Anti-spoof without error extension (ANSWER)

• US 5,734,721 A
• Filed: 10/12/1995
• Issued: 03/31/1998
• Est. Priority Date: 10/12/1995
• Status: Expired due to Term

• Current Assignee: Exelis Incorporated (L3Harris Technologies, Inc.)
• Original Assignee: ITT Corporation (ITT, Inc.)
• Inventors: Clark, James Monroe
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/542,052
• Time in Patent Office: 901 Days
• Field of Search: 380/46, 380/42, 364/717
• US Class Current: 380/46
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator

Abstract

There is disclosed encryption apparatus for generating a deterministic psuedorandom keystream of data derived from a secret key and a prearranged initial state and modulo-N adding the random data to plain text data to form a cipher text data stream to be transmitted. In order to reduce spoofing, which is the ability to alter received plain text by altering the transmitted cipher text there is means responsive to the plain text for altering a portion of the plain text data relative to corresponding cipher text data according to a permutation function which varies according to a selected keystream whereby one who does not possess said secret key cannot decrypt said cipher text and while preventing spoofing.

Claims

1. Encryption apparatus for generating a deterministic psuedorandom keystream of data derived from a secret key and a prearranged initial state, and modulo-N add said random data to plain text data to form a cipher text data stream for transmission, in combination therewith apparatus for reducing "spoofing" which is the ability to alter received plain text by altering the transmitted cipher text, where N is a positive integer greater than one comprising:

means responsive to said plain text data for altering a portion of said plain text data relative to a corresponding cipher text data according to a permutation function which varies according to a selected keystream, whereby one who does not possess said secret key cannot decrypt said cipher text, wherein "spoofing" is prevented from effecting said data stream.

2. The encryption apparatus according to claim 1 wherein said encryption apparatus modulo two adds a keystream to the plain text by making the position of the plain text bits relative to the corresponding cipher text bits unpredictable to one who does not posses said secret key.

3. The encryption apparatus according to claim 1 wherein said encryption apparatus modulo two adds a keystream to the cipher text bits by making the positions of the cipher text bits relative to the corresponding plain text bits unpredictable to one who does not possess said secret key.

4. The encryption apparatus according to claim 1 wherein N is equal to two (2).

5. The encryption apparatus according to claim 1 wherein N is equal to four (4) and said data is data blocks indicative of block encryption.

6. The apparatus according to claim 1 wherein said means includes an N hit shift register for receiving and storing N hits of plain text data with each stored N bits indicative of a data block,

permutating means coupled to said shift register,

a keystream bit generator coupled to said permutating means and operable to cause said permutating means to permute each data block under control of a given number of keystream bits.

7. The apparatus according to claim 6 wherein said shift register is an 8 bit register.

8. The apparatus according to claim 2 further including multiplex means responsive to said altered plain text data for swapping bits according to said keystream.

9. The apparatus according to claim 8 wherein said multiplex means operates to swap pairs of bits.

10. A method of encrypting plain text data for generating a deterministic pseudorandom keystream of data which are derived from a secret key and prearranged initial bits, and where plain text data is added to said random data to form a cipher text data stream for transmission to an encryption receiver, comprising the steps of:

shifting N bits of plain text data for storage in a register,

modulo N adding said shifted bits with N key stream bits, swapping a given number of added bits according to said keystream bits,

performing said step of swapping a given number of times to provide an encrypted bit stream according to a bit permutation, wherein said bit permutation varies according to said keystream bits.

11. The method of encrypting according to claim 10 comprising the step of:

transmitting said encrypted bit stream.

12. The method of encrypting according to claim 10 wherein N is equal to two (2).

13. The method according to claim 10 where N is equal to four (4).

14. The method according to claim 10 further comprising the step of:

dividing odd and even bits of said stored plain text data into a first and second data stream

Modulo two adding said even and odd bits in said streams with a keystream bit,

swapping bits in said stream according to said keystream bits,

delaying one stream with respect to the other stream a given amount to enable data to flow from odd to even bit inputs to odd and even outputs in encrypted combination.

15. The method according to claim 11 further comprising the step of:

decrypting said transmitted data.

16. The method according to claim 14 further including the step of:

swapping said bits in said streams after delaying said first stream with respect to said second stream.

17. The method according to claim 15 wherein the step of:

decrypting includes delaying one of said received streams.