Back to results
US 12,755,030 B1Granted
Apparatus and method for encrypting files for application-level data protection in secure enclaves
AssigneeAnjuna Security, Inc.
InventorsYan Michalevsky, Thomas Aprelev
Life of this patent
Estimating the term…
Abstract
A non-transitory computer readable storage medium has instructions executed by a processor to divide a digital file into partitions. Advanced Encryption Standard-Galois/Counter Mode (AES-CSM) encryption is used to form encrypted partitions of the partitions, where each encrypted partition has a unique Message Authentication Code (MAC). An update to a specified encrypted partition is received. AES-CSM encryption is used on the specified encrypted partition to compute a new unique MAC to form a new specified encrypted partition without processing any other encrypted partition.
Claims13
A method comprising:
- receiving a data file for encryption;
- partitioning the data file into a plurality of data chunks, wherein each data chunk comprises authenticated data;
- encrypting each data chunk using a Galois/Counter Mode (GCM);
- generating a chunk authentication tag for each encrypted data chunk;
- generating an encrypted data file comprising a plurality of encrypted data chunks;
- concatenating the chunk authentication tags from the plurality of data chunks;
- and
- generating a file tag by applying a Galois Message Authentication Code Operation (GMAC) to the concatenated chunk authentication tags to generate a file tag, wherein a modification of the data file results in a re-computation of the file tag, wherein the re-computation is performed using a GCM, and wherein the re-computation can be performed in a time proportional to an amount of the modification.
5 more elements
Dependencies are inferred from the claim text.