Encryption circuit randomness inspector and method
A baseband processor of a communication device, the baseband processor including an encryptor block that encrypts a transmit data stream into an encrypted data stream, at least one transmit chain block that transforms the encrypted data stream into an analog transmit signal, and a randomness inspector unit that is in communication with the encryptor block, the randomness inspector unit accessing the transmit data stream and the encrypted data stream from the encryptor block as first and second input streams, respectively, to the randomness inspector unit, and determining a randomness gain by comparing a first randomness measurement associated with the first input stream to a second randomness measurement associated with the second input stream.
1. A baseband processor of a communication device, the baseband processor comprising:
an encryptor block that encrypts a transmit data stream into an encrypted data stream;
at least one transmit chain block that transforms the encrypted data stream into an analog transmit signal; and
a randomness inspector unit that is in communication with the encryptor block, the randomness inspector unit accessing the transmit data stream and the encrypted data stream from the encryptor block as first and second input streams, respectively, to the randomness inspector unit, and determining a randomness gain by comparing a first randomness measurement associated with the first input stream to a second randomness measurement associated with the second input stream.
2. The baseband processor of claim 1 wherein the randomness inspector unit determines the randomness gain by comparing the first randomness measurement associated with the first input stream to the second randomness measurement associated with the second input stream.
3. The baseband processor of claim 2 wherein the randomness inspector unit utilizes at least one randomness test block to determine the first randomness measurement associated with the first input stream and the second randomness measurement associated with the second input stream, and compares the first randomness measurement to the second randomness measurement to determine the randomness gain.
4. The baseband processor of claim 3 wherein the randomness inspector unit applies the first input stream to a plurality of test blocks to determine a first plurality of randomness test results, respectively, and the first randomness measurement is based on the first plurality of randomness test results, and applies the second input stream to the plurality of test blocks to determine a second plurality of randomness test results, respectively, and the second randomness measurement is based on the second plurality of randomness test results.
5. The baseband processor of claim 3 wherein the randomness inspector unit increments a first counter value for every instance that one of the at least one randomness test block results in a failed test associated with first input stream, and that increments a second counter value for every instance that one of the at least one randomness test block results in a failed test associated with second input stream.
6. The baseband processor of claim 4 wherein the randomness inspector unit determines the first randomness measurement based on the first plurality of randomness test results, and determines the second randomness measurement based on the second plurality of randomness test results, and determines the randomness gain by aggregating the first randomness measurement and the second randomness measurement.
7. The baseband processor of claim 6 wherein the randomness inspector unit determines a first penalty value based on a number of the first plurality of randomness test results that have a failed test result, and utilizes the first penalty value in the determination of the first randomness measurement, and wherein randomness inspector unit determines a second penalty value based on a number of the second plurality of randomness test results that have a failed test result, and utilizes the second penalty value in the determination of the second randomness measurement.
8. The baseband processor of claim 1 wherein the randomness inspector unit determines a gain differential between the randomness gain and a reference randomness gain.
9. The baseband processor of claim 8 wherein the randomness inspector unit determines whether the encryptor block is in a compromised state by comparing the gain differential to a predetermined threshold value.
10. The baseband processor of claim 1 wherein the at least one transmit chain block is comprised of a plurality of transmit chain blocks and an input switch connects an output data steam of one of the transmit chain blocks to a third input stream to the randomness inspector unit which further determines a second randomness gain by comparing the first randomness measurement associated with the first input stream to a third randomness measurement associated with the third input stream.
11. A method for determining a randomness gain associated with an encrypted data stream, the method comprising the steps of:
encrypting a transmit data stream into the encrypted data stream;
transforming the encrypted data stream into an analog transmit signal; and
conducting a randomness inspection that includes the steps of accessing the transmit data stream and the encrypted data stream, and determining the randomness gain by comparing a first randomness measurement associated with the transmit data stream to a second randomness measurement associated with the encrypted data stream.
12. The method of claim 11 wherein the randomness gain is determined by comparing the first randomness measurement associated with the transmit data stream to the second randomness measurement associated with the encrypted data stream.
13. The method of claim 11 wherein the randomness inspection further includes the step of determining a gain differential between the randomness gain and a reference randomness gain.
14. The method of claim 13 wherein the randomness inspection further includes the step of determining whether the encrypting step is in a compromised state by comparing the gain differential to a predetermined threshold value.
15. The method of claim 11 wherein comparing the first randomness measurement associated with the transmit data stream to the second randomness measurement associated with the encrypted data stream includes a randomness evaluation step of applying at least one randomness test block to the transmit data stream to determine the first randomness measurement and applying the at least one randomness test block to the encrypted data stream to determine the second randomness measurement, and a randomness gain step of comparing the first randomness measurement to the second randomness measurement to determine the randomness gain.
16. The method of claim 15 wherein in the randomness evaluation step the transmit data stream is applied to a plurality of test blocks to determine a first plurality of randomness test results, respectively, and the first randomness measurement is based on the first plurality of randomness test results, and the encrypted data stream is applied to the plurality of test blocks to determine a second plurality of randomness test results, respectively, and the second randomness measurement is based on the second plurality of randomness test results.
17. The method of claim 16 wherein the randomness gain step includes determining the first randomness measurement based on the first plurality of randomness test results, and determining the second randomness measurement based on the second plurality of randomness test results, and determines the randomness gain by aggregating the first randomness measurement and the second randomness measurement.
18. The method of claim 17 wherein a first penalty value is determined based on a number of the first plurality of randomness test results that have a failed test result and utilizing the first penalty value in the determination of the first randomness measurement, and wherein a second penalty value is determined based on a number of the second plurality of randomness test results that have a failed test result and utilizing the second penalty value in the determination of the second randomness measurement.
19. The method of claim 15 wherein the randomness evaluation step increments a first counter value for every instance that one of the at least one randomness test block results in a failed test associated with transmit data stream, and increments a second counter value for every instance that one of the at least one randomness test block results in a failed test associated with encrypted data stream.
20. The method of claim 11 further including the step of processing the encrypted data stream with a transmit chain block to generate a processed encrypted data stream, wherein the randomness inspection step accesses the processed encrypted data stream and determines a second randomness gain by comparing the first randomness measurement associated with the transmit data stream to a third randomness measurement associated with the processed encrypted data stream.