公开(公告)号：US20080232581A1

公开(公告)日：2008-09-25

申请号：US11725985

申请日：2007-03-19

Applicant: Reouven Elbaz ,  Joan Daemen ,  Guido Bertoni

Inventor： Reouven Elbaz ,  Joan Daemen ,  Guido Bertoni

IPC: H04L9/00

CPC classification number: H04L9/065 ,  H04L9/002 ,  H04L2209/122 ,  H04L2209/125

Abstract: A method and device for encrypting and/or decrypting binary data blocks protecting both confidentiality and integrity of data sent to or received from a memory. The encryption method comprises steps of: applying to the input data block a reversible scrambling process, the scrambling process providing a scrambled data block in which the bits of the input data block are mixed so that a modification of one bit in the scrambled data block impacts on every bit of the input data block, and applying to the scrambled data block a stream cipher encryption algorithm providing an encrypted data block. Application can be made to secured integrated circuits requiring to securely store data in an external memory.

Abstract translation: 一种用于加密和/或解密二进制数据块的方法和装置，其保护发送到或从存储器接收的数据的机密性和完整性。 加密方法包括以下步骤：向输入数据块应用可逆加扰处理，该加扰处理提供加扰数据块，其中输入数据块的比特被混合，使得加扰数据块中的一比特的修改影响 在输入数据块的每一位上，并向加扰数据块应用提供加密数据块的流密码加密算法。 可以应用于需要将数据安全地存储在外部存储器中的安全集成电路。

公开(公告)号：US08000467B2

公开(公告)日：2011-08-16

申请号：US11725985

申请日：2007-03-19

Applicant: Reouven Elbaz ,  Joan Daemen ,  Guido Bertoni

Inventor： Reouven Elbaz ,  Joan Daemen ,  Guido Bertoni

IPC: H04K1/00

CPC classification number: H04L9/065 ,  H04L9/002 ,  H04L2209/122 ,  H04L2209/125

Abstract: A method and device for encrypting and/or decrypting binary data blocks protecting both confidentiality and integrity of data sent to or received from a memory. The encryption method comprises steps of: applying to the input data block a reversible scrambling process, the scrambling process providing a scrambled data block in which the bits of the input data block are mixed so that a modification of one bit in the scrambled data block impacts on every bit of the input data block, and applying to the scrambled data block a stream cipher encryption algorithm providing an encrypted data block. Application can be made to secured integrated circuits requiring to securely store data in an external memory.

Abstract translation: 一种用于加密和/或解密二进制数据块的方法和装置，其保护发送到或从存储器接收的数据的机密性和完整性。 加密方法包括以下步骤：向输入数据块应用可逆加扰处理，该加扰处理提供加扰数据块，其中输入数据块的比特被混合，使得加扰数据块中的一比特的修改影响 在输入数据块的每一位上，并向加扰数据块应用提供加密数据块的流密码加密算法。 可以应用于需要将数据安全地存储在外部存储器中的安全集成电路。

公开(公告)号：US20060008084A1

公开(公告)日：2006-01-12

申请号：US11175978

申请日：2005-07-06

Applicant: Joan Daemen ,  Gilles Van Assche ,  Guido Bertoni

Inventor： Joan Daemen ,  Gilles Van Assche ,  Guido Bertoni

IPC: H04K1/00

CPC classification number: G06F21/85 ,  G06F12/1408 ,  G06F21/6209 ,  G06F2221/2107 ,  H04L9/0618 ,  H04L2209/12

Abstract: A method and an element for ciphering with an integrated processor data to be stored in a memory, including applying to each data block to be ciphered a ciphering algorithm which is a function of at least one key specific to the integrated circuit, and before applying the ciphering algorithm thereto, combining the data block to be ciphered with the result of a function of the storage address of the ciphered block in the memory, and/or of combining the key with the result of a function of the storage address of the ciphered block in the memory and of a digital quantity different from the ciphering key.

Abstract translation: 一种用于使用要存储在存储器中的集成处理器数据进行加密的方法和元件，包括应用到要加密的每个数据块，加密算法，其是集成电路特有的至少一个密钥的函数，并且在应用 将加密的数据块与存储器中的加密块的存储地址的功能的结果组合，和/或将密钥与加密块的存储地址的功能的结果组合 在存储器中和与加密密钥不同的数字量。

公开(公告)号：US20120284533A1

公开(公告)日：2012-11-08

申请号：US13461473

申请日：2012-05-01

Applicant: Gilles Van Assche ,  Joan Daemen ,  Guido Bertoni

Inventor： Gilles Van Assche ,  Joan Daemen ,  Guido Bertoni

IPC: G06F21/00

CPC classification number: H04L9/002 ,  H04L9/004 ,  H04L9/06 ,  H04L2209/12

Abstract: A method of performing a cryptographic operation including: receiving a plurality of binary input values; splitting the binary input values into a plurality of non-binary digits of base r, where r is an integer greater than 2 and not equal to a power of 2; and performing, by a cryptographic block on each of the plurality of non-binary digits, a different modulo r operation to generate at least one output digit) of base r.

Abstract translation: 一种执行密码操作的方法，包括：接收多个二进制输入值; 将二进制输入值分解成基本r的多个非二进制数字，其中r是大于2且不等于2的幂的整数; 并且通过所述多个非二进制数字中的每一个上的密码块执行不同的模r操作以生成基本r的至少一个输出数字）。

公开(公告)号：US09485087B2

公开(公告)日：2016-11-01

申请号：US13461473

申请日：2012-05-01

Applicant: Gilles Van Assche ,  Joan Daemen ,  Guido Bertoni

Inventor： Gilles Van Assche ,  Joan Daemen ,  Guido Bertoni

IPC: H04L29/06 ,  H04L9/00 ,  H04L9/06

CPC classification number: H04L9/002 ,  H04L9/004 ,  H04L9/06 ,  H04L2209/12

Abstract: A method of performing a cryptographic operation including: receiving a plurality of binary input values; splitting the binary input values into a plurality of non-binary digits of base r, where r is an integer greater than 2 and not equal to a power of 2; and performing, by a cryptographic block on each of the plurality of non-binary digits, a different modulo r operation to generate at least one output digit) of base r.

Abstract translation: 一种执行密码操作的方法，包括：接收多个二进制输入值; 将二进制输入值分解成基本r的多个非二进制数字，其中r是大于2且不等于2的幂的整数; 并且通过所述多个非二进制数字中的每一个上的密码块执行不同的模r操作以生成基本r的至少一个输出数字）。

公开(公告)号：US20120033806A1

公开(公告)日：2012-02-09

申请号：US13196568

申请日：2011-08-02

Applicant: Guido Bertoni ,  Fabio Sozzani

Inventor： Guido Bertoni ,  Fabio Sozzani

IPC: H04L9/18

CPC classification number: H04L9/0662 ,  H04L2209/125

Abstract: The disclosure relates to a method of encrypting or of decrypting a binary data stream by generating a binary encryption stream and combining by a reversible logic operation each bit of the binary data stream with a bit of the binary encryption stream, the generation of the binary encryption stream including generating an input block by applying a cryptographic function using a secret key to a data block, and generating the binary encryption stream from the input block by combining the bits of the input block with each other by logic operations in a manner so as to prevent the input block from being determined from the binary encryption stream.

Abstract translation: 本公开涉及一种通过生成二进制加密流并通过可逆逻辑运算将二进制数据流的每一位与二进制加密流的位组合，二进制加密的生成来加密或解密二进制数据流的方法 流，包括通过使用秘密密钥将加密功能应用于数据块来生成输入块，以及通过逻辑运算将输入块的比特相互组合来生成来自输入块的二进制加密流，以便 防止从二进制加密流确定输入块。

公开(公告)号：US07206410B2

公开(公告)日：2007-04-17

申请号：US09974176

申请日：2001-10-10

Applicant: Guido Bertoni ,  Luca Breveglieri ,  Pasqualina Fragneto

Inventor： Guido Bertoni ,  Luca Breveglieri ,  Pasqualina Fragneto

IPC: G06F7/00

CPC classification number: G06F7/724

Abstract: A circuit for computing the inner of scalar product of two vectors in a finite Galois field defined by a generator polynomial, wherein each vector includes at least two elements belonging to said finite field, comprises one or more look-up tables storing digital words indicative of said possible combinations and said possible reductions. The digital words in question are defined as a function of the second elements of said vectors and the generator polynomial of the field. The input register(s) and the look-up table(s) are configured to co-operate in a plurality of subsequent steps to generate at each step a partial product result identified by at least one of digital word addressed in a corresponding look-up table as a function of the digital signals stored in the input register(s). The circuit also includes an accumulator unit for adding up the partial results generated at each step to give a final product result deriving from accumulation of said partial results.

Abstract translation: 一种用于计算由生成多项式定义的有限伽罗瓦域中的两个向量的标量积的内部的电路，其中每个向量包括属于所述有限域的至少两个元素，包括一个或多个查找表，其存储指示 说可能的组合和所述可能的减少。 所讨论的数字词被定义为所述向量的第二元素和场的生成多项式的函数。 输入寄存器和查找表被配置为在多个后续步骤中协作以在每个步骤处生成由相应查找表中寻址的数字字中的至少一个标识的部分乘积结果， 作为存储在输入寄存器中的数字信号的函数。 该电路还包括用于将在每个步骤产生的部分结果相加以产生从所述部分结果的积累得到的最终产品结果的累加器单元。

公开(公告)号：USRE44594E1

公开(公告)日：2013-11-12

申请号：US13456457

申请日：2012-05-29

Applicant: Marco Macchetti ,  Stefano Marchesin ,  Umberto Bondi ,  Luca Breveglieri ,  Guido Bertoni ,  Pasqualina Fragneto

Inventor： Marco Macchetti ,  Stefano Marchesin ,  Umberto Bondi ,  Luca Breveglieri ,  Guido Bertoni ,  Pasqualina Fragneto

IPC: H04L9/00

CPC classification number: H04L9/0631 ,  H04L2209/12 ,  H04L2209/24

Abstract: Data are converted between an unencrypted and an encrypted format according to the Rijndael algorithm, including a plurality of rounds. Each round is comprised of a fixed set of transformations applied to a two-dimensional array, designating states, of rows and columns of bit words. At least a part of the transformations are applied on a transposed version of the state, wherein rows and columns are transposed for the columns and rows, respectively.

Abstract translation: 根据Rijndael算法，包括多个轮次，数据在未加密格式和加密格式之间进行转换。 每一轮由应用于二维阵列的一组固定变换组成，指定位字的行和列的状态。 至少一部分变换被应用在状态的转置版本上，其中行和列分别被转置用于列和行。

公开(公告)号：US08102997B2

公开(公告)日：2012-01-24

申请号：US11547195

申请日：2004-03-29

Applicant: Yannick Teglia ,  Fabrice Romain ,  Pierre-Yvan Liardet ,  Pasqualina Fragneto ,  Fabio Sozzani ,  Guido Bertoni

Inventor： Yannick Teglia ,  Fabrice Romain ,  Pierre-Yvan Liardet ,  Pasqualina Fragneto ,  Fabio Sozzani ,  Guido Bertoni

IPC: H04L9/28 ,  H04K1/00

CPC classification number: H04L9/0631 ,  H04L9/003 ,  H04L2209/046 ,  H04L2209/08 ,  H04L2209/122

Abstract: A processor for executing a Rijndeal algorithm which applies a plurality of encryption rounds to a data block array in order to obtain an array of identical size, each round involving a key block array and a data block substitution table, wherein said processor comprises: a first input register (102) containing an input data block column; an output register (111) containing an output data block column or an intermediate block column; a second input register (101) containing a key block column or the intermediate data blocks; a block substitution element (104) receiving the data one block at a time following the selection (103) thereof in the first register and providing, for each block, a column of blocks; an element (109) applying a cyclic permutation to the substitution circuit column blocks; and an Exclusive-OR combination element (110) combining the permutation circuit column blocks with the content of the second register, the result of said combination being loaded into the output register.

Abstract translation: 一种用于执行Rijndeal算法的处理器，该Rijndeal算法将多个加密回合应用于数据块阵列，以便获得相同大小的阵列，每轮涉及密钥块阵列和数据块替换表，其中所述处理器包括：第一 输入寄存器（102），其包含输入数据块列; 包含输出数据块列或中间块列的输出寄存器（111）; 包含密钥块列或中间数据块的第二输入寄存器（101）; 块替换元件（104）在第一寄存器中的选择（103）之后的时间接收数据一个块，并为每个块提供一列块; 向替代电路列块施加循环置换的元件（109）; 以及将置换电路列块与第二寄存器的内容组合的异或组合元件（110），所述组合的结果被加载到输出寄存器中。

公开(公告)号：US20070260664A1

公开(公告)日：2007-11-08

申请号：US11786767

申请日：2007-04-11

Applicant: Guido Bertoni ,  Pasqualina Fragneto ,  Andrew Marsh ,  Gerardo Pelosi ,  Moris Ravasio

Inventor： Guido Bertoni ,  Pasqualina Fragneto ,  Andrew Marsh ,  Gerardo Pelosi ,  Moris Ravasio

IPC: G06F7/38

CPC classification number: G06F7/728 ,  G06F7/722

Abstract: A computing method and circuit for computing a modular operation with at least one operand having a binary representation. Iteratively for each bit of this operand, doubling the value of an intermediate result stored in a first memory element by shifting the bits of the intermediate result towards the most significant bit and, while the most significant bit of the intermediate result is one, updating this intermediate result by subtracting a modulus stored in a second memory element.

Abstract translation: 一种用于利用具有二进制表示的至少一个操作数来计算模块化操作的计算方法和电路。 迭代地对于该操作数的每个位，通过将中间结果的位移向最高有效位来将存储在第一存储元件中的中间结果的值加倍，并且当中间结果的最高有效位为1时，更新该值 通过减去存储在第二存储元件中的模数的中间结果。