Method for encrypting data for distributed storage
AssigneeNEC Corporation
InventorGhassan Karame
Life of this patent
Estimating the term…
Abstract
A method for encrypting data with an encryption entity includes, in a step a), dividing a plaintext into a number of N blocks. In a step b), each of the blocks are encrypted with an encryption key resulting in a number of ciphertext blocks. In a step c), a linear All-Or-Nothing scheme is applied on the ciphertext blocks. In a step d), each of the ciphertext blocks output from step c) is transformed with a transformation procedure, which performs a cyclic bitwise operation, such that the information in different ciphertext blocks is transformed differently based on the encryption key and such that the transformation procedure is only revertable with knowledge of the encryption key. In a step e), the transformed ciphertext blocks are dispersed according to an information dispersal procedure.
Claims20
A method for encrypting data with an encryption entity, the method comprising:
- a) dividing a plaintext into a number of N blocks;
- b) encrypting each of the blocks with an encryption key resulting in a number of ciphertext blocks;
- c) applying a linear All-Or-Nothing scheme on the ciphertext blocks,
- d) transforming each of the ciphertext blocks output from step c) with a transformation procedure, which performs a cyclic bitwise operation, such that the information in different ciphertext blocks is transformed differently based on the encryption key and such that the transformation procedure is only revertable with knowledge of the encryption key, and
- e) dispersing the transformed ciphertext blocks according to an information dispersal procedure.
A system for encrypting data comprising one or more encryption entities including memory and one or more computer processors, which individually or in cooperation with each other, are configured to perform the following steps:
- a) dividing a plaintext into a number of N blocks;
- b) encrypting each of the blocks with an encryption key resulting in a number of ciphertext blocks;
- c) applying a linear All-Or-Nothing scheme on the ciphertext blocks,
- d) transforming each of the ciphertext blocks output from step c) with a transformation procedure, which performs a cyclic bitwise operation, such that the information in different ciphertext blocks is transformed differently based on the encryption key and such that the transformation procedure is only revertable with knowledge of the encryption key, and
- e) dispersing the transformed ciphertext blocks according to an information dispersal procedure.
A tangible, non-transitory computer-readable medium having instructions thereon, which upon execution by memory and one or more processors form one or more encryption entities which, individually or in cooperation with each other, are configured to provide for execution of the following steps:
- a) dividing a plaintext into a number of N blocks;
- b) encrypting each of the blocks with an encryption key resulting in a number of ciphertext blocks;
- c) applying a linear All-Or-Nothing scheme on the ciphertext blocks,
- d) transforming each of the ciphertext blocks output from step c) with a transformation procedure, which performs a cyclic bitwise operation, such that the information in different ciphertext blocks is transformed differently based on the encryption key and such that the transformation procedure is only revertable with knowledge of the encryption key, and
- e) dispersing the transformed ciphertext blocks according to an information dispersal procedure.
Dependencies are inferred from the claim text.