Apparatus for avoiding complementarity in an encryption algorithm
AssigneeGI Corporation
InventorEric Sprunk
Life of this patent
Estimating the term…
Abstract
An implementation of a security algorithm such as DES is provided that overcomes the complementarity weaknesses provided by conventional implementations. In a DES implementation, a cryptographic processor applies the DES algorithm to a data block. The DES processor includes a first input port for receiving the data block, a second input port for receiving a cryptographic key, and an output port for outputting the data block after encryption. A nonlinear function that does not have complementarity is applied to at least one of the ports. The nonlinear function can comprise a lookup table, which could be advantageously derived from a DES S-Box.
Claims18
A method for enhancing the security of a block security algorithm that has a complementarity property,
- said algorithm receiving a data block at a first input, receiving a cryptographic key at a second input, and outputting said data block at an output after processing by said algorithm based on said key,
- said complementarity property causing the output of the algorithm to be inverted if both said data block and said cryptographic key input to the algorithm are inverted, thereby compromising the security of said algorithm,
- comprising the step of:
- applying a nonlinear function to at least one of said first input, said second input and said output, said nonlinear function being applied at a point external to said algorithm to eliminate the effects of said complementarity by precluding an inversion of said data block and key from inverting an output of said algorithm downstream of said nonlinear function.
Dependencies are inferred from the claim text.