Parallelizable integrity-aware encryption technique

1. A computer implemented parallelizable integrity-aware encryption method, the method comprising the steps of:

applying a XOR function to all message blocks of a message to compute a XOR-sum;

whitening at least one message block with a first mask value;

encrypting the at least one whitened message block using a block cipher and a first key; and

whitening the at least one encrypted message block with a second mask value, which is not identical to the first mask value, to generate at least one corresponding output ciphertext block;

wherein the first mask value is computed by applying a XOR function to a first value derived from a NONCE value and a second value derived from encrypting a third value using the block cipher and a second key, and then applying a substitution function to the result of the XOR function;

wherein the first and second key have different values;

wherein the second mask value is computed by applying a XOR function to a fourth value derived from the NONCE value and a fifth value derived from encrypting a sixth value using the block cipher and the second key, and then applying the substitution function to the result of the XOR function.

2. The method of claim 1 , wherein the first and fourth values derived from the NONCE value are permutations of a binary value computed by encrypting the NONCE value using the block cipher and the first key.

3. The method of claim 1 , wherein the third and sixth values are unique counter values or random numbers.

4. The method of claim 1 , wherein the steps of whitening each comprise the step of applying a XOR function.

5. The method of claim 1 , further comprising the steps of:

applying a third mask value to the XOR-sum;

encrypting the masked XOR-sum using the block cipher and the first key; and

applying a fourth mask value to the encrypted XOR-sum to generate an integrity tag.

6. The method of claim 5 , wherein the third mask value is computed by applying a XOR function to a first value derived from a NONCE value and a second value derived from encrypting a third value using the block cipher and a second key, and then applying a substitution function to the result of the XOR function, wherein the fourth mask value is computed by applying a XOR function to a fourth value derived from the NONCE value and a fifth value derived from encrypting a sixth value using the block cipher and the second key, and then applying the substitution function to the result of the XOR function.

7. The method of claim 1 , further comprising the steps of:

whitening the at least one output ciphertext block with the second mask value;

decrypting the at least one whitened ciphertext block using a block cipher and the first key; and

whitening the at least one decrypted block with the first mask value to generate at least one corresponding message block.

8. The method of claim 1 , wherein the block cipher is selected from the group consisting of: an Advanced Encryption Standard (AES) block cipher, a Data Encryption Standard (DES) block cipher, and a Triple Data Encryption Standard (3DES) block cipher.

9. The method of claim 1 , wherein the second and fifth values are elements of a vector.

10. At least one processor readable medium for storing a computer program of instructions configured to be readable by at least one processor for instructing the at least one processor to execute a computer process for performing the method as recited in claim 1 .