Cryptographic device with stored key data and method for using stored key data to perform an authentication exchange or self test
View Patent ↗In preferred embodiments, a cryptographic device in which two key sets are stored: a normal key set (typically unique to the device) and a test key set (typically used by each of a relatively large number of devices). The device uses the normal key set in a normal operating mode and uses the test key set in at least one test mode which can be a built-in self test mode. Alternatively, the device stores test data (e.g., an intermediate result of an authentication exchange) in addition to or instead of the test key set. In other embodiments, the invention is a cryptographic device including a cache memory which caches a portion of a key set for performing an authentication exchange and/or at least one authentication value generated during an authentication exchange. Other embodiments of the invention are systems including devices that embody the invention and methods that can be performed by systems or devices that embody the invention.
1. A cryptographic device, including:
a cache memory in which an intermediate result of an authentication exchange is cached;
circuitry coupled to access the cache memory; and
a non-volatile memory coupled to the circuitry, wherein a key set is stored in the non-volatile memory, and wherein the circuitry is configured to perform an initial authentication exchange in accordance with an HDCP protocol using the key set and including by accessing said key set from the non-volatile memory and generating a shared value, Km, in accordance with the HDCP protocol, wherein the shared value is said intermediate result, and the circuitry is also configured to perform at least one of encryption and decryption in accordance with the HDCP protocol on input data using the key set, and to perform at least one subsequent authentication exchange using the cached intermediate result but not the entire key set.
2. The device of claim 1 , wherein the key set is a normal key set, and also including additional memory coupled to the circuitry, wherein a full or partial test key set is stored in the additional memory, and wherein the circuitry is operable in at least one test mode using said full or partial test key set.
3. The device of claim 1 , wherein the key set is a normal key set, and also including additional memory coupled to the circuitry, in which test data are stored, and wherein the circuitry is operable in at least one test mode using the test data.
4. The device of claim 1 , wherein at least a partial test key set is also stored in the non-volatile memory, and wherein the circuitry is operable in at least one test mode using said at least partial test key set.
5. The device of claim 1 , wherein test data are also stored in the non-volatile memory, and wherein the circuitry is operable in at least one test mode using the test data.
6. The device of claim 1 , wherein the cache memory and the circuitry are implemented as an integrated circuit, and the non-volatile memory is implemented as a second integrated circuit coupled to the integrated circuit.
7. The device of claim 1 , wherein the device is a receiver configured to be coupled to a link to receive the input data, and the circuitry is configured to operate in accordance with the HDCP protocol to decrypt the input data using the key set.
8. The device of claim 1 , wherein the device is a transmitter, and the circuitry is configured to encrypt the input data in accordance with the HDCP protocol using the key set.
9. A method for operating a cryptographic device, including the steps of:
performing an initial authentication exchange in accordance with an HDCP protocol using a key set, including by retrieving the key set from a non-volatile memory;
caching an intermediate result of the initial authentication exchange in a cache memory, wherein the intermediate result is a shared value, Km, generated in accordance with the HDCP protocol during the initial authentication exchange;
performing at least one of encryption and decryption on input data using the key set; and
performing at least one subsequent authentication exchange using the cached intermediate result.
10. The method of claim 9 , wherein said at least one of encryption and decryption is performed in accordance with the HDCP protocol.