Data protection method and apparatus

Patent metadata

Field	Value
Publication number	US-9509495-B2
Application number	US-201414455257-A
Country	US
Kind code	B2
Filing date	Aug 8, 2014
Priority date	Aug 8, 2013
Publication date	Nov 29, 2016
Grant date	Nov 29, 2016

Abstract

A data protection method and apparatus that can protect data through encryption using a Boolean function is provided. The data protection method includes applying an inverse affine transformation to data to be encrypted using a Boolean function; applying round operations of an Advanced Encryption Standard (AES) cryptographic algorithm to the inverse-affine transformed data; and producing ciphertext data by applying an affine transformation to the result of the round operations.

First claim

What is claimed is:

1. A method for data protection, the method comprising:
receiving a request to encrypt data using a Boolean function;
applying, by a processor, an inverse affine transformation to the data to be encrypted using a Boolean function;
applying, by the processor, round operations of an Advanced Encryption Standard (AES) cryptographic algorithm to the inverse-affine transformed data; and
producing, by the processor ciphertext data by applying an affine transformation to the result of the round operations,
wherein a storage unit stores data and instructions for performing the steps of applying an inverse affine transformation, applying round operations of an AES cryptographic algorithm, and producing the ciphertext.

2. The method of claim 1 , wherein applying the round operations comprises:
repeating, for a preset number of rounds, an AddRoundKey operation to apply a round key, a SubBytes operation to replace each byte of the state with a corresponding entry, a ShiftRows operation to cyclically shift bytes in each row of the state, and a MixColumns operation to combine specific bytes in each column of the state, and
performing the SubBytes operation, the ShiftRows operation and the AddRoundKey operation in the final round.

3. The method of claim 2 , wherein at least one of the round operations and the inverse affine transformation are combined to form input decoding.

4. The method of claim 3 , wherein the at least one of the round operations combined with the inverse affine transformation comprises the ShiftRows operation.

5. The method of claim 3 , wherein the input decoding is related to a linear transformation and key randomization.

6. The method of claim 5 , wherein a matrix for the linear transformation is composed of multiple sub-matrices and all elements of at least one of the multiple sub-matrices are zeros.

7. The method of claim 6 , wherein two sub-matrices among the multiple sub-matrices have non-zero elements, and all elements in at least one column of one of the two sub-matrices are zero.

8. The method of claim 7 , wherein each sub-matrix has a size of 8×8 and the at least one column is among the latter four columns.

9. The method of claim 1 , further comprising:
decrypting the ciphertext data into plaintext data.

10. An apparatus for data protection, the apparatus comprising:
a non-transitory computer-readable storage medium; and
a processor configured to execute program instructions stored in the non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores program instructions which, when executed by the processor in response to a request to encrypt data using a Boolean function, performs the following steps:
applying an inverse affine transformation to the data to be encrypted using a Boolean function;
applying round operations of an Advanced Encryption Standard (AES) cryptographic algorithm to the inverse-affine transformed data; and
producing ciphertext data by applying an affine transformation to the result of the round operations,

wherein a non-transitory computer-readable storage medium, which may or may not be the same non-transitory computer-readable storage medium which stores the program instructions for performing the steps above, stores data for performing the steps of applying an inverse affine transformation, applying round operations of an AES cryptographic algorithm, and producing the ciphertext.

11. The apparatus of claim 10 , wherein the round operations are applied by repeating, for a preset number of rounds, an AddRoundKey operation to apply a round key, a SubBytes operation to replace each byte of the state with a corresponding entry, a ShiftRows operation to cyclically shift bytes in each row of the state, and a MixColumns operation to combine specific bytes in each column of the state, and performing the SubBytes operation, the ShiftRows operation and the AddRoundKey operation in the final round.

12. The apparatus of claim 11 , wherein at least one of the round operations and the inverse affine transformation are combined to form input decoding.

13. The apparatus of claim 12 , wherein the at least one of the round operations comprises the ShiftRows operation.

14. The apparatus of claim 12 , wherein the input decoding is related to a linear transformation and key randomization.

15. The apparatus of claim 14 , wherein a matrix for the linear transformation is composed of multiple sub-matrices and all elements of at least one of the multiple sub-matrices are zeros.

16. The apparatus of claim 15 , wherein two sub-matrices among the multiple sub-matrices have non-zero elements, and all elements in at least one column of one of the two sub-matrices are zero.

17. The apparatus of claim 16 , wherein each sub-matrix has a size of 8×8 and the at least one column is among the latter four columns.

18. The apparatus of claim 10 , wherein the program instructions, when executed by the processor in response to a request to encrypt data using a Boolean function, also performs the following step:
decrypting the ciphertext data into plaintext data.

19. The apparatus of claim 10 , further comprising:
a wireless communication unit to send and receive the ciphertext data.

Assignees

• Samsung Electronics Co Ltd
• Snu R&Db Foundation
• Samsung Electronics Co Ltd

Inventors

• Lee Kyunghee
• Cheon Junghee
• Kwon Eunyoung
• Kim Bumhan
• Kim Jinsu
• Kim Hongtae
• Ryu Hansol
• Hong Hyunsook

Classifications

• G09C1/00

  Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) · CPC title

• H04L9/0631 Primary

  Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms · CPC title

• H04L2209/12

  Details relating to cryptographic hardware or logic circuitry · CPC title

• G06F21/60 Primary

  Protecting data · CPC title