Encrypting data
A method and system. An instruction to encrypt plaintext to generate encrypted data from the plaintext is received. The encrypted data is to be stored in a database device in response to a first request received from a client terminal to store the plaintext in the database device. The first request includes the plaintext. Ciphertext is generated by applying both an initialization vector and an encryption key directly to the plaintext. An embedding rule used to generate the encrypted data is selected from a sequence of embedding rules. The encrypted data is stored in the database device, A second request to receive the plaintext data is received from the client terminal. The plaintext is obtained from the encrypted data, by separating the encrypted data into the ciphertext and the initialization vector; and generating the plaintext by decrypting the ciphertext that was separated from the encrypted data.
1. A method, said method comprising:
generating, by a processor of a computer system, ciphertext by applying both an initialization vector and an encryption key directly to plaintext;
said processor selecting one embedding rule from a sequence of embedding rules, said selecting the one embedding rule comprising using the first two bits of the ciphertext to select the one embedding rule from the sequence of embedding rules;
said processor using the selected one embedding rule to combine the initialization vector with the entire ciphertext to generate encrypted data;
said processor storing the encrypted data in a database device; and
said processor retrieving the encrypted data, obtaining the plaintext from the encrypted data, and sending the obtained plaintext to a client terminal, wherein said obtaining the plaintext from the encrypted data comprises: separating the encrypted data into the ciphertext and the initialization vector; and after said separating, generating the plaintext by decrypting, using the encryption key and the initialization vector, the ciphertext that was separated from the encrypted data.
2. The method of claim 1 , wherein said generating ciphertext comprises:
dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein N is an integer of at least 2;
encrypting block B 1 using the encryption key and the initialization vector to generate cipher block C 1 ;
encrypting block B n using the encryption key and block B n-1 to generate cipher block C n (n=2, . . . , N); and
combining cipher blocks C 1 , . . . , C N to generate the ciphertext, wherein the generated ciphertext consists of the cipher blocks C 1 . . . , C N .
3. The method of claim 1 , wherein the initialization vector is a pseudo-random number.
4. The method of claim 1 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.
5. The method of claim 1 , wherein said using the embedding rule comprises generating the encrypted data by:
dividing the initialization vector at random positions into initialization vector fragments of different lengths;
dividing the ciphertext at random positions into ciphertext fragments of different lengths; and
distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.
6. A computer program product, comprising a computer readable storage device having computer readable program code stored therein, said program code containing instructions which, upon being executed by a processor of a computer system, implement a method, said method comprising:
said processor generating ciphertext by applying both an initialization vector and an encryption key directly to plaintext;
said processor selecting one embedding rule from a sequence of embedding rules, said selecting the one embedding rule comprising using the first two bits of the ciphertext to select the one embedding rule from the sequence of embedding rules;
said processor using the selected one embedding rule to combine the initialization vector with the entire ciphertext to generate encrypted data;
said processor storing the encrypted data in a database device; and
said processor retrieving the encrypted data, obtaining the plaintext from the encrypted data, and sending the obtained plaintext to a client terminal, wherein said obtaining the plaintext from the encrypted data comprises: separating the encrypted data into the ciphertext and the initialization vector; and after said separating, generating the plaintext by decrypting, using the encryption key and the initialization vector, the ciphertext that was separated from the encrypted data.
7. The computer program product of claim 6 , wherein said generating ciphertext comprises:
dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein N is an integer of at least 2;
encrypting block B 1 using the encryption key and the initialization vector to generate cipher block C 1 ;
encrypting block B n using the encryption key and block B n-1 to generate cipher block C n (n=2, . . . , N); and
combining cipher blocks C 1 , . . . , C N to generate the ciphertext, wherein the generated ciphertext consists of the cipher blocks C 1 , . . . , C N .
8. The computer program product of claim 6 , wherein the initialization vector is a pseudo-random number.
9. The computer program product of claim 6 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.
10. The computer program product of claim 6 , wherein said using the embedding rule comprises generating the encrypted data by:
dividing the initialization vector at random positions into initialization vector fragments of different lengths;
dividing the ciphertext at random positions into ciphertext fragments of different lengths; and
distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.
11. A computer system comprising a processor, a memory coupled to the processor, and a computer readable storage device coupled to the processor, said storage device containing program code which, upon being executed by the processor via the memory, implements a method, said method comprising:
said processor generating ciphertext by applying both an initialization vector and an encryption key directly to plaintext;
said processor selecting one embedding rule from a sequence of embedding rules, said selecting the one embedding rule comprising using the first two bits of the ciphertext to select the one embedding rule from the sequence of embedding rules;
said processor using the selected one embedding rule to combine the initialization vector with the entire ciphertext to generate encrypted data;
said processor storing the encrypted data in a database device; and
said processor retrieving the encrypted data, obtaining the plaintext from the encrypted data, and sending the obtained plaintext to a client terminal, wherein said obtaining the plaintext from the encrypted data comprises: separating the encrypted data into the ciphertext and the initialization vector; and after said separating, generating the plaintext by decrypting, using the encryption key and the initialization vector, the ciphertext that was separated from the encrypted data.
12. The computer system of claim 11 , wherein said generating ciphertext comprises:
dividing the plaintext into N plaintext blocks denoted as B 1 , . . . , B N , wherein N is an integer of at least 2;
encrypting block B 1 using the encryption key and the initialization vector to generate cipher block C 1 ;
encrypting block B n using the encryption key and block B n-1 to generate cipher block C n (n=2, . . . , N); and
combining cipher blocks C 1 , . . . , C N to generate the ciphertext, wherein the generated ciphertext consists of the cipher blocks C 1 , . . . , C n t.
13. The computer system of claim 11 , wherein the initialization vector is a pseudo-random number.
14. The computer system of claim 11 , wherein said using the embedding rule comprises generating the encrypted data by attaching the initialization vector to the beginning or end of the ciphertext.
15. The computer system of claim 11 , wherein said using the embedding rule comprises generating the encrypted data by:
dividing the initialization vector at random positions into initialization vector fragments of different lengths;
dividing the ciphertext at random positions into ciphertext fragments of different lengths; and
distributing the initialization vector fragments between the ciphertext fragments according to an order that is unrelated to the order of the initialization vector fragments in the sequence.
16. The method of claim 1 , wherein the generated encrypted data resulting from said using the selected one embedding rule includes all bits of the initialization vector.
17. The computer program product of claim 6 , wherein the generated encrypted data resulting from said using the selected one embedding rule includes all bits of the initialization vector.
18. The computer system of claim 11 , wherein the generated encrypted data resulting from said using the selected one embedding rule includes all bits of the initialization vector.