Encryption method and encryption device
The present disclosure discloses an encryption method and an encryption apparatus. The encryption method comprises: generating an AES initial key by using an SAES encryption algorithm, and expanding the AES initial key to obtain an AES encryption key; and encrypting information to be encrypted by using the AES encryption key according to an AES encryption algorithm to generate encrypted data. As such, the AES encryption key is encrypted by introducing the SAES algorithm, which increases the difficulty in cracking the AES encryption key. An attacker may crack the AES by firstly cracking the AES encryption key, which increases the overall difficulty in cracking the AES encrypted data. Further, the SAES encryption algorithm and the AES encryption algorithm are implemented by means of an ASIC integrated in an encryption chip.
1. An encryption method, comprising:
generating an Advanced Encryption Standard (AES) initial key by using a Simplified Advanced Encryption Standard (SAES) encryption algorithm;
expanding the AES initial key to obtain an AES encryption key; and
encrypting information to be encrypted by using the AES encryption key according to an AES encryption algorithm;
wherein the generating the AES initial key by using the SAES encryption algorithm comprises:
configuring an SAES initial key and an SAES plaintext;
performing SAES key processing for the SAES initial key to obtain a processing result;
performing key expansion for the processing result to obtain an SAES encryption key; and
encrypting the SAES plaintext by using the SAES encryption key according to the SAES encryption algorithm to generate the AES initial key;
wherein the performing SAES key processing for the SAES initial key comprises:
combining a number M groups of N-bit data in the SAES initial key together to an M*N-bit serial stream;
performing cyclic shift processing for the M*N-bit serial stream to generate a new M*N-bit serial stream; and
performing a key selection processing for the new M*N-bit serial stream to select a number L groups of adjacent data from the new M*N-bit serial stream, wherein the L groups of adjacent data is used as inputs of the SAES encryption key expansion.
2. The encryption method according to claim 1 , wherein the information to be encrypted is biological characteristic information.
3. The encryption method according to claim 1 , wherein the SAES encryption algorithm or/and the AES encryption algorithm are implemented by an application specific integrated circuit (ASIC).
4. An encryption apparatus, comprising a simplified advanced encryption standard (SAES) encryption module and an advanced encryption standard (AES) encryption module; wherein
the SAES encryption module is configured to generate an AES initial key by using an SAES encryption algorithm; and
the AES encryption module is configured to expand the AES initial key to obtain an AES encryption key, and encrypt information to be encrypted by using the AES encryption key according to an AES encryption algorithm;
wherein the SAES encryption module comprises a processing unit and an encryption unit; wherein
the processing unit is configured to configure an SAES initial key and an SAES plaintext;
the processing unit is further configured to perform SAES key processing for the SAES initial key to obtain a processing result implemented by:
combining a number M groups of N-bit data in the SAES initial key together to an M*N-bit serial stream;
performing cyclic shift processing for the M*N-bit serial stream to generate a new M*N-bit serial stream; and
performing a key selection processing for the new M*N-bit serial stream to select a number L groups of adjacent data from the new M*N-bit serial stream, wherein the L groups of adjacent data is used as inputs of subsequent SAES encryption key expansion;
the processing unit is further configured to perform the key expansion for the processing result to obtain an SAES encryption key; and
the encryption unit is configured to encrypt the SAES plaintext by using the SAES encryption key according to the SAES encryption algorithm, to generate the AES initial key.
5. The encryption apparatus according to claim 4 , wherein the information to be encrypted is biological characteristic information.
6. The encryption apparatus according to claim 4 , wherein the SAES encryption module or/and the AES encryption module are an ASIC integrated in an encryption chip.
7. An encryption apparatus, comprising a processor, wherein the processor is configured to:
generate an Advanced Encryption Standard (AES) initial key by using a Simplified Advanced Encryption Standard (SAES) encryption algorithm implemented by:
configuring an SAES initial key and an SAES plaintext;
performing SAES key processing for the SAES initial key to obtain a processing result comprising:
combining a number M groups of N-bit data in the SAES initial key together to an M*N-bit serial stream;
performing cyclic shift processing for the M*N-bit serial stream to generate a new M*N-bit serial stream; and
performing a key selection processing for the new M*N-bit serial stream to select a number L groups of adjacent data from the new M*N-bit serial stream, wherein the L groups of adjacent data is used as inputs of subsequent SAES encryption key expansion;
performing the key expansion for the processing result to obtain an SAES encryption key; and
encrypting the SAES plaintext by using the SAES encryption key according to the SAES encryption algorithm to generate the AES initial key;
expand the AES initial key to obtain an AES encryption key; and
encrypt information to be encrypted by using the AES encryption key according to an AES encryption algorithm.
8. The encryption apparatus according to claim 7 , wherein the information to be encrypted is biological characteristic information.