公开(公告)号：US12273108B2

公开(公告)日：2025-04-08

申请号：US18143313

申请日：2023-05-04

Applicant: Silicon Motion, Inc.

Inventor： Wun-Jhe Wu ,  Po-Hung Chen ,  Chiao-Wen Cheng ,  Jiun-Hung Yu ,  Chih-Wei Liu

IPC: H03K19/177 ,  H03K19/173 ,  H03K19/17728 ,  H03K19/17768 ,  H03K19/21

Abstract: The invention introduces an apparatus and a method for expanding round keys during data encryption. The method includes: configuring a word-processing circuitry to operate in a first mode to calculate a first intermediate calculation result corresponding to an even-number round key according to a last double word of a 0th double word to a 7th double word in each even-number clock cycle starting from a 2nd clock cycle; and configuring the word-processing circuitry to operate in a second mode to calculate a second intermediate calculation result corresponding to an odd-number round key according to the last double word of the 0th double word to the 7th double word in each odd-number clock cycle starting from a 3rd clock cycle. In the first mode, a first data path is formed in the word-processing circuitry, which includes a word split circuitry, a rotate-word circuitry, a substitute-word circuitry, a round-constant circuitry and a word concatenation circuitry. In the second mode, a second data path is formed in the word-processing circuitry, which includes the word split circuitry, the substitute-word circuitry and the word concatenation circuitry.

公开(公告)号：US12225126B2

公开(公告)日：2025-02-11

申请号：US18076615

申请日：2022-12-07

Applicant: Silicon Motion, Inc.

Inventor： Wun-Jhe Wu ,  Po-Hung Chen ,  Chiao-Wen Cheng ,  Jiun-Hung Yu ,  Chih-Wei Liu

IPC: H04L9/06 ,  H04L9/08

Abstract: The invention introduces an apparatus for detecting errors during data encryption. The apparatus includes a key generation circuitry and a key-error detection circuitry. The key generation circuitry is arranged operably to realize a key expansion operation for generating multiple round keys based on a root key in an encryption algorithm, where the encryption algorithm encodes plaintext or an intermediate encryption result with one round key in a corresponding round. The error detection circuitry is arranged operably to: calculate redundant data corresponding to each round key; and output an error signal to a processing unit when finding that any round key does not match corresponding redundant data at a check point during the key expansion operation.