Systems and methods for protecting data secrecy and integrity
AssigneeIntertrust Technologies Corporation
InventorW. Olin Sibert
Life of this patent
Estimating the term…
Abstract
A technique for integrating message authentication with encryption and decryption is disclosed. Intermediate internal states of the decryption operation are used to generate a validation code that can be used to detect manipulation of the encrypted data. The technique is optimized with respect to processing time, execution space for code and runtime data, and buffer usage. The technique is generally applicable to a variety of block ciphers, including TEA, Rijndael, DES, RC5, and RC6.
Claims15
A method for processing data in a manner designed to protect the data's secrecy and integrity, the method including:
- encrypting the data;
- generating a first validation code for use in detecting modification to the encrypted data;
- transmitting the encrypted data and the first validation code;
- receiving the encrypted data and the first validation code;
- performing an integrated processing pass on the encrypted data, the integrated processing pass being operable to decrypt the encrypted data and to use at least one internal state of the decryption process to generate a second validation code, the second validation code being operable to detect modification to the encrypted data or to the first validation code.
A method for processing data to protect its secrecy and integrity, the method including:
- encrypting the data;
- generating a first validation code for use in detecting modification to the encrypted data;
- transmitting the encrypted data and the first validation code;
- wherein the encrypted data are configured to be decrypted using an integrated processing pass that is operable to produce decrypted data and to use at least one internal state of the decryption process to generate a second validation code, the second validation code being equal to the first validation code if the encrypted data were not modified before decryption.
Dependencies are inferred from the claim text.