Method and apparatus for composable block re-encryption of publicly distributed content
AssigneeIntel Corporation
InventorGary Graunke
Life of this patent
Estimating the term…
Abstract
Secure communication from one encryption domain to another using a trusted module. In one embodiment, the invention includes receiving encrypted streamed content encrypted with a first key, generating a substitution key stream based on the first key and a second key, generating a transposition key stream based on the first and second keys, and simultaneously decrypting and re-encrypting the encrypted streamed content using a combination of the substitution and transposition streams to produce re-encrypted streamed content encrypted with the second key.
Claims14
-27. (canceled)
A method of simultaneously decrypting and re-encrypting encrypted streamed content encrypted with a first key comprising:
- generating a first substitution key stream based on the first key;
- generating a second substitution key stream based on a second key;
- generating a first transposition key stream based on the first key;
- generating a second transposition key stream based on the second key;
- generating the inverse of the first transposition key stream;
- generating a combined substitution key stream from the first and second substitution key streams;
- generating a combined transposition key stream from the first and second transposition key streams;
- performing an exclusive-OR operation on the encrypted streamed content with the combined substitution key stream to produce an intermediate stream;
- and
- shuffling the intermediate stream according to the combined transposition key stream to produce re-encrypted streamed content encrypted with the second key.
A method of simultaneously decrypting and re-encrypting encrypted streamed content encrypted with a first key comprising:
- generating a first substitution key stream based on the first key;
- generating a second substitution key stream based on a second key;
- generating a first transposition key stream based on the first key;
- generating a second transposition key stream based on the second key;
- generating the inverse of the first transposition key stream;
- generating a combined substitution key stream from the first and second substitution key streams;
- generating a combined transposition key stream from the first and second transposition key streams;
- shuffling the encrypted streamed content with the combined transposition key stream to produce an intermediate stream;
- and
- performing an exclusive-OR operation on the intermediate stream with the combined substitution key stream to produce the re-encrypted streamed content.
An article comprising:
- a machine-accessible medium having stored thereon data representing sequences of instructions which, when executed by a machine, cause the machine to perform the operations of simultaneously decrypting and re-encrypting encrypted streamed content encrypted with a first key by generating a first substitution key stream based on the first key;
- generating a second substitution key stream based on a second key;
- generating a first transposition key stream based on the first key;
- generating a second transposition key stream based on the second key;
- generating the inverse of the first transposition key stream;
- generating a combined substitution key stream from the first and second substitution key streams;
- generating a combined transposition key stream from the first and second transposition key streams;
- performing an exclusive-OR operation on the encrypted streamed content with the combined substitution key stream to produce an intermediate stream;
- and
- shuffling the intermediate stream according to the combined transposition key stream to produce re-encrypted streamed content encrypted with the second key.
An article comprising:
- a machine-accessible medium having stored thereon data representing sequences of instructions which, when executed by a machine, cause the machine to perform the operations of simultaneously decrypting and re-encrypting encrypted streamed content encrypted with a first key by generating a first substitution key stream based on the first key;
- generating a second substitution key stream based on a second key;
- generating a first transposition key stream based on the first key;
- generating a second transposition key stream based on the second key;
- generating the inverse of the first transposition key stream;
- generating a combined substitution key stream from the first and second substitution key streams;
- generating a combined transposition key stream from the first and second transposition key streams;
- shuffling the encrypted streamed content with the combined transposition key stream to produce an intermediate stream;
- and
- performing an exclusive-OR operation on the intermediate stream with the combined substitution key stream to produce the re-encrypted streamed content.
-45. (canceled)
Dependencies are inferred from the claim text.