and apparatus provide encryption, decryption and authentication of messages using dynamical systems. The method and apparatus preferably operate on an information stream which may comprise message information, authentication information, and random or pseudo-random information. The initial secret keys of the system are a collection of dynamical systems, at least one of which is irreversible. These keys operate on states of the dynamical systems into which the message has been encoded. To initialize the encryption, a subset of the secret keys are selected to be current keys, and the desired message is encoded into the initial states. Encryption continues over a plurality of cycles. During each cycle the current keys are applied either backward or forward in time to their current states, over a plurality of sub-cycles. If during an encryption cycle an irreversible dynamical system is iterated in the backward direction, the choice of antecedent states may either be made randomly or according to information from the input information stream. After all encryption cycles have been performed, the current states of the dynamical system constitute the ciphertext. The ciphertext may then be decrypted by a method similar to the encryption method. In the preferred embodiment, random noise is diffused into the plaintext during encryption, and eliminated during decryption. The apparatus of encryption and decryption in the preferred embodiment operates with parallel hardware using only bit operations and table lookup; it may thus be made to operate in an exceedingly fast manner.

Claims

1. A method for encrypting information comprising the steps of:

establishing a plurality of dynamical systems to be used as keys for encryption;

selecting from said plurality of dynamical systems a plurality of current-key dynamical systems to be used as current keys for encryption;

choosing at least one of said current-key dynamical system, the chosen dynamical system being an irreversible dynamical system;

defining a current state of at least one of the current-key dynamical systems in correspondence with at least a portion of an information stream to be encrypted; and

applying said at least one of said current-key dynamical systems over a selected number of iteration cycles to produce from said current state a new state of said at least one of said current-key dynamical systems, said new state representing an encryption of the information.

2. The method of claim 1 further comprising the step of using as keys a plurality of dynamical systems, a plurality of which are irreversible and deterministic.

3. The method of claim 1 wherein said information stream includes random information.

4. The method of claim 1 wherein said information stream includes pseudo-random information.

5. The method of claim 1 wherein said information stream includes authentication information.

6. The method of claim 1 wherein current keys are selectively applied forward and backward over a plurality of cycles to produce new states of said current keys.

7. The method of claim 1 wherein at least one other new current key is selected from said plurality of dynamical systems used as keys to be applied during a selected one of said iterations.

8. The method of claim 7 wherein a selected current key to be applied in a subsequent iteration is derived from part of the information stream.

9. The method of claim 1 further comprising the step of decrypting the desired encryption information by iterating the state of the dynamical system representing the encryption information in the reverse direction from that used in the encryption steps.

10. The method of claim 9 wherein the iterating steps for decryption are not symmetrical with the iteration steps of encryption of the information stream.

11. The method of claim 1 wherein the iterative steps are accomplished using parallel processing means.

12. The method of claim 1 wherein at least one of said dynamical systems is a cellular automaton.

13. The method of claim 12 wherein at least one of the dynamical systems is a toggle cellular automaton.

17. The apparatus of claim 4 wherein at least one of said dynamical systems is a cellular automaton.

18. The apparatus of claim 17 wherein at least one of said dynamical systems is a toggle cellular automaton.

14. Apparatus for the encryption and decryption of a message comprising:

a first memory array for storing values;

first data processing means connected to the first memory array, said first data processing means being operative for setting values into said first memory array in correspondence with a description for a selected dynamical system;

a second memory array for storing a current state of the selected dynamical system along with other input information; and

second data processing means connected to the first and second memory arrays for operating on data stored in said second memory array in accordance with the values in the first memory array to derive a new state of the selected dynamical system, one of said current and said new states corresponding to the message and the other of said current and said new states corresponding to an encryption of the message.

15. The apparatus of claim 14 further comprising:

encoder means operative to encode at least a portion of the messages into an initial state of the selected dynamical system for storing in the second memory array; and

means for generating and for storing said other input information in said second memory array.

16. Apparatus for encryption and decryption of a message according to claim 14 wherein said second data processing means comprises a plurality of digital data processors connected in a regular array, each said digital data processor being operatively connected to others of said digital data processors in the array, said digital data processors including means for calculating a next state of each digital data processor in the array according to a selectable dynamical system which gives a next state of each digital data processor as a function of its own current state and a current state of determined processors in the array.

19. The apparatus of claim 16 wherein the second data processing means includes means for repeatedly applying the dynamical system over a plurality of cycles to calculate the state of each of the digital data processors in the array.

20. The apparatus of claim 15 wherein the means for generating further comprises a distributor means.

21. The apparatus of claim 14 further comprising collator means connected to receive decrypted information and separate determined information therefrom.

22. The apparatus of claim 14 further comprising means for changing the values stored in the lookup table after a predetermined block of the message has been encrypted.

23. The apparatus of claim 14 wherein said second data processing means further comprises means for using the intermediate states of encryption of a block of the message to form the encryption key for other of blocks of the message, whereby a stream of keys is generated from the data.

24. The apparatus of claim 14 wherein

said first memory array stores said values as a lookup table;

said first data processing means is operative for setting said values into said first memory array in correspondence with a rule table for the selected dynamical system; and

said second data processing means operates on data stored in said second memory array in accordance with the values in the lookup table in the first memory array to derive a new state of the selected dynamical system, respective ones of said states corresponding to at least part of the message and an encryption of said at least part of the message.

25. The apparatus of claim 24 wherein said second data processing means comprises a plurality of digital data processors connected in a regular array, each said digital data processor being operatively connected to others of said digital data processors in the array, said digital data processors including means for calculating a next state of each digital data processor in the array according to a selectable cellular automaton rule which gives a next state of each digital data processor as a function of its own current state and a current state of determined processors in the array.

26. The apparatus of claim 25 wherein all of the processors of said second data processing means can read from the first memory array and are connected to read and write to an associated memory element of said second memory array, a first processor of the plurality of digital data processors being connected to read the information from said first memory array and a last processor being connected to write to the first memory array only, all said processors excepting the first processor being connected to read from another memory element other than its associated memory element.

27. The apparatus of claim 26 wherein there are n digital data processors respectively indexed 0 through n-1 and only the processor having index number 0 in the array need be able to read from the first memory array and only the digital data processor labeled n-1 need be able to write to the first memory array, all of the digital data processors except the one labeled 0 being connected to read the value from a memory element of said second memory array which is indexed 1 less than its own index number.

28. Apparatus for the encryption and decryption of a message comprising:

a first memory array for storing values in a lookup table;

first data processing means connected to the first memory array, said first data processing means being operative for setting values into said first memory array in correspondence with a rule table for a selected dynamical system;

a second memory array for storing a current state of the selected dynamical system along with other input information; and

second data processing means connected to the first and second memory arrays for operating on data stored in said second memory array in accordance with the values in the lookup table in the first memory array to derive a new state of the selected dynamical system, one of said current and said new states corresponding to the message and the other of said current and said new states corresponding to an encryption of the message.

29. A method for encrypting an information stream comprising the steps of:

establishing a plurality of dynamical systems to be used as keys for encryption;

selecting from said plurality of dynamical systems a plurality of current-key dynamical systems to be used as current keys for encryption;

choosing at least one of said current-key dynamical systems, the chosen dynamical system being an irreversible dynamical system;

defining a current state of at least one of the current-key dynamical systems in correspondence with at least a portion of an information stream to be encrypted and in correspondence with dynamical information of said information stream; and

applying said at least one of said current-key dynamical systems over a selected number of iteration cycles to produce from said current state a new state of said at least one of said current-key dynamical systems, said new state representing an encryption of the information stream.

30. The method of claim 29 wherein a message to be encrypted is included in the dynamical information.

31. Apparatus for encrypting and decrypting an information stream comprising:

a first memory array for storing values;

first data processing means connected to the first memory array, said first data processing means being operative for setting values into said first memory array in correspondence with a description for a selected dynamical system;

a second memory array for storing a current state of the selected dynamical system along with other input information;

said state and said other information comprising the information stream;

distributor means for inputting said state and said other information; and

second data processing means connected to the first and second memory arrays for operating on data stored in said second memory array in accordance with the values in the first memory array to derive a new state of the selected dynamical system, respective ones of said current and said new states corresponding to the information stream and an encryption of the information stream respectively;

means for transmitting the encryption of the information stream; and

means for receiving and decrypting the encryption of the information stream including

a third memory array for storing values;

third data processing means connected to the third memory array, said third data processing means being operative for setting values into said third memory array in correspondence with the description for the selected dynamical system;

a fourth memory array for storing a current state of the selected dynamical system in correspondence with a received encryption of the information stream;

fourth data processing means connected to the third and fourth memory arrays for operating on data stored in said fourth memory array in accordance with the values in the first memory array to derive a new state of the selected dynamical system, respective ones of said current and said new states corresponding to the information stream and an encryption of the information stream; and

collator means for separating said state information and said other input information for completely decrypting the information stream.

32. A method for encrypting information comprising the steps of choosing a description of a dynamical system and a size of a periodic lattice upon which the described dynamical system will operate;

finding all temporal cycles of the described system operating on the chosen lattice and labeling the temporal cycles in accordance with an agreed upon rule;

at least one of said description, lattice size and labeling rule being kept secret between a sender and recipient;

selecting encoding rules in accordance with a distinguished configuration of the temporal cycles;

choosing a particular configuration for encoding selected information; and

selectively iterating the configuration in accordance with the chosen description in order to generate a ciphertext of the selected information.

33. The method of claim 32 further comprising the steps of decrypting the ciphertext by further iteration of the ciphertext until a correspondence with a distinguished configuration is determined and decrypting the ciphertext in accordance with the chosen encoding rule.

34. The method of claim 33 wherein the configuration is inverse iterated to generate the ciphertext and the decryption is carried out by forward iteration.

35. The method of claim 32 wherein the dynamical system is a cellular automaton.

36. A method for authenticating information comprising the steps of

encrypting a message using a first secret key shared between a sender and a recipient of the message;

encrypting, using a second secret key shared between the sender and a third party, the message encrypted by said first secret key as well as other information;

sending the encrypted message and other information to the third party for decryption of said other information and for separating therefrom the encrypted message encrypted by the first key; and

transmitting the message encrypted by said first key from said first party to said recipient.

37. The method of claim 36 wherein other information is address information.

38. The method of claim 36 wherein the other information is authentication information.

39. The method of claim 36 further comprising the step of said third party encrypting the message and other information using a third key shared between the third party and the recipient.

40. The method of claim 36 wherein the message after encryption using the second key is transmitted to the recipient who then transmits it to the third party.

41. The method of claim 40 further comprising the step of said third party decrypting the encrypted information to obtain the message encrypted using said first secret key and transmitting the encrypted message to the recipient as information encrypted by using a third secret key shared between the third party and the recipient.

42. The method of claim 40 further comprising the step of including authentication information in the information encrypted using said third secret key.

43. The method of claim 36 wherein the keys are selected from a plurality of current-key dynamical systems to be used as current keys for encryption;

a current state of the chosen current-key dynamical systems being defined in correspondence with at least a portion of the message and information to be encrypted; and

further comprising the steps of applying said selected one of said current-key dynamical systems over a selected number of iteration cycles to produce from said current state a new state of said at least one of said current-key dynamical systems, said new state representing an encryption of the information.

44. The method of claim 43 wherein said other information is inserted at an iteration cycle.