ON-THE-FLY KEY GENERATION FOR ENCRYPTION AND DECRYPTION

• US 20110158403A1
• Filed: 12/26/2009
• Published: 06/30/2011
• Est. Priority Date: 12/26/2009
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Gueron, Shay, Sheikh, Farhana, Mathew, Sanu K., Kounavis, Michael E., Krishnamurthy, Ram K.
• Granted Patent: US 9,544,133 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0631 Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing

Abstract

Methods and apparatus to provide on-the-fly key computation for Galois Field (also referred to Finite Field) encryption and/or decryption are described. In one embodiment, logic generates a cipher key, in a second cycle, based on a previous cipher key, generated in a first cycle that immediately precedes the second cycle. Other embodiments are also described.

Claims

1. An apparatus comprising:

a first logic to generate a second cipher key, in a second cycle, based on a first cipher key, wherein the first cipher key is to be generated in a first cycle that immediately precedes the second cycle,

wherein the first logic is to generate the second cipher key without storing data in a shared memory.

2. The apparatus of claim 1, wherein the first logic is to comprise a plurality of substitution boxes to perform substitute byte operations on portions of the first cipher key to generate corresponding portions of the second cipher key.

3. The apparatus of claim 1, further comprising logic to rotate a portion of the first cipher key, wherein a substitution box is to perform a substitute byte operation on the rotated portion of the first cipher key to generate a corresponding portion of the second cipher key.

4. The apparatus of claim 1, further comprising logic to XOR a portion of the first cipher key, wherein a substitution box is to perform a substitute byte operation on the XOR-ed portion of the first cipher key to generate a corresponding portion of the second cipher key.

5. The apparatus of claim 1, wherein the shared memory is accessible by more than a producer and a consumer.

6. The apparatus of claim 1, wherein the first logic is to generate the second cipher key in a single cycle.

7. The apparatus of claim 1, wherein the first logic is to generate the second cipher key in accordance with Advanced Encryption Standard (AES).

8. The apparatus of claim 1, wherein the first logic is to generate the second cipher key for one or more of mapped or native composite Galois Field encryption or decryption.

9. The apparatus of claim 1, wherein the first logic capable to generate the second cipher key in accordance with AES-128, AES-192, and AES-256 modes.

10. The apparatus of claim 1, wherein the initial key is user supplied key.

11. The apparatus of claim 1, further comprising a second logic to encrypt or decrypt content data based on the second cipher key.

12. The apparatus of claim 1, further comprising a processor that is to comprise the first logic.

13. The apparatus of claim 12, wherein the processor is to comprise a plurality of processor cores and wherein at least one of the plurality of processor cores is to comprise the first logic.

17. The apparatus of claim 1, further comprising XORing a portion of the first cipher key and performing a substitute byte operation on the XOR-ed portion of the first cipher key to generate a corresponding portion of the second cipher key.

14. A method comprising:

generating a second cipher key, in a second cycle, based on a first cipher key, wherein the first cipher key is to be generated in a first cycle that immediately precedes the second cycle and wherein the first logic is to generate the second cipher key without storing data in a shared memory.

15. The method of claim 14, further comprising performing one or more substitute byte operations on a portion of the first cipher key to generate a corresponding portion of the second cipher key.

16. The method of claim 14, further comprising rotating a portion of the first cipher key and performing a substitute byte operation on the rotated portion of the first cipher key to generate a corresponding portion of the second cipher key.

18. A system comprising:

a memory to store content data;

a first logic to generate a second cipher key, in a second cycle, based on a first cipher key, wherein the first cipher key is to be generated in a first cycle that immediately follows the second cycle; and

a second logic to encrypt or decrypt the content data based on the second cipher key,

wherein the first logic is to generate the second cipher key without storing data in a shared memory.

19. The system of claim 18, wherein the first logic is to comprise a plurality of substitution boxes to perform substitute byte operations on portions of the first cipher key to generate corresponding portions of the second cipher key.

20. The system of claim 18, further comprising an audio device coupled to the first logic.