SECURE HANDLING OF MEMORY CACHES AND CACHED SOFTWARE MODULE IDENTITIES FOR A METHOD TO ISOLATE SOFTWARE MODULES BY MEANS OF CONTROLLED ENCRYPTION KEY MANAGEMENT
    31.
    发明申请
    SECURE HANDLING OF MEMORY CACHES AND CACHED SOFTWARE MODULE IDENTITIES FOR A METHOD TO ISOLATE SOFTWARE MODULES BY MEANS OF CONTROLLED ENCRYPTION KEY MANAGEMENT 审中-公开
    通过控制加密方式分离软件模块的方法来安全地处理内存缓存和缓存软件模块标识

    公开(公告)号:US20170010982A1

    公开(公告)日:2017-01-12

    申请号:US15070947

    申请日:2016-03-15

    Abstract: In an aspect, a cache memory device receives a request to read an instruction or data associated with a memory device. The request includes a first realm identifier and a realm indicator bit, where the first realm identifier enables identification of a realm that includes one or more selected regions in the memory device. The cache memory device determines whether the first realm identifier matches a second realm identifier in a cache tag when the instruction or data is stored in the cache memory device, where the instruction or data stored in the cache memory device has been decrypted based on an ephemeral encryption key associated with the second realm identifier when the first realm identifier indicates the realm and when the realm indicator bit is enabled. The cache memory device transmits the instruction or data when the first realm identifier matches the second realm identifier.

    Abstract translation: 在一方面,高速缓冲存储器设备接收读取与存储器设备相关联的指令或数据的请求。 该请求包括第一领域标识符和领域指示符位,其中第一领域标识符使得能够识别包括存储器设备中的一个或多个所选区域的领域。 当指令或数据存储在高速缓冲存储器件中时,高速缓存存储器件确定第一区标识符是否与高速缓存标签中的第二区标识符匹配,其中存储在高速缓冲存储器件中的指令或数据已经基于短暂的解密 当第一领域标识符指示领域以及当领域指示符位被启用时与第二领域标识符相关联的加密密钥。 当第一领域标识符与第二领域标识符匹配时,高速缓冲存储器设备发送指令或数据。

    METHODS AND DEVICES FOR FIXED EXECUTION FLOW MULTIPLIER RECODING AND SCALAR MULTIPLICATION
    32.
    发明申请
    METHODS AND DEVICES FOR FIXED EXECUTION FLOW MULTIPLIER RECODING AND SCALAR MULTIPLICATION 有权
    用于固定执行流程多路复用器和标量多项式的方法和设备

    公开(公告)号:US20160330020A1

    公开(公告)日:2016-11-10

    申请号:US14705686

    申请日:2015-05-06

    CPC classification number: H04L9/0693 G06F7/4812 H04L9/003 H04L9/004 H04L9/3066

    Abstract: One feature pertains to an electronic device that includes a memory circuit and a processing circuit. The processing circuit computes a scalar multiplication output Z where Z=k·P by receiving an input multiplier k and a base P, and adds a modifier s to the input multiplier k to generate k′. The processing circuit also computes an intermediate scalar multiplication output Z′ where Z′=k′·P by using a digit expansion of k′ that includes a sequence of digits ki belonging to a digit set D. Additionally, the processing circuit subtracts s·P from Z′ to obtain the scalar multiplication output Z if k′ is odd or subtracts (s+1)·P from Z′ to obtain the scalar multiplication output Z if k′ is even. The scalar multiplier output Z may be used in a cryptographic security algorithm to secure data.

    Abstract translation: 一个特征涉及包括存储器电路和处理电路的电子设备。 处理电路通过接收输入乘法器k和基数P来计算标量乘法输出Z,其中Z = k·P,并将修正符s加到输入乘法器k以产生k'。 处理电路还通过使用包括属于数字集D的数位ki的序列的k'的数字展开来计算Z'= k'·P的中间标量乘法输出Z'。另外,处理电路减去s· P从Z'获得标量乘法输出Z,如果k'为奇数,则从Z'中减去(s + 1)·P,以获得如果k'为偶数的标量乘法输出Z。 标量乘法器输出Z可用于加密安全算法中以保护数据。

    APPARATUS AND METHOD FOR PROVIDING A PUBLIC KEY FOR AUTHENTICATING AN INTEGRATED CIRCUIT
    33.
    发明申请
    APPARATUS AND METHOD FOR PROVIDING A PUBLIC KEY FOR AUTHENTICATING AN INTEGRATED CIRCUIT 有权
    提供用于认证集成电路的公钥的装置和方法

    公开(公告)号:US20160261565A1

    公开(公告)日:2016-09-08

    申请号:US14640687

    申请日:2015-03-06

    Abstract: Disclosed is a method for providing a public key for authenticating an integrated circuit. In the method, the integrated circuit obtains a hardware key and an integrated circuit identifier. The integrated circuit generates a derived key based on the hardware key using a key derivation function (KDF) shared with a manufacturing machine. The integrated circuit generates a private key and a corresponding public key using the derived key as an input to a deterministic function. The integrated circuit then provides the public key and the integrated circuit identifier to a partner service for authentication of the integrated circuit using an anonymized credential database to be provided to the partner service by a manufacturer.

    Abstract translation: 公开了一种用于提供用于认证集成电路的公钥的方法。 在该方法中,集成电路获得硬件密钥和集成电路标识符。 集成电路使用与制造机器共享的密钥导出功能(KDF),基于硬件密钥生成派生密钥。 集成电路使用派生密钥作为确定性函数的输入生成私钥和相应的公钥。 然后,集成电路将公钥和集成电路标识符提供给合作伙伴服务,以便使用由制造商提供给合作伙伴服务的匿名凭证数据库来对集成电路进行认证。

    Method and apparatus to encrypt plaintext data
    34.
    发明授权
    Method and apparatus to encrypt plaintext data 有权
    明文数据加密的方法和装置

    公开(公告)号:US09294266B2

    公开(公告)日:2016-03-22

    申请号:US13929589

    申请日:2013-06-27

    Inventor: Roberto Avanzi

    CPC classification number: H04L9/0618 H04L2209/08 H04L2209/34

    Abstract: Disclosed is an apparatus and method for encrypting plaintext data. The method includes: receiving at least one plaintext data input; applying a Nonce through a function to the at least one plaintext data input to create Nonced plaintext data outputs and/or to intermediate values of a portion of an encryption function applied to the at least one plaintext data input to create intermediate Nonced data outputs; and applying the encryption function to at least one of the Nonced plaintext data outputs and/or the intermediate Nonced data outputs to create encrypted output data. The encrypted output data is then transmitted to memory.

    Abstract translation: 公开了一种用于加密明文数据的装置和方法。 该方法包括:接收至少一个明文数据输入; 将至少一个明文数据输入应用于所述至少一个明文数据输入,以产生未加密明文数据输出和/或应用于所述至少一个明文数据输入的加密函数的一部分的中间值,以创建中间非数据输出; 以及将所述加密函数应用于所述无源明文数据输出和/或所述中间非数据输出中的至少一个以创建加密的输出数据。 然后将加密的输出数据发送到存储器。

    MASTER KEY ENCRYPTION FUNCTIONS FOR TRANSMITTER-RECEIVER PAIRING AS A COUNTERMEASURE TO THWART KEY RECOVERY ATTACKS
    35.
    发明申请
    MASTER KEY ENCRYPTION FUNCTIONS FOR TRANSMITTER-RECEIVER PAIRING AS A COUNTERMEASURE TO THWART KEY RECOVERY ATTACKS 有权
    用于发射机接收机配对的主要加密功能作为重要恢复攻击的对策

    公开(公告)号:US20140270166A1

    公开(公告)日:2014-09-18

    申请号:US13830598

    申请日:2013-03-14

    CPC classification number: H04L9/0825 H04L9/0822 H04L2209/60 H04L2209/76

    Abstract: A method operational on a receiver device for exchanging and/or generating security keys is provided. A first encrypted master key Km is received at the receiver device from a transmitter device, the first encrypted master key Km secured by a receiver public key Kpub-rx. The first encrypted master key Km may be decrypted with a receiver private key Kpri-rx to obtain the master key Km. The master key Km may be encrypted using a block cipher that applies a receiver secret key Kh to obtain a second encrypted master key.

    Abstract translation: 提供了一种在用于交换和/或生成安全密钥的接收机设备上操作的方法。 第一加密主密钥Km在接收机设备处从发射机设备接收,第一加密主密钥Km由接收方公钥Kpub-rx确保。 第一加密主密钥Km可以用接收方私钥Kpri-rx解密,以获得主密钥Km。 可以使用应用接收机秘密密钥Kh的块密码来加密主密钥Km,以获得第二加密主密钥。

    LINEAR FEEDBACK SHIFT REGISTER (LFSR)
    36.
    发明申请
    LINEAR FEEDBACK SHIFT REGISTER (LFSR) 有权
    线性反馈移位寄存器(LFSR)

    公开(公告)号:US20140258721A1

    公开(公告)日:2014-09-11

    申请号:US13793710

    申请日:2013-03-11

    CPC classification number: H04W12/06 G06F7/584 H04L9/0668 H04L2209/122

    Abstract: A wireless communication device is described. The wireless communication device includes a linear feedback shift register. The linear feedback shift register is initialized. The linear feedback shift register is a word based odd characteristic linear feedback shift register. The linear feedback shift register includes multiple 64-bit registers. A feedback function output is generated using the 64-bit registers. The feedback function output is placed into a highest register of the linear feedback shift register.

    Abstract translation: 描述无线通信设备。 无线通信装置包括线性反馈移位寄存器。 线性反馈移位寄存器被初始化。 线性反馈移位寄存器是一个基于字的奇特征线性反馈移位寄存器。 线性反馈移位寄存器包含多个64位寄存器。 使用64位寄存器生成反馈功能输出。 反馈功能输出置于线性反馈移位寄存器的最高寄存器中。

Patent Agency Ranking