Encryption method for message authentication
View Patent ↗In an encryption method, an input block of data is reversibly processed to produce a string that is at least partially randomized. The randomized string is then encrypted by a block cipher. In decryption, the input block of encrypted data is first decrypted with respect to the block cipher. Then the randomization is reversed.
1. A method for message encryption, comprising:
deriving, by a processor, a first key (K 1 ) and a second key (K 2 ) from a session key;
generating, by the processor, a first pseudorandom string of bits as a function of K 1 using a first-cipher algorithm;
generating, by the processor, a second pseudorandom string of bits as a function of K 1 using the first cipher algorithm, wherein a state of randomization of said first pseudorandom string is independent of a state of randomization of said second pseudorandom string;
encrypting a first block of message data with the first pseudorandom string, the encrypting comprising performing a reversible XOR operation between each of at least some bits of the first block and each of respective bits of the first pseudorandom string;
encrypting a successive second block of message data with the second pseudorandom string, the encryption comprising performing a reversible XOR operation between each of at least some bits of the second block and each of respective bits of the second pseudorandom string;
producing an encrypted message by encrypting the first and second encrypted blocks of message data using a second cipher algorithm that takes K 2 as an input key; and
transmitting the encrypted message.
2. The method of claim 1 , wherein said first and second cipher algorithms are a same cipher algorithm.
3. A method for message decryption, comprising:
receiving an encrypted message,
deriving, by a processor, a first key (K 1 ) and a second key (K 2 ) from a session key;
generating, by the processor, first and second pseudorandom strings of bits as a function of a first cipher algorithm and K 1 , wherein a state of randomization in the first pseudorandom string is independent of a state of randomization of the second pseudorandom string;
producing by the processor a first decrypted data block, including:
operating on a first encrypted block of the encrypted message with an inverse of a second cipher algorithm taking K 2 as an input key, thereby producing first intermediate bits; and
performing an XOR operation between each of at least some of the first intermediate bits and each of respective bits of the first pseudorandom string thereby decrypting a first encrypted block of the encrypted message; and
producing by the processor a second decrypted data block, including:
operating on a second encrypted block of the encrypted message with the inverse of the second cipher algorithm taking K 2 as an input key, thereby producing second intermediate bits; and
performing an XOR operation between each of at least some of the second intermediate bits and each of respective bits of the second pseudorandom string thereby decrypting a second encrypted block of the encrypted message.
4. The method of claim 3 , wherein said first and second cipher algorithms are a same cipher algorithm.
5. A method for message encryption, comprising:
deriving, by a processor, a first key (K 1 ) and a second key (K 2 ) from a session key;
generating, by the processor, a first pseudorandom string of bits as a function of K 1 using a cipher algorithm;
generating, by the processor, a second pseudorandom string of bits as a function of K 1 using the first cipher algorithm, wherein a state of randomization of said first pseudorandom string is independent of a state of randomization of said second pseudorandom string;
encrypting a first block of message data with the first pseudorandom string, the encrypting comprising executing a first operation associated with the first pseudorandom string thereby yielding at least partial randomization of the first block;
encrypting a successive second block of message data with the second pseudorandom string, the encryption comprising executing a second operation associated with the second pseudorandom string thereby yielding at least partial randomization of the second block;
producing an encrypted message by encrypting the first and second encrypted blocks of message data using a second cipher algorithm that takes K 2 as an input key; and
transmitting the encrypted message.
6. The method of claim 5 , wherein said first and second cipher algorithms are a same cipher algorithm.
7. The method of claim 5 , wherein the first operation includes an XOR operation that takes the first pseudorandom string and the first intermediate bits as inputs, and the second operation includes an XOR operation that takes the second pseudorandom string and the second intermediate bits as inputs.
8. A method for message decryption, comprising:
receiving an encrypted message, including first and second encrypted data blocks;
deriving, by a processor, a first key (K 1 ) and a second key (K 2 ) from a session key;
generating, by the processor, first and second pseudorandom strings of bits as a function of a first cipher algorithm and K 1 , wherein a state of randomization of the first pseudorandom string is independent of a state of randomization of the second pseudorandom string;
producing by the processor a first decrypted message block, including:
computing first intermediate bits from the first encrypted data block using an inverse of a second cipher algorithm that takes K 2 as an input key; and
executing a first operation associated with the first pseudorandom string and the first intermediate bits that restores a first original input block associated with the encrypted message; and
producing by the processor a second decrypted message block, including:
computing second intermediate bits from the second encrypted data block using the inverse of the second cipher algorithm that takes K 2 as an input key; and
executing a second operation associated with the second pseudorandom string and the second intermediate bits that restores a second original input block associated with the encrypted message.
9. The method of claim 8 , wherein said first and second cipher algorithms are a same cipher algorithm.
10. The method of claim 8 , wherein the first operation includes an XOR operation that takes the first pseudorandom string and the first intermediate bits as inputs, and the second operation includes an XOR operation that takes the second pseudorandom string and the second intermediate bits as inputs.
11. An encryption apparatus, comprising:
at least one processor, configured to:
derive a first key (K 1 ) and a second key (K 2 ) from a session key;
generate a first pseudorandom string of bits as a function of K 1 using a first cipher algorithm;
generate a second pseudorandom string of bits as a function of K 1 using the first cipher algorithm, wherein a state of randomization of said first pseudorandom string is independent of a state of randomization of said second pseudorandom string;
encrypt a first block of message data with the first pseudorandom string, the encrypting comprising executing a first operation associated with the first pseudorandom string thereby yielding at least partial randomization of the first block; and
encrypt a successive second block of message data with the second pseudorandom string, the encrypting comprising executing a second operation associated with the second pseudorandom string thereby yielding at least partial randomization of the second block;
producing an encrypted message by encrypting the first and second encrypted blocks of message data using a second cipher algorithm that takes K 2 as an input key; and
transmit the encrypted message.
12. The apparatus of claim 11 , wherein said first and second cipher algorithms are a same cipher algorithm.
13. The apparatus of claim 11 , wherein the first operation includes an XOR operation that takes the first pseudorandom string and the first block as inputs, and the second operation includes an XOR operation that takes the second pseudorandom string and the second block as inputs.
14. A decryption apparatus, comprising:
at least one processor, configured to:
receive an encrypted message, including first and second encrypted data blocks;
derive a first key (K 1 ) and a second key (K 2 ) from a session key;
generate first and second pseudorandom strings of bits as a function of a first cipher algorithm and K 1 , wherein a state of randomization of the first pseudorandom string is independent of a state of randomization of the second pseudorandom string;
produce a first output, including:
computing first intermediate bits from the first encrypted data block using an inverse of a second cipher algorithm that takes K 2 as an input key; and
executing a first operation associated with the first pseudorandom string and the first intermediate bits that restores a first original input block associated with the encrypted message; and
produce a second output, including:
computing second intermediate bits from the second encrypted data block using the inverse of the second cipher algorithm that takes K 2 as an input key; and
executing a second operation associated with the second pseudorandom string and the second intermediate bits that restores a second original input block associated with the encrypted message.
15. The apparatus of claim 14 , wherein said first and second cipher algorithms are a same cipher algorithm.
16. The apparatus of claim 14 , wherein the first operation includes an XOR operation that takes the first pseudorandom string and the first intermediate bits as inputs, and the second operation includes an XOR operation that takes the second pseudorandom string and the second intermediate bits as inputs.