Method and apparatus for data encryption
AssigneeXerox Corporation
InventorRalph C. Merkle
Life of this patent
Estimating the term…
Abstract
A method and apparatus for encrypting and decrypting data which operates efficiently on computers of differing architectures is disclosed. Unlike previous encryption/decryption method and apparatus, the present invention executes efficiently in the computer's software. The method uses part of the data input to access a table of pseudo-random numbers. The pseudo-random numbers are exclusively ORed (XORed) with the remaining part of the data input. The output from the XOR operation is then used to access the table where the other portion of the data is in turn XORed with the pseudo random numbers. This iterative process continues until the data is fully randomized. Several variations of this method are presented.
Claims27
A method for encrypting binary data, the binary data comprising 64-bit data blocks, the method comprising the steps of:
- splitting the 64-bit data block into a left 32-bit block and a right 32-bit block;
- using the left 32-bit block to access and retrieve a 32-bit number from a table containing 32-bit numbers, the table having been computed prior to the splitting step;
- exclusive-ORing the right 32-bit block with the 32-bit number obtained from the table;
- rotating the left 32-bit block according to a predefined rotation schedule;
- relabelling the rotated left 32-bit data block as the right 32-bit data block and relabelling the product of the exclusive-OR operation as the left 32-bit data block;
- and
- repeating the using, exclusive-ORing, rotating and relabelling steps until the binary data appears to be a random number.
A method for encrypting binary data, the binary data comprising 64-bit data blocks, the method comprising the steps of:
- splitting the 64-bit data block into a left 32-bit block and a right 32-bit block;
- using the left 32-bit block to access and retrieve a 32-bit number from a table containing 256 32-bit numbers;
- exclusive-ORing the right 32-bit block with the 32-bit number obtained from the table;
- rotating the left 32-bit block according to a predefined rotation schedule;
- relabelling the rotated left 32-bit data block as the right 32-bit data block and relabelling the product of the exclusive-OR operation as the left 32-bit data block;
- and
- repeating the using, exclusive-ORing, rotating said relabelling steps until the binary data appears to be a random number.
A method for encrypting data, the data comprising 64-bit data blocks, the method comprising the steps of:
- calculating, prior to the start of data encryption, a standard table of pseudo-random permutations;
- selecting a user-defined key;
- first exclusive-ORing of the 64-bit data block with the key;
- splitting the product of the first exclusive-ORing into a left and right 32-bit half;
- using the left 32-bit half as an index to access the standard table and retrieve a 32-bit pseudo-random number;
- second exclusive-ORing the right 32-bit half with the 32-bit pseudo-random number;
- relabelling the product of the second exclusive-ORing of the right half and the 32-bit pseudo-random number as the left 32-bit half;
- rotating the left 32-bit half according to a predefined schedule;
- relabelling the left 32-bit half as the right 32-bit half after the rotation;
- first repeating the steps of using, second exclusive-ORing, relabelling, rotating and relabelling a predefined number of times;
- and
- repeating the first exclusive-ORing step prior to the first repeating step every eighth time the first repeating step is performed.
A method for encrypting binary data, the binary data comprising 64-bit data blocks, the method comprising the steps of:
- splitting the 64-bit data block into a left 32-bit block and a right 32-bit block;
- using the left 32-bit block to access and retrieve a 32-bit number from a table containing 32-bit numbers, the table being computed using a user-supplied key;
- exclusive-ORing the right 32-bit block with the 32-bit number obtained from the table;
- rotating the left 32-bit block according to a predefined rotation schedule;
- relabelling the rotated left 32-bit data block as the right 32-bit data block and relabelling the product of the exclusive-OR operation as the left 32-bit data block;
- and
- repeating the using;
- exclusive-ORing, rotating and relabelling steps until the binary data appears to be a random number.
A method for encrypting binary data, the binary data comprising N-bit data blocks, the method comprising the steps of:
- splitting the N-bit data block into a left N/2-bit block and a right N/2-bit block;
- using the left N/2-bit block to access and retrieve a N/2-bit number from a table containing N/2-bit numbers, the table having been computed prior to the splitting step;
- exclusive OR-ing the right N/2-bit block with the N/2-bit number obtained from the table;
- rotating the left N/2-bit block according to a predefined rotation schedule;
- relabelling the rotated left N/2-bit data block as the right N/2-bit data block and relabelling the product of the exclusive-OR operation as the left N/2-bit data block;
- and
- repeating the using, exclusive-ORing, rotating and relabelling steps until the binary data appears to be a random number.
A method for encrypting binary data, the binary data comprising 64-bit data blocks, the method comprising the steps of:
- splitting the 64-bit data block into a left 32-bit block and a right 32-bit block;
- using the left 32-bit block to access and retrieve a 32-bit number from a table containing 32-bit numbers, the table having been computed prior to the splitting step;
- reversibly mixing the right 32-bit block with the 32-bit number obtained from the table;
- rotating the left 32-bit block according to a predefined rotation schedule;
- relabelling the rotated left 32-bit data block as the right 32-bit data block and relabelling the product of the mixing operation as the left 32-bit data block;
- and
- repeating the using, mixing, rotating and relabelling steps until the binary data appears to be a random number.
Dependencies are inferred from the claim text.