Block encryption method and schemes for data confidentiality and integrity protection

A decryption method that is the inverse of an encryption method which provides both data confidentialityand integrity, comprising the steps of:

• presenting a string including ciphertext string for decryption;
• partitioning said ciphertext string into a plurality of ciphertext blocks comprising e bits each;
• selecting n+1 ciphertext blocks from said plurality of ciphertext blocks representing n data blocks and one MDC block and performing a reverse randomization function on each of the selected n+1 ciphertext blocks to obtain a plurality of hidden ciphertext blocks each of λ bits in length;
• making one and onlyone processing pass with a single cryptographic primitive that is the inverse of an encryption single cryptographic primitive over the plurality of hidden ciphertext blocks to obtain a plurality of plaintext blocks comprising λ bits each;
• verifying integrity of the plaintext blocks using a non-cryptographic Manipulation Detection Code (MDC) function;
• outputting the plurality of plaintext blocks as an accurate plaintext string if the integrity verification passes;
• and
• outputting a failure indicator if the integrity verification fails.

A method for parallel encryption processing of a message comprising the steps of:

• partitioning said input plaintext string into a plurality of input plaintext segments;
• concurrentlypresenting each different one of said plurality of input plaintext segments to a different one of a plurality of encryption processors, each of said different processors using a different λ-bit secret random number per segment to obtain a ciphertext segment using an encryption method providing both data confidentialityand integritywith a single processing pass over the input plaintext segment and a single cryptographic primitive, and using a non-cryptographic Manipulation Detection Code function, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key;
• assembling the plurality of ciphertext segments into a ciphertext string;
• and
• outputting the ciphertext string.

A method for parallel decryption processing of a message comprising the steps of:

• presenting a string including the ciphertext string of a message for decryption;
• partitioning said ciphertext string into a plurality of ciphertext segments;
• concurrentlypresenting said plurality of ciphertext segments to a plurality of processors;
• obtaining a different secret random number per ciphertext segment from a secret random number in the same manner as at a parallel encryption method;
• decrypting each ciphertext segment using said different secret random number per ciphertext segment to obtain a plaintext segment, using a decryption method that is the inverse of an encryption method used in the parallel encryption method that provides both data confidentialityand integritywith a single processing pass over the input plaintext segment and a single cryptographic primitive, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key, and using a non-cryptographic Manipulation Detection Code function for verifying integrity of the plaintext blocks of each plaintext segment;
• assembling the plurality of plaintext segments into a plaintext string;
• and
• verifying the integrity of the plaintext segments and their sequence and outputting the plaintext string if the integrityverification passes.

An encryption program product for providing both data confidentialityand integrityfor a message, comprising:

• first code for receiving an input plaintext string comprising a message and padding it as necessarysuch that its length is a multiple of λ bits;
• second code for partitioning the padded input plaintext string into a plurality of equal-size blocks of λ bits in length;
• third code for creating an MDC block of λ bits in length that includes the result of applying a non-cryptographic Manipulation Detection Code (MDC) function to the plurality of said equal-size blocks;
• fourth code for making one and onlyone processing pass with a single cryptographic primitive over each of the said equal-size blocks and the MDC block to create a plurality of hidden ciphertext blocks each of λ bits in length;
• and
• fifth code for performing a randomization function over said plurality of hidden ciphertext blocks to create a plurality of output ciphertext blocks each of λ bits in length.

A decryption program product that is the inverse of the encryption program product which provides both data confidentialityand integrity, comprising:

• first code for presenting a string including ciphertext string for decryption;
• second code for partitioning said ciphertext string into a plurality of ciphertext blocks comprising λ bits each;
• third code for selecting n+1 ciphertext blocks from said plurality of ciphertext blocks representing n data blocks and one MDC block and performing a reverse randomization function on each of the selected n+1 ciphertext blocks to obtain a plurality of hidden ciphertext blocks each of λ bits in length;
• fourth code for making one and onlyone processing pass with a single cryptographic primitive that is the inverse of an encryption single cryptographic primitive over the plurality of hidden ciphertext block to obtain a plurality of plaintext blocks comprising λ bits each;
• fifth code for verifying integrity of the plaintext blocks using a non-cryptographic Manipulation Detection Code (MDC) function;
• and
• sixth code for outputting the plurality of plaintext blocks as an accurate plaintext string if the integrityverification passes;
• and
• seventh code for outputting a failure indicator if the integrityverification fails.

An encryption system for providing both data confidentialityand integrity for a message, comprising:

• a first component for receiving an input plaintext string comprising a message and padding it as necessarysuch that its length is a multiple of λ bits;
• a second component for partitioning the padded input plaintext string into a plurality of equal-size blocks of λ bits in length;
• a third component for creating an MDC block of λ bits in length that includes the result of applying a non-cryptographic Manipulation Detection Code (MDC) function to the plurality of said equal-size blocks;
• a fourth component for making one and onlyone processing pass with a single cryptographic primitive over each of the said equal-size blocks and the MDC block to create a plurality of hidden ciphertext blocks each of λ bits in length;
• and
• a fifth component for performing a randomization function over said plurality of hidden ciphertext blocks to create a plurality of output ciphertext blocks each of λ bits in length.

A decryption system that is the inverse of the encryption system which provides both data confidentialityand integrity, comprising:

• a first component for presenting a string including ciphertext string for decryption;
• a second component for partitioning said ciphertext string into a plurality of ciphertext blocks comprising λ bits each;
• a third component for selecting n+1 ciphertext blocks from said plurality of ciphertext blocks representing n data blocks and one MDC block and performing a reverse randomization function on each of the selected n+1 ciphertext blocks to obtain a plurality of hidden ciphertext blocks each of λ bits in length;
• a fourth component for making one and onlyone processing pass with a single cryptographic primitive that is the inverse of an encryption single cryptographic primitive over the plurality of hidden ciphertext block to obtain a plurality of plaintext blocks comprising λ bits each;
• a fifth component for verifying integrity of the plaintext blocks using a non-cryptographic Manipulation Detection Code (MDC) function;
• and
• a sixth component for outputting the plurality of plaintext blocks as an accurate plaintext string if the integrityverification passes;
• and
• a seventh component for outputting a failure indicator if the integrityverification fails.

A program product for parallel encryption processing of a message comprising:

• first code for partitioning said input plaintext string into a plurality of input plaintext segments;
• second code for concurrentlypresenting each different one of said plurality of input plaintext segments to a different one of a plurality of encryption processors, each of said different processors using a different λ-bit secret random number per segment to obtain a ciphertext segment using an encryption code providing both data confidentialityand integritywith a single processing pass over the input plaintext segment and a single cryptographic primitive, and using a non-cryptographic Manipulation Detection Code function, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key;
• third code for assembling the plurality of ciphertext segments into a ciphertext string;
• and
• fourth code for outputting the ciphertext string.

A program product for parallel decryption processing of a message comprising:

• first code for presenting a string including the ciphertext string of a message for decryption;
• second code for partitioning said ciphertext string into a plurality of ciphertext segments;
• third code for concurrentlypresenting said plurality of ciphertext segments to a plurality of processors;
• fourth code for obtaining a different secret random number per ciphertext segment from a secret random number in the same manner as at the parallel encryption program product;
• fifth code for decrypting each ciphertext segment using said different secret random number per ciphertext segment to obtain a plaintext segment, using a decryption method that is the inverse of an encryption method used in the parallel encryption method that provides both data confidentialityand integritywith a single processing pass over the input plaintext segment and a single cryptographic primitive, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key, and using a non-cryptographic Manipulation Detection Code function for verifying integrity of the plaintext blocks of each plaintext segment;
• sixth code for assembling the plurality of plaintext segments into a plaintext string;
• and
• seventh code for verifying the integrity of the plaintext segments and their sequence and outputting the plaintext string if the integrityverification passes.

A system for parallel encryption processing of a message comprising:

• a first component for partitioning said input plaintext string into a plurality of input plaintext segments;
• a second component for concurrentlypresenting each different one of said plurality of input plaintext segments to a different one of a plurality of encryption processors, each of said different processors using a different λ-bit secret random number per segment to obtain a ciphertext segment using an encryption component providing both data confidentialityand integrity with a single processing pass over the input plaintext segment and a single cryptographic primitive, and using a non-cryptographic Manipulation Detection Code function, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key;
• a third component for assembling the plurality of ciphertext segments into a ciphertext string;
• and
• a fourth component for outputting the ciphertext string.

A system for parallel decryption processing of a message comprising:

• a first component for presenting a string including the ciphertext string of a message for decryption;
• a second component for partitioning said ciphertext string into a plurality of ciphertext segments;
• a third component for concurrently presenting said plurality of ciphertext segments to a plurality of processors;
• a fourth component for obtaining a different secret random number per ciphertext segment from a secret random number in the same manner as at the parallel encryption system;
• a fifth component for decrypting each ciphertext segment using said different secret random number per ciphertext segment to obtain a plaintext segment, using a decryption method that performs the inverse operation of an encryption method used in the parallel encryption method that provides both data confidentialityand integritywith a single processing pass over the input plaintext segment and a single cryptographic primitive, wherein said single cryptographic primitive is a λ-bit block cipher using a secret first key, and using a non-cryptographic Manipulation Detection Code function for verifying integrity of the plaintext blocks of each plaintext segment;
• a sixth component for assembling the plurality of plaintext segments into a plaintext string;
• and
• a seventh component for verifying the integrity of the plaintext segments and their sequence and outputting the plaintext string if the integrityverification passes.