Loading patent…
AssigneeInternational Business Machines Corporation
InventorsStephen M. Matyas, Carl H. W. Meyer, Louis B. Tuckerman, III
Estimating the term…
A method and apparatus for providing improved error-recovery and cryptographic strength when enciphering blocks which succeed short blocks in a Key-Controlled Block-Cipher Cryptographic System with chaining. Beginning with a pre-existing current chaining value (V), the system determines whether a current input block (X) of data to be encrypted is a full block or a short block. Both in the previous system and in proposed improvement, if the block is a full block, the system first combines the chaining value (V) with said full block (X) by a reversible operation such as exclusive-or and then block-enciphers the result of said exclusive-or under control of the user's cryptographic key (K) to produce an output cipher full block (Y); but if the block is a short block, of length L.sub.s then the system first block-enciphers the current chaining value (V) under control of the user's key (K), producing a result W, and then combines the short block (X), in a reversible operation, with the left-most portion, of length L.sub.s, of W to produce an output cipher short block (Y), of length L.sub.s. In either case, in the proposed improvement, the system then sets a new chaining value (V') for the system, as being equal to the terminal full block's length of the concatenation of the current chaining value (V) with the produced block of ciphertext (Y), and causes this new chaining value (V') to be the chaining value (V) for the next block. In the case of a short block this gives increased strength to, and speeded error-recovery for, the succeeding block or blocks to be enciphered, over the previous practice, in which the new chaining value was the last-previous output (W) of the block-cipher system.
In a key-controlled block-cipher cryptographic process which includes taking an input data block and cryptographically transforming same into an input data block as a function of a unique user supplied key, initially transforming each new full input data block of length L.sup.(f) by a mathematically invertible function which depends on a preexisting data word which existed during a previous cryptographic transformation and using said initially transformed data block as the input block to said key-controlled cryptographic transformation, the improvement which comprises utilizing as the preexisting data word the immediately preceding cryptographically transformed output data string of length L.sup.(f) resulting from immediately preceding cryptographic transformations regardless of the length of the preceding encrypted data block.
In a block cipher cryptographic system for enciphering blocks of incoming data of a fixed predetermined size L.sup.(f) as a function of a unique user supplied encryption key to produce a cryptographically transformed output block of the same size as the input data block, the improvement which comprises a method for cryptographically transforming short data blocks of length L.sup.(s) being less than said predetermined block size L.sup.(f) to produce an output cryptographically transformed short data block of the same size L.sup.(s) as the input data block, said improved method including recognizing when a short input data block of length L.sup.(s) is encountered, obtaining the immediately preceding cryptographically transformed output data string from the system of length L.sup.(f), cryptographically transforming said output data string of length L.sup.(f), extracting a predetermined portion of said cryptographically transformed data string of length L.sup.(s) and combining said transformed string and data block of length L.sup.(s) in a mathematically invertible function utilizing the output of said combination as the cryptographically transformed short data block, and utilizing the cryptographically transformed data block segment of length L.sup.(s) as the most recent portion of said immediately preceding output data string for use in the next encipherment regardless of the length (L.sup.(f) or L.sup.(s)) of the next input data block to be enciphered.
In a block cipher cryptographic system for encrypting blocks of incoming data of a fixed predetermined size L.sup.(f) as a function of a unique user supplied encryption key to produce a cryptographically transformed output block Y of the same length L.sup.(f) as the input data block, a chaining method for cryptographically transforming short data blocks of length L.sup.(s) being less than said predetermined block size L.sup.(f) to produce an output cryptographically transformed short data block Y.sup.(s) of the same length L.sup.(s) as the input data block, said improved method including recognizing when a short input data block of length L.sup.(s) is encountered, utilizing as the chaining value V for a current encipherment step the last full block's-length L.sup.(f) of the system cipher-text output regardless of the length of previous output blocks Y.sub.i, cryptographically transforming said chaining value, extracting a predetermined portion of said cryptographically transformed chaining value of length L.sup.(s) and combining same with said input short data block in a mathematically invertible function utilizing the output of said combination as the cryptographically transformed short data block, and utilizing the cryptographically transformed data block of length L.sup.(s) as the most recent portion of the chaining value V for use in the next encipherment regardless of the length (L.sup.(f) or L.sup.(s)) of the next input data block to be enciphered.
Dependencies are inferred from the claim text.