Implementing use-dependent security settings in a single white-box implementation
AssigneeNXP B.V.
InventorsWil Michiels, Jan Hoogerbrugge
Life of this patent
Estimating the term…
Abstract
A method of enforcing security settings in a cryptographic system, including: receiving, by the cryptographic system, a first input message associated with a first security setting of a plurality of security settings; performing, by the cryptographic system, a keyed cryptographic operation mapping the first input message into a first output message, wherein the keyed cryptographic operation produces a correct output message when the cryptographic system is authorized for the first security setting, wherein each of the plurality of security settings has an associated set of input messages wherein the sets of input messages do not overlap.
Claims39
A non-transitory machine-readable storage medium encoded with instructions for execution by a cryptographic system for enforcing security settings, the non-transitory machine-readable storage medium comprising:
- instructions for receiving, by the cryptographic system, a first input message associated with a first security setting of a plurality of security settings;
- instructions for performing, by the cryptographic system, a keyed cryptographic operation mapping the first input message into a first output message, wherein the keyed cryptographic operation produces a correct output message when the cryptographic system is authorized for the first security setting,
- wherein each of the plurality of security settings has an associated set of input messages wherein the sets of input messages do not overlap.
A method of producing a cryptographic implementation of a cryptographic operation mapping an input message to an output message, wherein the cryptographic implementation enforces security settings, comprising:
- producing a cryptographic implementation of the cryptographic operation;
- receiving information identifying the security settings to be applied by the cryptographic implementation, wherein each identified security setting has an associated set of input messages wherein the sets of input messages do not overlap;
- modifying the cryptographic implementation based upon the received information identifying the security settings so that:
- when a received input message is associated with one of the received security settings, the cryptographic implementation outputs a correct output message associated with the received input message.
A method of enforcing security settings in a cryptographic system, comprising:
- receiving, by the cryptographic system, a first input message associated with a first security setting of a plurality of security settings;
- performing, by the cryptographic system, a keyed cryptographic operation mapping the first input message into a first output message, wherein the keyed cryptographic operation produces a correct output message when the cryptographic system is authorized for the first security setting,
- wherein each of the plurality of security settings has an associated set of input messages wherein the sets of input messages do not overlap.
Dependencies are inferred from the claim text.