Apparatus and method for encryption

An encryption apparatus comprising:

• a memory including a general domain and a security domain and configured to store a predetermined program in each of the general domain and the security domain;
• a microprocessor configured to perform an encryption process of input data based on the predetermined program;
• and
• an external encoder being separate from the memory and configured to perform a predetermined encoding process,
• wherein the microprocessor performs a method comprising:
• transmitting the input data to the external encoder;
• generating encoding data by encoding the input data through the external encoder using a first encoding process;
• transmitting the encoding data to the security domain;
• generating encryption data by performing encryption for the encoding data using a whitebox encryption module in the security domain;
• transmitting the encryption data to the external encoder;
• generating output data by encoding the encryption data through the external encoder using a second encoding process;
• and
• transmitting the output data to the general domain,
• wherein the output data is stored in the general domain and output to an external device, and
• wherein the security domain is a region within a virtual machine accessed only by applications within the virtual machine, wherein applications within the general domain are allowed access only to data in the general domain which prevents a codelift attacker from accessing and identifying an algorithm performed in the security domain.

An encryption method performed in an encryption apparatus, the encryption apparatus including a memory, the method comprising:

• receiving input data from an external device;
• transmitting the input data to a security domain in the memory;
• generating encoding data by encoding the input data in the security domain using a first encoding process;
• transmitting the encoding data to a general domain in the memory;
• generating encryption data by performing encryption for the encoding data using a whitebox encryption module in the general domain;
• transmitting the encryption data to the security domain;
• generating output data by encoding the encryption data in the security domain using a second encoding process;
• and
• transmitting the output data to the general domain,
• wherein the output data is stored in the general domain and output to an external device, and
• wherein the security domain is a region within a virtual machine accessed only by applications within the virtual machine, wherein applications within the general domain are allowed access only to data in the general domain which prevents a codelift attacker from accessing and identifying an algorithm performed in the security domain.