Message encryption using a hash function

• US 5,483,598 A
• Filed: 07/01/1993
• Issued: 01/09/1996
• Est. Priority Date: 07/01/1993
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Digital Equipment Corporation PAT Law Group
• Inventors: Perlman, Radia J., Kaufman, Charles W.
• Primary Examiner(s): Barron, Jr., Gilberto
• Application Number:
  US08/086,746
• Time in Patent Office: 922 Days
• Field of Search: 380/46, 380/44, 380/43, 380/45, 380/21
• US Class Current: 380/43
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator

Abstract

An encryption system employing a one-time key-pad uses a shared secret number and a one-way hash function with which both the originator and recipient of a message generate successive segments of a key-pad to encrypt and decrypt the message respectively. In one arrangement each key-pad segment is generated by applying the hash function to a combination of the secret number and the previous key-pad segment. In the other embodiment of the invention, each key-pad section is generated by applying the one-way hash function to a combination of the secret number and a corresponding segment of the ciphertext version of the message.

Claims

1. An encryption unit for encrypting a message comprising segments MSG_n, said unit making use of a long-term secret number S and a short-term number that are shared with a recipient of the message, said short-term number having a succession of values beginning with an initial value C₀, said system comprising:

A. means for generating a one-way hash function of a combination of S and C₀ to provide the first segment KP₁ of a one-time key pad,

B. means for generating successive segments, KP_n, of said key pad by providing for each segment a one-way hash function of the combination of S with a function, C_n-1, of the previous key-pad segment, KP_n-1, and the message segment MSG_n-1

C. whereby C₁ . . . are successive ciphertext segments corresponding with the message segments MSG₁ . . . .

2. The encryption unit of claim 1 in which said one-way hash function is a message digest function.

3. The encryption unit of claim 1 in which said function is the exclusive-OR combination of KP_n-1, and MSG_n-1.

4. A message transmission system for transmitting encrypted messages from an originator to a recipient, the originator and recipient having a shared long-term secret number and a short-term number having a succession of values, said system comprising:

A. an encryption unit including;

1. means for applying a one-way hash function to a combination of said long-term secret number and successive values of said short term number to provide successive key-pad segments,

2. means for calculating a function of each key-pad segment with a message segment to provide a ciphertext segment corresponding to said message segment, and

3. means for applying each ciphertext segment as the value of the short term number used in generating the next key pad segment,

B. a decryption unit including;

6. The system defined in claim 4, in which said one-way hash function is a message digest function.

5. means for applying said one-way hash function to the combination of said long-term secret number and successive values of said short term secret number and successive values of said short term secret number to provide a succession of key pad segments,means for applying the inverse of said function to said key pad segments and successive ciphertext segments to recover the message segments corresponding with the ciphertext segments, andmeans for applying to said hash function as the short term number values the same values used in said encryption unit.

7. A method of encrypting a message for transmission from an originator to a recipient, said method comprising the steps of:

A. communicating between said originator and recipient a long-term secret number S and the initial value of a short-term number ST,

B. applying a one-way hash function to a combination of S and successive values of ST to provide successive key-pad segments,

C. calculating a function of each key-pad segment and a message segment to provide a ciphertext segment corresponding to said message segment, and

D. applying each message segment or ciphertext segment as the value of S used in generating the next key-pad segment.

8. An encryption unit for transmitting a message, said unit comprising:

a switch having a first state and a second state, said switch switching from said first state to said second state in response to receiving an initial value of a short term number, said short term number having a succession of values;

a one-way hash code generator coupled to said switch, said hash code generator having means for receiving said short term number from said switch, said hash code generator having means for receiving a long term secret number, said hash code generator producing key pad segments in response to said short term number and said long term number; and

,

an exclusive OR circuit coupled to said hash code generator, said exclusive OR circuit coupled to said switch, said exclusive OR circuit receiving said key pad segments from said hash code generator, said exclusive OR having means for receiving a message, said exclusive OR circuit producing ciphertext segments in response to said key pad segments and said message,

said switch receiving said ciphertext segments from said exclusive OR circuit, said switch in said second state providing said ciphertext segments as the successive values of said short term number.