Method and apparatus for generating a cryptosync
A method and apparatus for generating a cryptosync is disclosed that generates a cryptosync with the desired variability without the overhead in complexity and size of prior cryptosyncs. The cryptosync is generated from a combination of fields including fields relating to the segmentation and reassembly of the data packets at a transmitting terminal and a receiving terminal. The resultant cryptosync does not repeat during the use of a particular security key.
1. An apparatus for encrypting a data packet with a cryptosync, the apparatus comprising:
a memory;
a processor, comprising hardware, coupled to the memory and configured to:
obtain a first field associated with segmenting of the data packet;
obtain a second field associated with a stream related to transmission of the data packet;
obtain a third field associated with a count of a route related to the transmission of the data packet, wherein the count is incremented each time a new route is created; and
generate the cryptosync for the data packet from the obtained fields, wherein the cryptosync comprises a fourth field associated with resetting the segmenting of the data packet of the first field, and a fifth field associated with a count of a number of times the segmenting of the data packet of the first field is reset, wherein the count is incremented each time the first field is reset; and
an encryption unit configured to encrypt the data packet with the cryptosync.
2. The apparatus of claim 1 , wherein the cryptosync further comprises:
a sixth field associated with a count of instances of rolling over the first field.
3. The apparatus of claim 2 , wherein any of the first field, second field, third field, or fourth field are variable in length.
4. The apparatus of claim 2 , further comprising:
a mask generator for generating a mask from the cryptosync and a security key, wherein the encryption unit is configured to encrypt the data packet with the mask.
5. The apparatus of claim 1 , wherein the fourth field is reset when the first field rolls over.
6. An apparatus for authenticating a data packet with a cryptosync, the apparatus comprising:
a memory;
a processor, comprising hardware, coupled to the memory and configured to:
obtain a first field associated with the reassembling of the data packet;
obtain a second field associated with a stream related to the reception of the data packet;
obtain a third field associated with a count of a route related to the reception of the data packet, wherein the count is incremented each time a new route is created; and
generate the cryptosync for the data packet from the obtained fields, wherein the cryptosync comprises a fourth field associated with resetting the segmenting of the data packet of the first field, and a fifth field associated with a count of a number of times the segmenting of the data packet of the first field is reset, wherein the count is incremented each time the first field is reset; and
an authentication unit configured to authenticate the data packet with the cryptosync.
7. The apparatus of claim 6 , wherein the cryptosync further comprises:
a sixth field associated with a count of instances of rolling over the first field.
8. The apparatus of claim 7 , further comprising:
a mask generator for generating a mask from the cryptosync and a security key, wherein the authentication unit is configured to authenticate the data packet with the mask.
9. The apparatus of claim 6 , wherein the fourth field is reset when the first field rolls over.
10. The apparatus of claim 9 , wherein any of the first field, second field, third field, or fourth field are variable in length.
11. In a wireless communication system, a method for encrypting a data packet with a cryptosync, the method comprising:
obtaining a first field associated with the segmenting of the data packet;
obtaining a second field associated with a stream related to the transmission of the data packet;
obtaining a third field associated with a count of a route related to the transmission of the data packet, wherein the count is incremented each time a new route is created;
generating the cryptosync for the data packet from the obtained fields, wherein the cryptosync comprises a fourth field associated with resetting the segmenting of the data packet of the first field, and a fifth field associated with a count of a number of times the segmenting of the data packet of the first field is reset, wherein the count is incremented each time the first field is reset; and
encrypting the data packet with the cryptosync.
12. The method of claim 11 , further comprising:
obtaining a sixth field associated with a count of instances of rolling over the first field.
13. The method of claim 12 , wherein any of the first field, second field, third field, or fourth field are variable in length.
14. The method of claim 12 , wherein the fields are included in the header of the data packet.
15. The method of claim 11 , wherein the fourth field is reset when the first field rolls over.
16. An apparatus in a wireless communication system for encrypting a data packet with a cryptosync, comprising:
means for obtaining a first field associated with the segmenting of the data packet;
means for obtaining a second field associated with a stream related to the transmission of the data packet;
means for obtaining a third field associated with a count of a route related to the transmission of the data packet, wherein the count is incremented each time a new route is created;
means for generating the cryptosync for the data packet from the obtained fields, wherein the cryptosync comprises a fourth field associated with resetting the segmenting of the data packet of the first field, and a fifth field associated with a count of a number of times the segmenting of the data packet of the first field is reset, wherein the count is incremented each time the first field is reset; and
means for encrypting the data packet with the cryptosync.
17. A computer program product in a wireless communication system for encrypting a data packet with a cryptosync, comprising:
a non-transitory computer-readable medium comprising:
a first set of codes for causing a computer to obtain a first field associated with the segmenting of the data packet;
a second set of codes for causing the computer to obtain a second field associated with a stream related to the transmission of the data packet;
a third set of codes for causing the computer to obtain a third field associated with a count of a route related to the transmission of the data packet, wherein the count is incremented each time a new route is created;
a fourth set of codes for causing the computer to generate a cryptosync for the data packet from the obtained fields, wherein the cryptosync comprises a fourth field associated with resetting the segmenting of the data packet of the first field, and a fifth field associated with a count of a number of times the segmenting of the data packet of the first field is reset, wherein the count is incremented each time the first field is reset; and
a fifth set of codes for causing the computer to encrypt the data packet with the cryptosync.