Network device and data decryption method
AssigneeHuawei Technologies Co., Ltd.
InventorsWeizhi Le, Bin Cao
Life of this patent
Estimating the term…
Abstract
In accordance with an embodiment, a network device includes a chip including a hardware encryption and decryption circuit and a one-time programmable (OTP) storage area; and a receiver configured to receive a to-be-decrypted file, where the to-be-decrypted file comprises a ciphertext. The hardware encryption and decryption circuit is configured to obtain a root key plaintext from the OTP storage area, and decrypt the ciphertext using the root key plaintext to obtain a plaintext.
Claims20
A network device, comprising:
- a chip comprising a hardware encryption and decryption circuit and a one-time programmable (OTP) storage area;
- and
- a receiver configured to receive a to-be-decrypted file, wherein the to-be-decrypted file comprises a ciphertext, wherein
- the hardware encryption and decryption circuit is configured to obtain a root key ciphertext from the OTP storage area, and decrypt the root key ciphertext using a first keying material and a key to obtain a root key plaintext,
- the to-be-decrypted file further comprises a second keying material, and
- the hardware encryption and decryption circuit is further configured to obtain a subkey from the root key plaintext using the second keying material and decrypt the ciphertext using the subkey to obtain a plaintext.
A method, applied to a network device comprising a receiver and a chip that includes a hardware encryption and decryption circuit and a one-time programmable (OTP) storage area, the method comprising:
- receiving a to-be-decrypted file using the receiver, wherein the to-be-decrypted file comprises a ciphertext;
- obtaining a root key ciphertext from the OTP storage area;
- decrypting, by the hardware encryption and decryption circuit, the root key ciphertext using a first keying material and a key to obtain a root key plaintext, wherein the to-be-decrypted file further comprises a second keying material;
- obtaining, by the hardware encryption and decryption circuit, a subkey from the root key plaintext using the second keying material;
- and
- decrypting, by the hardware encryption and decryption circuit, the ciphertext using the subkey to obtain a plaintext.
A non-transitory computer readable medium with instructions stored thereon, wherein the instructions, when executed by at least one processor, enable a device to perform:
- receiving a to-be-decrypted file using a receiver, wherein the to-be-decrypted file comprises a ciphertext;
- obtaining a root key ciphertext from a one-time programmable (OTP) storage area;
- decrypting the root key ciphertext using a first keying material and a key to obtain a root key plaintext, wherein the to-be-decrypted file further comprises a second keying material;
- obtaining a subkey from the root key plaintext using the second keying material;
- and
- decrypting the ciphertext using the subkey to obtain a plaintext.
Dependencies are inferred from the claim text.