Message authentication code pre-computation with applications to secure memory
View Patent ↗A method comprising the steps of creating a random permutation of data from a data input by executing at least one of a Pseudo-Random Permutation (PRP) and a Pseudo-Random Function (PRF), creating a first data block by combining the random permutation of data with a received second data block and executing an ε-differentially uniform function on the result of the combination, XORing the result of the ε-DU function evaluation with a secret key, and reducing the first data block to a first message authentication code.
1. A method comprising the steps of:
receiving, at a message authentication code (MAC) computer, a first datum;
creating, via the MAC computer, a random permutation of data from the first datum by executing at least one of a Pseudo-Random Function and a Pseudo-Random Permutation;
creating, via the MAC computer, a first data block by combining the random permutation of data with a received second data block and executing an c-differentially uniform function on the result of the combination;
XORing, via the MAC computer, the first data block with a secret key; and
reducing, via the MAC computer, the XORed first data block to a first message authentication code;
wherein the random permutation of data is created independent of the received second data block.
2. The method of claim 1 wherein the first datum comprises a memory address of a memory associated with the MAC computer.
3. The method of claim 1 wherein the first datum comprises a message identifier.
4. The method of claim 1 wherein the c-differentially uniform function comprises a block cipher.
5. The method of claim 1 further comprising storing the received second data block in dynamic random access memory (DRAM).
6. The method of claim 5 further comprising encrypting the received second data block when written to the DRAM.
7. The method of claim 6 wherein the DRAM is off-chip memory.
8. The method of claim 6 further comprising encrypting the received second data block with Advanced Encryption Standard (AES).
9. The method of claim 6 further comprising decrypting the received second data block when read from the DRAM.
10. The method of claim 9 further comprising generating a second message authentication code when the received second data block is read from the DRAM.
11. The method of claim 1 further comprising authenticating the received second data block when the first message authentication code and the second message authentication code are the same.
12. A system comprising:
a message authentication code (MAC) computer configured to:
receive a first datum;
create a random permutation of data from the first datum by executing at least one of a Pseudo-Random Permutation and a Pseudo-Random Function;
create a first data block by combining the random permutation of data with a received second data block and executing an c-differentially uniform function on the result of the combination;
XOR the first data block with a secret key; and
reduce the XORed first data block to a first message authentication code;
wherein the random permutation of data is created independent of the received second data block.
13. The system of claim 12 wherein the first datum comprises a memory address of a memory associated with the MAC computer.
14. The system of claim 12 wherein the first datum comprises a message identifier.
15. The system of claim 12 wherein the c-differentially uniform function comprises a block cipher.
16. The system of claim 12 further comprising a memory component to store the received second data block.
17. The system of claim 16 wherein the memory component comprises dynamic random access memory (DRAM).
18. The system of claim 17 wherein the DRAM is off-chip memory.
19. The system of claim 12 further comprising a data encryptor configured to encrypt the received second data block.
20. The system of claim 19 wherein the data encryptor is configured to encrypt the received second data block via an Advanced Encryption Standard (AES) technique.