Data authentication using modification detection codes based on a public one way encryption function

An apparatus for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• means for copying a first one of said data blocks into a first N bit copy and a second N bit copy during a first cycle;
• means for applying said first N bit copy as the data input to a first one way encryption engine, said encryption engine having a key input with a first initial N bit key and said first encryption engine producing an N bit output value during said first cycle;
• means for storing a first field of said first output value in a first output register and storing a second field of said first output value in a second output register during said first cycle;
• means for applying said second N bit copy to the data input of a second one way encryption engine, having a second N bit key applied thereto and outputting a second N bit output value during said first cycle;
• means for storing a first field of said second N bit output in a first field of said second output register and applying a second field of said second N bit output into a second field of said first output register during said first cycle;
• means for copying a second one of said plurality of N bit blocks from said data set and applying the first copy thereof to said data input of said first one way encryption engine during a next cycle and applying said value stored in said first output register as the N bit key to said first key input of said first one way encryption engine, and applying said second copy thereof to said data input of said second encryption engine during said next cycle and applying said value stored in said second output register as the N bit key to said second key input of said second encryption engine, to thereby produce a next first result value in said first output register and a next second result value in said second output register.

In a network including first and second interconnected computer devices with cryptographic capability that are loaded with programs, comprising:

• a first insecure communication channel and a second secure communication channel interconnecting said first and second computer devices;
• a first encoding means in said first computer device, with integrity and depending only on public values coupled to said first and second channels and adapted for transforming information (I) to a first one way encoding function modification detection code (MDC) and for transmitting I on said first insecure communication channel and said first MDC on said second secure channel;
• a second encoding means in said second computer device, with integrally and depending only on public values coupled to said first and second channels and adapted for receiving I from said first insecure channel and said first MDC from said second secure channel and for transforming the received information I to a second one way encoding function MDC via the same one way encoding function at said first encoding means;
• a comparator means in said second computer device for comparing said second MDC calculated from the I received from said first insecure channel with said first MDC received from said second secure channel, and accepting the information I received from said first insecure channel if said first MDC compares with said second MDC;
• means to transfer said accepted information I to a memory.

A method for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• applying a first one of said data blocks as the data input to a one way encryption engine, said encryption engine having a key input with a first N bit key and said encryption engine producing an N bit first output value;
• storing a first field of said first output value in a first portion of a first output register and storing a second field of said first output value in a second portion of a second output register;
• applying a second N bit key to said key input of said one way encryption engine, which operates on said first data block to output a second N bit output value;
• storing a first field of said second N bit output in a first portion of said second output register and storing a second field of said second N bit output into a second portion of said first output register;
• applying a second one of said plurality of N bit blocks to said data input of said one way encryption engine and applying said value stored in said first output register as the N bit key to said key input of said one way encryption engine to produce a next first output value and applying said value stored in said second output register as the N bit key to said second key input of said encryption engine which operates on said second data base to produce a next second output value;
• storing a first field of said next first output value in a first portion of a first output register and storing a second field of said next first output value in a second portion of a second output register;
• storing a first field of said next second N bit output in a first portion of said second output register and storing a second field of said next second N bit output into a second portion of said first output register;
• continuing the operation for all of said plurality of data blocks in said data set until a last first result value is stored in said first output register and a last second result value is stored in said second output register corresponding to the last one of said plurality of data blocks in said data sets;
• combining said last first result value from said first output register and said last second result value from said second output register as a 2N-bit modification detection code which characterizes said data set.

A method for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• performing a one way encryption of a first one of said data blocks using a first key value and outputting a first N bit result;
• performing a one way encryption of said first data block using a second key value and outputting a second N bit result;
• performing a one way encryption of said second key value using said first result as a key value and outputting a third N bit result;
• performing a one way encryption of said first key value using said second result as a key value and outputting a fourth N bit result;
• feeding back said third N bit result as a next first key value and feeding back said fourth N bit result as a next second key value;
• repeating the above steps until the last one of said plurality of data blocks has been so processed to produce a last third N bit result and a last fourth N bit result;
• combining said last third result and said last fourth result as a 2N-bit modification detection code which characterizes said data set.

A method for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• performing a one way encryption of a first one of said data blocks using a first key value and outputting a first N bit result;
• performing a one way encryption of said first data block using a second key value and outputting a second N bit result;
• forming a next first key value from a first field of said first N bit result and a second field from said second N bit result;
• forming a next second key value from a first field of said second N bit result and from a second field of said first N bit result;
• performing a one way encryption of a second one of said data blocks using said next first key value and outputting a next first N bit result;
• performing a one way encryption of said second data block using said next second key value and outputting a next second N bit result;
• repeating the above steps until the last one of said plurality of N bit data blocks has been thereby processed producing a last first N bit result and a last second N bit result;
• forming a 2N-bit modification detection code from said last first N bit result and said last second N bit result;
• whereby said plurality of N bit blocks of data can be characterized.

A method for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• performing a one way encryption of a first one of said data blocks using a first key value and outputting a first N bit result;
• performing a one way encryption of said first data block using a second key value and outputting a second N bit result;
• forming a 2N-bit output value from said first N bit result and said second N bit result;
• masking said output value to form a next first key value and performing a one way encryption of a next one of said data blocks using said next first key value and outputting a next first N bit result;
• masking said output value to form a next second key value and performing a one way encryption of said next one of said data blocks using said next second key value and outputting a next second N bit result;
• repeating the above steps until the last one of said plurality of N bit blocks of data has been processed thereby, producing a last first N bit result and a last second N bit result;
• forming a 2N-bit modification detection code from said last first N bit result and said last second N bit result;
• whereby said plurality of N bit blocks of data are characterized.

A method for generating a 2N-bit modification detection code which characterizes a data set consisting of a plurality of N bit blocks of data, comprising the steps of:

• forming an initial 2N-bit first key value by masking the combination of a first initial N bit value with a second initial N bit value;
• forming an initial 2N-bit second key value by masking the combination of said first initial N bit value with said second initial N bit value;
• performing a one way encryption of a first one of said data blocks using said first key value and outputting a first N bit result;
• performing a one way encryption of said first data block using said second key value and outputting a second N bit result;
• forming a 2N-bit intermediate value from said first N bit result and said second N bit result;
• masking said intermediate value to form a third key value and performing a one way encryption of said second initial N bit value using said third key value and outputting a third N bit result which is stored in a first register;
• masking said intermediate value to form a fourth key value and performing a one way encryption of said first initial N bit value using said fourth key value and outputting a fourth N bit result which is stored in a second register;
• forming a 2N-bit output value from the contents of said first register and said second register;
• masking said output value to form a next first key value and performing a one way encryption of a next one of said data blocks using said next first key value and outputting a next first N bit result;
• masking said output value to form a next second key value and performing a one way encryption of said next one of said data blocks using said next second key value and outputting a next second N bit result;
• forming a next 2N-bit intermediate value from said next first N bit result and said next second N bit result;
• masking said next intermediate value to form a next third key value and performing a one way encryption of the contents of said second register using said next third key value and outputting a next third N bit result;
• masking said next intermediate value to form a next fourth key value and performing a one way encryption of the contents of said first register using said next fourth key value and outputting a next fourth N bit result;
• storing said next third N bit result in said first register and storing said next fourth N bit result in said second register;
• forming a next 2N-bit output value from the contents of said first register and the contents of said second register;
• repeating the above steps until the last one of said plurality of N bit blocks of data has been processed thereby, producing a last 2N-bit output value;
• outputting said last 2N-bit output value as a 2N-bit modification detection code;
• whereby said plurality of N bit blocks of data are characterized.

A method for enabling a data set to be authenticated by a receiving computer device, comprising the steps of:

• a. entering a precalculated code into the computer device via a secure entry port accessible only to an authorized security officer;
• b. storing the entered code;
• c. loading a data set into the computer device from an external medium via an insecure channel interface;
• d. calculating a modification detection code (MDC) on the loaded data set using a one way encoded function depending only on nonsecret information;
• e. comparing, for equality, the calculated MDC and the precalculated code stored at step b;
• f. marking the data set valid if the comparison at step e shows equality, or marking the data set not valid if the comparison at step e shows no equality.