RU174150U1 - DATA ENCRYPTION DEVICE ACCORDING TO THE STANDARD GOST R 34.12-2015 AND "MAGMA" AND AES ALGORITHMS - Google Patents

Abstract

The utility model relates to encryption devices based on a standard for data encryption. The technical result of the utility model is the creation of a data encryption device according to GOST P 34.12-2015 and the Magma and AES algorithms (Advanced Encryption Standard, improved encryption standard) with less hardware and the ability to encrypt data simultaneously using the Magma and AES algorithms due to using a common data storage device and a common key storage device for encryption using the Magma and AES algorithms. 3 s.p. crystals, 4 ill., 2 tab.

Description

The utility model relates to encryption devices based on the data encryption standard, namely, data encryption devices according to GOST R 34.12-2015 and the Magma and AES algorithms (Advanced Encryption Standard, improved encryption standard), and can be used in data encryption systems .

One of the block cipher algorithms in the Russian standard GOST R 34.12-2015 is the Magma algorithm. At the same time, in modern equipment it is often necessary to use the AES encryption algorithm adopted in the West.

Both algorithms have a similar structure. The Magma algorithm is based on the Feistel network, and the AES algorithm is based on the SP network. Both structures are iterative and from the point of view of hardware implementation are reduced to the fact (Fig. 1) that the input data block that needs to be encrypted / decrypted is loaded into the data storage device and then subjected to a sequence of transformations (rounds).

The data after each round is copied to the drive and again subjected to round-robin conversion, and so n times, where n is the number of rounds required for a complete encryption / decryption cycle.

The most typical hardware implementation of both algorithms contains a data and key storage device, as well as a functional part, where data conversion is performed. In FIG. Figure 1 shows a data flow diagram in the Magma and AES algorithms. Both of these algorithms are resource intensive and require significant hardware costs.

In order to increase productivity and to implement additional modes, in addition to the simple replacement mode, an additional buffer of the same size is required for each drive. Table 1 shows the amount of data that must be stored in a data encryption device (taking into account an additional buffer).

Closest to the claimed utility model is a data encryption device described in patent RU 2498416 C1. This device is selected as a prototype of the claimed utility model.

The disadvantage of the prototype device is the ability to simultaneously encrypt data using only one algorithm.

The technical result of the claimed utility model is the creation of a data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms with lower hardware costs and the ability to encrypt data simultaneously using the Magma and AES algorithms through the use of a common data storage device and a common key storage device for encryption using the algorithms "Magma" and AES. At the same time, the number of registers required for storing data and a key is reduced by almost half. Given the combination parts of the algorithms, the gain in the hardware of the data encryption device is about 1.5 times.

The claimed technical result was achieved by creating a data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms, containing the data store of the Magma and AES algorithms, the outputs of which are connected to the inputs of the Magma algorithm round device and the algorithm round device AES, the outputs of which are connected to the input of the data store of the algorithms "Magma" and AES; a key drive of the Magma and AES algorithms, the outputs of which are connected to the inputs of the Magma algorithm round key generation device and a key generation device of the AES algorithm round, the outputs of which are connected to the input of the Magma and AES algorithm key drive; a control device connected to the data store of the algorithms "Magma" and AES, with a drive of the key of the algorithms "Magma" and AES and with an external data bus.

In a preferred embodiment, the data and key storage devices are made in the form of register memory with the ability to store intermediate data of inter-round transformations of the round device that is currently operating.

In a preferred embodiment, the size of the data and key drives is determined by the values IDS = max {DS (AES), DS (MAGMA)} and IKS = max {KS (AES), KS (MAGMA)}, respectively, where DS (i) determines the size, necessary for storing the data of algorithm i taking into account the buffer, and KS (i) determines the size necessary for storing the key of algorithm i taking into account the buffer.

In a preferred embodiment, the data encryption device contains π - blocks, the output of which is connected to the input of the device of the round of the algorithm "Magma".

In the claimed utility model, in order to reduce hardware costs, it is proposed to combine key storage devices and data storage devices of two devices of the data encryption device using the Magma and AES algorithms in one data encryption device. For this, two joint drives are implemented: the first is responsible for storing data, the second is for storing the key. The size of the data and key drives is determined by the value IDS = max {DS (AES), DS (MAGMA)} and IKS = max {KS (AES), KS (MAGMA)}, respectively, where DS (i) determines the size required for data storage algorithm i, taking into account the buffer, and KS (i) determines the size required to store the key of algorithm i, taking into account the buffer. With a hardware implementation, the data and key drives will be a register memory. Depending on which round device is currently running, it will store its intermediate data from inter-round transformations in register memory.

For a better understanding of the claimed utility model, the following is a detailed description with the corresponding graphic materials.

FIG. 1. The scheme of data transmission during encryption separately in the algorithm "Magma" or AES, made according to the prototype.

FIG. 2. The scheme of data transmission during encryption in a combined data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms, made according to the utility model.

FIG. 3. The scheme of the data encryption device according to the standard GOST R 34.12-2015 and the algorithms "Magma" and AES, made according to the utility model.

Items:

1 - data store algorithms "Magma" and AES;

2 - key store of the algorithms "Magma" and AES;

3 - device of the round of the algorithm "Magma";

4 - device round AES algorithm;

5 - a device for generating a key of a round of the “Magma” algorithm;

6 - device key generation round AES algorithm;

7 - control device;

8 - π - blocks;

9 - data bus.

FIG. 4. The scheme of data transmission during one round of conversion in a combined data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms, performed according to the utility model.

Tab. 1. The amount of data that must be stored in data encryption devices using the Magma algorithm and AES algorithm, according to the prototype.

Tab. 2. The amount of data that must be stored in a data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms, according to the utility model.

Consider the embodiment of the claimed data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms (Fig. 3), which contains the data store 1 of the Magma and AES algorithms, the outputs of which are connected to the inputs of the device 3 round of the Magma algorithm and devices of round 4 of the AES algorithm, the outputs of which are connected to the input of the drive 1 of the data of the algorithms "Magma" and AES; Magma and AES algorithms key store 2, the outputs of which are connected to the inputs of the Magma algorithm round key generation device 5 and the AES algorithm key generation devices 6, the outputs of which are connected to the input of Magma and AES algorithm key store 2; control device 7 connected to the Magma and AES algorithms data storage 1, the Magma and AES algorithms key storage 2 and to the external data bus 9, as well as π - blocks 8, the output of which is connected to the input of the device of round 3 of the algorithm Magma".

In FIG. 4 shows the passage of data during one round of conversion in the present embodiment of the claimed data encryption device. Data from the shared storage goes simultaneously to the Magma and AES conversion schemes. After that, they enter the MX1 multiplexer, in which the data for storing after conversion is selected. The selection is made depending on the conversion algorithm, which is set by the user before the start of the encryption / decryption process. The selected data is sent to the store and used in a new round of conversion.

In the AES encryption algorithm, simultaneously with the data conversion, the key is converted, in the Magma algorithm it is not. Therefore, the key enters simultaneously the AES, Magma conversion blocks and the AES key conversion block. The MX2 multiplexer selects either the converted key for the AES algorithm, or the source key in the case of the “Magma” transformation. The stored key is then used in a new round of conversion.

The claimed data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms has lower hardware costs and the ability to encrypt data simultaneously using the Magma and AES algorithms due to the use of a common data storage device and a common key storage device for encryption using the algorithms " Magma "and AES. At the same time, the number of registers needed to store data and a key is almost halved. Given the combination parts of the algorithms, the gain in the equipment of the claimed data encryption device is about 1.5 times.

Although the embodiment of the utility model described above was set forth to illustrate the claimed utility model, it is clear to those skilled in the art that various modifications, additions and replacements are possible without departing from the scope and meaning of the claimed utility model disclosed in the attached utility model formula.

Claims (4)

1. Data encryption device according to GOST R 34.12-2015 and the Magma and AES algorithms, containing the data store of the Magma and AES algorithms, the outputs of which are connected to the inputs of the round device of the Magma algorithm and the round device of the AES algorithm, the outputs of which are connected with the input of data storage algorithms "Magma" and AES; a key drive of the Magma and AES algorithms, the outputs of which are connected to the inputs of the Magma algorithm round key generation device and a key generation device of the AES algorithm round, the outputs of which are connected to the input of the Magma and AES algorithm key drive; a control device connected to the data store of the algorithms "Magma" and AES, with a drive of the key of the algorithms "Magma" and AES and with an external data bus. 2. The device according to p. 1, characterized in that the data and key drives are made in the form of register memory with the ability to store intermediate data of inter-round transformations of the round device that is currently operating. 3. The device according to claim 1, characterized in that the size of the data and key drives determines the values IDS = max {DS (AES), DS (MAGMA)} and IKS = max {KS (AES), KS (MAGMA)}, respectively where DS (i) determines the size required to store the data of algorithm i taking into account the buffer, and KS (i) determines the size necessary to store the key of algorithm i taking into account the buffer. 4. The device according to p. 1, characterized in that it contains π - blocks, the output of which is connected to the input of the device of the round of the algorithm "Magma".

Images