Cryptographic method and apparatus
View Patent ↗A method of formatting data for transmission to another party including the step of incorporating in the data a flag indicative of the absence of data for authentication of the sender. An authentication tag length is also included to permit variable length tags to be used.
1. A method, comprising:
generating a packet containing a Source Address contained in a header and a protection level, key identifier information, and frame counter contained in the security information portion of the packet;
obtaining a key related to said key identifier information and a message data m;
obtaining a nonce data N comprising said Source Address, frame counter, and protection level, wherein a value M encoded in the protection level indicates a length of an authentication tag, wherein the protection level inhibits or invokes data confidentiality, and wherein the protection level inhibits or invokes data authenticity; and
generating, by a block-cipher, an output c based on said key, the message data m, and the nonce data N, wherein the output comprises the authentication tag if the protection level invokes data authenticity, and wherein the output comprises encrypted data if the protection level invokes data confidentiality.
2. The method of claim 1 , wherein generating the output comprises encrypting the authentication tag and the message data m if the protection level invokes both data confidentiality and data authenticity.
3. The method of claim 1 , wherein the output comprises message data m and the authentication tag if the protection level inhibits data confidentiality and invokes data authenticity, wherein the message data m in the output is unencrypted.
4. The method of claim 1 , wherein the authentication tag in the output is unencrypted.
5. The method of claim 1 , wherein the output lacks any authentication tag if the protection level inhibits data authenticity.
6. The method of claim 1 , wherein the output comprises plain text if the protection level inhibits data confidentiality.
7. The method of claim 1 , wherein the authentication tag comprises a variable-length authentication tag.
8. The method of claim 7 , wherein the values of M comprise 0, 4, 8, 16.
9. The method of claim 1 , wherein if the value M is zero, then data authenticity is disabled.
10. A non-transitory machine-readable medium comprising machine-executable instructions operable when executed to perform operations comprising:
generating a packet containing a Source Address contained in a header and a protection level, key identifier information, and frame counter contained in the security information portion of the packet;
obtaining a key related to said key identifier information and a message data m;
obtaining a nonce data N comprising said Source Address, frame counter, and protection level, wherein a value M encoded in the protection level indicates a length of an authentication tag, wherein the protection level inhibits or invokes data confidentiality, and wherein the protection level inhibits or invokes data authenticity; and
generating, by a block-cipher, an output c based on said key, the message data m, and the nonce data N, wherein the output comprises the authentication tag if the protection level invokes data authenticity, and wherein the output comprises encrypted data if the protection level invokes data confidentiality.
11. The medium of claim 10 , wherein generating the output comprises encrypting the authentication tag and the message data m if the protection level invokes both data confidentiality and data authenticity.
12. The medium of claim 10 , wherein the output comprises message data m and the authentication tag if the protection level inhibits data confidentiality and invokes data authenticity, wherein the message data m in the output is unencrypted.
13. The medium of claim 10 , wherein the authentication tag in the output is unencrypted.
14. The medium of claim 10 , wherein the output lacks any authentication tag if the protection level inhibits data authenticity.
15. The medium of claim 10 , wherein the output comprises plain text if the protection level inhibits data confidentiality.
16. The medium of claim 10 , wherein the authentication tag comprises a variable-length authentication tag.
17. The medium of claim 16 , wherein the values of M comprise 0, 4, 8, 16.
18. The medium of claim 10 , wherein if the value M is zero, then data authenticity is disabled.
19. A device, comprising:
a processor;
memory, the memory comprising computer-executable instructions that, when executed by the processor, perform operations comprising:
generating a packet containing a Source Address contained in a header and a protection level, key identifier information, and frame counter contained in the security information portion of the packet;
obtaining a key related to said key identifier information and a message data m;
obtaining a nonce data N comprising said Source Address, frame counter, and protection level, wherein a value M encoded in the protection level indicates a length of an authentication tag, wherein the protection level inhibits or invokes data confidentiality, and wherein the protection level inhibits or invokes data authenticity; and
generating, by a block-cipher, an output c based on said key, the message data m, and the nonce data N, wherein the output comprises the authentication tag if the protection level invokes data authenticity, and wherein the output comprises encrypted data if the protection level invokes data confidentiality.