Method and system for encrypting/decrypting data with ultra-low latency for secure data storage and/or communication
The system comprises a sending entity ( 100 ) and a receiving entity ( 200 ). The sending entity ( 100 ) is suitable for generating a random mask (MA) with m bits; applying an XOR operation between the raw data block to be encrypted (T) and the random mask (MA) thus generated to obtain a primary encrypted block (CPV) with m bits; and applying a permutation (PE) on the concatenation of the random mask (MA) and the primary encrypted block (CPV) to obtain a secondary encrypted block (CS). The receiving entity ( 200 ) is suitable for receiving the secondary encrypted block (CS) of 2*m bits; applying an inverse permutation (PI) on the secondary encrypted block thus received to obtain the de-concatenation of a random mask (MA) and a primary encrypted block (CPV) with m bits; and applying an XOR operation between the primary encrypted block (CPV) and the random mask (MA) thus de-concatenated to obtain a block in clear (T) with m bits. The permutation (PE) and its inverse permutation (PI) are secret and only shared and known by the communicating entities ( 100, 200 ).
1. A method for asynchronous symmetrical encryption of an initial message in clear (T) in N successive blocks of m bits each of raw data implemented between a sending entity ( 100 ) and a receiving entity ( 200 ), characterized in that, for each block (T) of m bits to be encrypted, the following steps are performed:
generating a new disposable random mask (MA) of m bits for each block (T) of m bits to be encrypted;
applying an exclusive OR (XOR) operation between the raw data block to be encrypted (T) and the random mask (MA) thus generated to obtain a primary encrypted block (CPV) of m bits; and
applying a permutation of bits (PE) on the concatenation of the disposable random mask (MA) and the primary encrypted block (CPV) to obtain a secondary encrypted block (CS) of 2*m bits, the permutation (PE) being secret and only shared and known by the sending ( 100 ) and receiving ( 200 ) entities.
2. The method according to claim 1 , characterized in that the size m of the blocks to be encrypted (T) is a multiple of 2.
3. The method according to claim 1 , characterized in that the bit permutation (PE) substantially has no fixed point.
4. The method according to claim 1 , characterized in that it further comprises a prior step for secret communication of the bit permutation (PE) intended for the receiving entity ( 100 ) and the sending entity ( 200 ).
5. A method for the asynchronous symmetrical decryption of a message encrypted according to the data encryption method implemented between a sending entity ( 100 ) and a receiving entity ( 200 ) according to claim 1 , characterized in that it comprises the following steps:
receiving a secondary block of 2*m bits encrypted according to claim 1 ,
applying an inverse bit permutation (PI) on the secondary encrypted block thus received to obtain the de-concatenation of a random mask of m bits (MA) and a primary encrypted block (CPV) of m bits;
applying an exclusive OR operation (XOR) between the primary encrypted block (CPV) and the random mask (MA) thus de-concatenated to obtain a block in clear (T) of m bits, the inverse permutation (PI) being secret and only shared and known by the sending ( 100 ) and receiving ( 200 ) entities.
6. A non-transitory computer-readable medium storing instructions for implementing, via a processor, the encryption method according to claim 1 when said instructions are executed by said processor.
7. A system for the asynchronous encryption/decryption of an initial message in clear (T) of N successive blocks of m bits each of raw data between a sending entity ( 100 ) and a receiving entity ( 200 ), characterized in that the sending entity ( 100 ) includes a hardware processor that is configured to perform steps of:
generating a new random mask (MA) of m bits for each block (T) of m bits to be encrypted;
applying an exclusive OR operation (XOR) between the raw data block to be encrypted (T) and the random mask (MA) thus generated to obtain a primary encrypted block (CPV) of m bits;
applying a bit permutation (PE) on the concatenation of the random mask (MA) and the primary encrypted block (CPV) to obtain a secondary encrypted block of 2*m bits (CS),
while the receiving entity ( 200 ) includes a processor that is configured to perform steps of:
receiving the secondary encrypted block of 2*m bits thus encrypted (CS) coming from the sending entity ( 100 );
applying an inverse bit permutation (PI) on the secondary encrypted block (CS) thus received to obtain the de-concatenation of a random mask (MA) of m bits and a primary encrypted block (CPV) of m bits;
applying an exclusive OR operation (XOR) between the primary encrypted block (CPV) and the random mask (MA) thus de-concatenated to obtain a block in clear (T) of m bits, the permutation (PE) and its inverse permutation (PI) being secret and only shared and known by the sending ( 100 ) and receiving ( 200 ) entities.
8. The system according to claim 7 , characterized in that the sending entity ( 100 ) and the receiving entity ( 200 ) communicate the secondary encrypted data (CS) between one another through a communication channel ( 400 ).
9. The system according to claim 7 , characterized in that the secondary encrypted data (CS) is stored in at least one of a volatile memory and a non-volatile memory.
10. The system according to claim 7 , characterized in that the processor of at least one of the sending and/or receiving entity ( 100 , 200 ) includes one of fixed and programmable logic circuits.