Systems and methods for implementing block cipher algorithms on attacker-controlled systems
    1.
    发明授权
    Systems and methods for implementing block cipher algorithms on attacker-controlled systems 有权
    用于在攻击者控制的系统上实现块密码算法的系统和方法

    公开(公告)号:US09031228B2

    公开(公告)日:2015-05-12

    申请号:US13448385

    申请日:2012-04-16

    IPC分类号: H04L9/28 H04L9/00 H04L9/06

    摘要: Systems and methods for an implementation of block cipher algorithms (e.g., AES) use lookup tables to obscure key information, increasing difficulty of reverse engineering efforts. The implementation encodes round key information into a first plurality of tables (T1), which when used for lookup operations also complete SubBytes operations, and output state in an encoded format. A Shiftrows operation is performed arithmetically on the output state. A second plurality of tables (T2) are used to perform a polynomial multiplication portion of MixColumns operation, and an XOR portion of MixColumns is performed arithmetically on the columns. Encoding from the T1 tables is made to match a decoding built into the T2 tables. Subsets of the T1 tables use the same T2 tables, reducing a memory footprint for the T2 tables. Multiple AES keys can be embedded in different sets of T1 tables that encode for the same set of T2 tables.

    摘要翻译: 用于实施块密码算法(例如,AES)的系统和方法使用查找表来掩盖关键信息,增加了逆向工程努力的难度。 该实施方式将循环密钥信息编码到第一多个表(T1)中,当用于查找操作时也完成子字节操作,并且以编码格式输出状态。 对输出状态进行算术运算。 使用第二多个表(T2)来执行MixColumns操作的多项式乘法部分,并且对列进行算术运算的MixColumn的XOR部分。 使T1表格的编码与T2表中内置的解码相匹配。 T1表的子集使用相同的T2表,减少了T2表的内存占用。 可以将多个AES密钥嵌入到为同一组T2表编码的不同的T1表中。

    SYSTEM AND METHOD FOR A DERIVATION FUNCTION FOR KEY PER PAGE
    2.
    发明申请
    SYSTEM AND METHOD FOR A DERIVATION FUNCTION FOR KEY PER PAGE 有权
    用于关键每页的衍生函数的系统和方法

    公开(公告)号:US20120124366A1

    公开(公告)日:2012-05-17

    申请号:US13357832

    申请日:2012-01-25

    IPC分类号: H04L9/00

    摘要: Disclosed herein are systems, methods and computer-readable media to perform data encryption and decryption using a derivation function to obtain a key per page of data in a white-box environment. The method includes sharing a master key with the sender and receiver, splitting the input data into blocks and sub-blocks, and utilizing a set of keys and a master key to derive a page key. In another aspect of this disclosure, the key validation and shuffling operations are included. This method allows for the derivation of a key instead of storing a predetermined key, thus maintaining system security in a white-box environment.

    摘要翻译: 这里公开的是使用推导函数来执行数据加密和解密以在白盒环境中获得每页数据的密钥的系统,方法和计算机可读介质。 该方法包括与发送器和接收器共享主密钥,将输入数据分成块和子块,以及利用一组密钥和主密钥来导出页面密钥。 在本公开的另一方面,包括密钥验证和混洗操作。 该方法允许导出密钥而不是存储预定的密钥,从而在白盒环境中保持系统安全性。

    System and method for stream/block cipher with internal random states
    4.
    发明授权
    System and method for stream/block cipher with internal random states 有权
    具有内部随机状态的流/块密码的系统和方法

    公开(公告)号:US08428251B2

    公开(公告)日:2013-04-23

    申请号:US13316265

    申请日:2011-12-09

    摘要: Disclosed herein are systems, methods, and computer readable-media for performing data encryption and decryption using a stream or block cipher with internal random states. The method includes splitting the input data into a predetermined number of blocks and processing each block. The processing includes creating sub-blocks, permuting the sub-blocks, replacing bytes using a lookup table, rotating bits, performing expansion and combining sets of bits. The element of randomness employed in this process allows for the same input to yield the same output, with differing internal states.

    摘要翻译: 本文公开了用于使用具有内部随机状态的流或块密码执行数据加密和解密的系统,方法和计算机可读介质。 该方法包括将输入数据分割成预定数量的块并处理每个块。 该处理包括创建子块,置换子块,使用查找表替换字节,旋转位,执行扩展和组合位组。 在该过程中使用的随机元素允许相同的输入产生具有不同内部状态的相同输出。

    SYSTEMS AND METHODS FOR IMPLEMENTING BLOCK CIPHER ALGORITHMS ON ATTACKER-CONTROLLED SYSTEMS
    6.
    发明申请
    SYSTEMS AND METHODS FOR IMPLEMENTING BLOCK CIPHER ALGORITHMS ON ATTACKER-CONTROLLED SYSTEMS 审中-公开
    用于在攻击者控制系统上实施块卡尔算法的系统和方法

    公开(公告)号:US20120201374A1

    公开(公告)日:2012-08-09

    申请号:US13448385

    申请日:2012-04-16

    IPC分类号: H04L9/28

    摘要: Systems and methods for an implementation of block cipher algorithms (e.g., AES) use lookup tables to obscure key information, increasing difficulty of reverse engineering efforts. The implementation encodes round key information into a first plurality of tables (T1), which when used for lookup operations also complete SubBytes operations, and output state in an encoded format. A Shiftrows operation is performed arithmetically on the output state. A second plurality of tables (T2) are used to perform a polynomial multiplication portion of MixColumns operation, and an XOR portion of MixColumns is performed arithmetically on the columns. Encoding from the T1 tables is made to match a decoding built into the T2 tables. Subsets of the T1 tables use the same T2 tables, reducing a memory footprint for the T2 tables. Multiple AES keys can be embedded in different sets of T1 tables that encode for the same set of T2 tables.

    摘要翻译: 用于实施块密码算法(例如,AES)的系统和方法使用查找表来掩盖关键信息,增加了逆向工程努力的难度。 该实施方式将循环密钥信息编码到第一多个表(T1)中,当用于查找操作时也完成子字节操作,并且以编码格式输出状态。 对输出状态进行算术运算。 使用第二多个表(T2)来执行MixColumns操作的多项式乘法部分,并且对列进行算术运算的MixColumn的XOR部分。 使T1表格的编码与T2表中内置的解码相匹配。 T1表的子集使用相同的T2表,减少了T2表的内存占用。 可以将多个AES密钥嵌入到为同一组T2表编码的不同的T1表中。

    System and method for a derivation function for key per page
    7.
    发明授权
    System and method for a derivation function for key per page 有权
    用于每页键的推导函数的系统和方法

    公开(公告)号:US08121294B2

    公开(公告)日:2012-02-21

    申请号:US12255581

    申请日:2008-10-21

    IPC分类号: H04L9/00 H04L29/06

    摘要: Disclosed herein are systems, methods and computer-readable media to perform data encryption and decryption using a derivation function to obtain a key per page of data in a white-box environment. The method includes sharing a master key with the sender and receiver, splitting the input data into blocks and sub-blocks, and utilizing a set of keys and a master key to derive a page key. In another aspect of this disclosure, the key validation and shuffling operations are included. This method allows for the derivation of a key instead of storing a predetermined key, thus maintaining system security in a white-box environment.

    摘要翻译: 这里公开的是使用推导函数来执行数据加密和解密以在白盒环境中获得每页数据的密钥的系统,方法和计算机可读介质。 该方法包括与发送器和接收器共享主密钥,将输入数据分成块和子块,以及利用一组密钥和主密钥来导出页面密钥。 在本公开的另一方面,包括密钥验证和混洗操作。 该方法允许导出密钥而不是存储预定的密钥,从而在白盒环境中保持系统安全性。

    SYSTEM AND METHOD FOR STREAM/BLOCK CIPHER WITH INTERNAL RANDOM STATES
    10.
    发明申请
    SYSTEM AND METHOD FOR STREAM/BLOCK CIPHER WITH INTERNAL RANDOM STATES 有权
    具有内部随机状态的流动/块式滚筒的系统和方法

    公开(公告)号:US20120124392A1

    公开(公告)日:2012-05-17

    申请号:US13316265

    申请日:2011-12-09

    IPC分类号: G06F12/14

    摘要: Disclosed herein are systems, methods, and computer readable-media for performing data encryption and decryption using a stream or block cipher with internal random states. The method includes splitting the input data into a predetermined number of blocks and processing each block. The processing includes creating sub-blocks, permuting the sub-blocks, replacing bytes using a lookup table, rotating bits, performing expansion and combining sets of bits. The element of randomness employed in this process allows for the same input to yield the same output, with differing internal states.

    摘要翻译: 本文公开了用于使用具有内部随机状态的流或块密码执行数据加密和解密的系统,方法和计算机可读介质。 该方法包括将输入数据分割成预定数量的块并处理每个块。 该处理包括创建子块,置换子块,使用查找表替换字节,旋转位,执行扩展和组合位组。 在该过程中使用的随机元素允许相同的输入产生具有不同内部状态的相同输出。