Decryption circuit, communications apparatus, and communications system

Patent metadata

Field	Value
Publication number	US-2016373443-A1
Application number	US-201615184180-A
Country	US
Kind code	A1
Filing date	Jun 16, 2016
Priority date	Jun 18, 2015
Publication date	Dec 22, 2016
Grant date	—

Abstract

A decryption circuit includes a decryption circuitry configured to decrypt encrypted data in each encrypted unit block to acquire a decryption result, and an authentication circuitry configured to authenticate the encrypted data, using the decryption results, in parallel with decrypting the encrypted data in each encrypted unit block by the decryption circuitry until the decryption results amount to a first size of the encrypted data. The encrypted data has a first area and a second area, the first area and the second area are added to calculate the first size of the encrypted data. The first area of the encrypted data is definitely included in a field of the encrypted data to be used for authentication, and the second area of the encrypted data possibly includes data of the field of the encrypted data to be used for authentication.

First claim

What is claimed is:

1 . A decryption circuit comprising:
a decryption circuitry configured to decrypt encrypted data in each encrypted unit block to acquire a decryption result; and an authentication circuitry configured to authenticate the encrypted data, using the decryption results, in parallel with decrypting the encrypted data in each encrypted unit block by the decryption circuitry until the decryption results amount to a first size of the encrypted data, wherein the encrypted data has a first area and a second area, the first area and the second area are added to calculate the first size of the encrypted data, and wherein the first area of the encrypted data is definitely included in a field of the encrypted data to be used for authentication, and the second area of the encrypted data possibly includes data of the field of the encrypted data to be used for authentication.

2 . The decryption circuit according to claim 1 ,
wherein a size of a field that indicates a padding length, a size of a field that indicates an authentication code, and a size of each encrypted unit block are subtracted from an entire size of the encrypted data to calculate the first size.

3 . The decryption circuit according to claim 2 ,
wherein the authentication circuitry is further configured to authenticate the encrypted data using the decryption results corresponding to a remainder of the field of the encrypted data to be used for authentication left after using the first size of the encrypted data for authentication after decrypting the entire size of the encrypted data by the decryption circuitry, if decryption of the field that indicates the padding length by the decryption circuitry indicates that the padding length is less than the size of each encrypted unit block.

4 . The decryption circuit according to claim 2 , further comprising
an intermediate value storage circuitry configured to store an authentication result as an intermediate value until the decryption results amount to a second size, wherein the size of the field that indicates the padding length, the size of the field that indicates the authentication code, and the maximum padding length are subtracted from the entire size of the encrypted data to calculate the second size.

5 . The decryption circuit according to claim 4 ,
wherein the authentication circuitry is further configured to authenticate the encrypted data using the intermediate value after decrypting the entire size of the encrypted data by the decryption circuitry, if decryption of the field that indicates the padding length by the decryption circuitry indicates that the padding length is longer than or equal to the size of each encrypted unit block.

6 . The decryption circuit according to claim 4 ,
wherein the authentication circuitry is further configured to include:
a selector configured to select one of the intermediate value and an initial value for authentication; and
an authentication module circuit configured to authenticate the encrypted data using the value selected by the selector.

7 . The decryption circuit according to claim 4 , further comprising
a buffer circuitry configured to buffer the decryption results corresponding to an end of the first size of the encrypted data for the maximum padding length, wherein the authentication circuitry is further configured to authenticate the encrypted data using the intermediate value and the data buffered by the buffer circuitry after decrypting the entire size of the encrypted data by the decryption circuitry, if decryption of the field that indicates the padding length by the decryption circuitry indicate that the padding length is longer than the size of each encrypted unit block.

8 . The decryption circuit according to claim 1 ,
wherein the decryption circuitry is further configured to receive only the encrypted data having the padding length less than or equal to the size of each encrypted unit block.

9 . The decryption circuit according to claim 4 ,
wherein the maximum padding length is 255 bytes.

10 . The decryption circuit according to claim 1 ,
wherein the size of each encrypted unit block is 16 bytes.

11 . A communications apparatus comprising:
the decryption circuit claimed in claim 1 ; a communications interface; and a controller configured to start the decryption circuit in response to reception of the encrypted data via the communications interface.

12 . A communications system comprising:
the communications apparatus claimed in claim 11 ; and a second communications apparatus that transmits the encrypted data.

Assignees

• Namiki Hitoshi
• Morita Naoya
• Ricoh Co Ltd

Inventors

• Namiki Hitoshi
• Morita Naoya

Classifications

• H04L63/126 Primary

  the source of the received data · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/0464

  using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it · CPC title

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0869

  for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273) · CPC title