CN201252558Y - Advanced encryption system based on generalized information domain - Google Patents

Abstract

The utility model provides an advanced encryption system based on the generalized information domain. The advanced encryption system based on the generalized information domain comprises a pseudo-random code generator based on the generalized information domain and an encryption and decryption subsystem which are connected together; wherein, the encryption and decryption subsystem comprises an encryption subsystem and a decryption subsystem; the pseudo-random code generator based on the generalized information domain comprises an initial address information IV generation module, an IV standardization module, an m module, a constraint-processing module and a key length judgement module which are orderly connected together; the m module is also connected with a dynamic background generation module, which comprises a physical reconstruction module and a logic reconstruction module; and both the encryption subsystem and the decryption subsystem comprise a packet coefficient and round key generation module, a packet module, a position-switching module, a substitution operation module and a track ring transformation module. Introducing the generalized information domain, the utility model realizes the shift from the key safety problem to the generalized information domain safety problem, and integrated with the stream cipher and packet encryption technology, the utility model realizes one-time pad, thus having strong conventional cryptanalysis-resistant capability.

Description

Advanced ciphering system based on broad sense information field

Technical field

The utility model relates to field of cryptography, is specifically related to the advanced ciphering system based on broad sense information field.

Background technology

In recent years, computer network has obtained development rapidly, is widely used in every field such as politics, military affairs, economy and science, and increasing information has obtained effective transmission and storage.Because the opening of computer network makes information possible stolen in transmission and storing process, the confidentiality of information, integrality, availability and non-repudiation all need to adopt cryptographic technique to realize.Information transmitted can be analyzed and intercept and capture to the computer of modern high performance automatically, and per second can be searched for hundreds of ins and outs, thereby information security is constituted serious threat.Message area wishes to have safer, convenient, effective information protection means in a hurry.

Cause people's very big concern as the cryptography of one of network security basic theory, attracted increasing researcher to put in the middle of the research in password field; Owing to the development and change of real-life actual needs and computing technique, many new problems, new direction have all appearred in cryptographic each research field simultaneously.For example, the AES Collection Activities make international cryptography rise the climax of a block cipher research.Simultaneously, in the public key cryptography field, advantage has caused people's common concern to ECC because it is safe, computational speed is fast etc.

Encryption technology mainly is divided into symmetric cryptography and asymmetric cryptography, and wherein symmetric cryptography is divided into stream cipher and block cipher again.The representative of stream cipher is the RC4 algorithm, and the representative of block cipher is DES and AES.The scramble diffusion conversion that the legacy packets password is determined usually, the system that makes has some specific character, its result makes system be vulnerable to the attack of cryptanalysis methods such as linear analysis, difference analysis, algebraically attack to a certain extent, thereby influences its fail safe.As first and also be most important modern symmetric encipherment algorithm, the weakness that DES is the most serious is exactly that key length is shorter, and this weakness seems more obvious in the nineties in 20th century.In July, 1998, cryptography research association, advanced wireless technological associations and EFF combined structure a cipher key search machine that is called Deep crack, searched for and successfully found DES challenge key after 56 hours, this shows the single key password of the computing technique in the later stage nineties 20th century for a former safety, uses the key of 56 bits too short.Thereafter improvement is the DES that takes turns that increases key length more.The AES that is symmetric cryptography equally is a kind of cryptographic algorithm that obviously relies on mathematical theory, relies on the related properties of finite field/finite ring to carry out encryption and decryption.What discussion was maximum at present is exactly that the algebraically of AES is attacked (XSL).Existing studies show that is the polynomial time of algorithm wheel number if XSL attacks, and then the fail safe of AES is along with the increase of wheel number is exponential increase.AES is because its grouping is determined, key length is determined and scramble distributes definitely, and when having high correlation for big data quantity and data, its effect is unsatisfactory.Symmetric cryptosystem all relates to the key problem, uses pseudo noise code as key usually.

There is following problem in traditional cryptographic algorithm:

(1) traditional cryptographic algorithm, as AES etc., the generation of its key (being pseudo noise code) can be represented with two tuples usually

K＝(m，IV)

Wherein, K is a key; M is that key produces algorithm, is difficult to usually maintain secrecy; IV is an initial value, i.e. the seed of algorithm requirement is maintained secrecy; M, IV are directly related with key, and key produces the mode that algorithm generally adopts iteration, begin iteration from initial value IV and produce key; The conventional cryptography algorithm has definite scramble and diffusion conversion, and enciphered message relies on key, and on the other hand, key need be encrypted keeping/encryption transmission/hidden passageway and transmit; Therefore, the key of the safety issue of traditional algorithm is key;

(2) decruption key needs to pass to deciphering side by cipher mode or hidden passageway ciphertext is decrypted, in transmission course, ciphertext and decruption key all may be intercepted and captured, so just might be by only ciphertext only attack or cryptanalysis crack ciphertext, thereby the information that makes transmits and has lost safety guarantee, and this also increases the complexity of key management greatly;

(3) the conventional cryptography algorithm is owing to the each side reason, and key key in actual use often is repeated repeatedly to use, and exists the safety issue that produces owing to repeatedly reusing.

The utility model content

Primary and foremost purpose of the present utility model is to overcome the shortcoming and defect of above-mentioned prior art, a kind of advanced ciphering system based on broad sense information field is provided, the utility model is introduced the broad sense information field notion, broken through the restriction of two tuples, it is expanded to the tlv triple structure, make the encryption and decryption both sides that the common activity context through broad sense information field conversion acquisition be arranged, from the side of encryption to deciphering side, the not explicit appearance of key, do not relate to the transmission of key yet, realize of the transfer of key safety problem to the broad sense information field safety issue; This system can obtain an activity context arbitrarily by broad sense information field being carried out physics reconstruct and logical reconstruction, has now to studies show that this conversion complexity is a np hard problem; Encrypt round, block length dynamically changeable, the scramble broadcast algorithm is determined by the alignment characteristics and the segmentation statistical property of key fully.Along with the increase of round, the encryption time is linear increment, and scramble diffusion complexity is exponential and increases progressively; System has merged block cipher and stream cipher technology, has realized a realizing one secrete key for one file.

The utility model purpose is achieved through the following technical solutions: the advanced ciphering system based on broad sense information field comprises the pseudo-noise code generator based on broad sense information field, the encryption and decryption subsystem that is connected, and this encryption and decryption subsystem comprises encryption subsystem, decrypting subsystem;

Wherein encryption subsystem comprises successively the grouping coefficient that connects and round key generation module, grouping module, antithesis place-exchange module, in-place computation module, track ring transformation module; Decrypting subsystem comprises successively the grouping coefficient that connects and round key generation module, track ring transformation module, grouping module, in-place computation module, antithesis place-exchange module; And encryption subsystem, the shared same grouping coefficient of decrypting subsystem and round key generation module;

The pseudo-noise code generator based on broad sense information field wherein comprises the initial address message that connects successively

(IV) generation module, IV normalization module, key produce algorithm (m) module, about fasciculation processing module, key length judge module, and described m module also is connected with the activity context generation module simultaneously;

Simultaneously; described pseudo-noise code generator based on broad sense information field respectively with encryption subsystem, decrypting subsystem in the grouping coefficient be connected with round key generation module, antithesis place-exchange module, in-place computation module, track ring transformation module, the grouping coefficient also enters the mouth by a breakpoint with the round key generation module and links to each other with the m module.

Described activity context generation module is mainly connected to form by physics reconstructed module, logical reconstruction module.

Can be expressed as binary-coded data arbitrarily in the computer, be referred to as broad sense information field (IF).

The utility model comprises ciphering process and decrypting process based on the method for the advanced ciphering system realization encryption and decryption of broad sense information field, and ciphering process is specific as follows:

(1) the activity context generation module becomes activity context to this subspace logical reconstruction then by the physics reconstruct of selected IF being obtained certain sub spaces of IF;

(2) the IV generation module produces initial address message (IV), and the IV normalization module becomes the binary address string of determining length to IV compression or stretching, and it is divided into the n piece:

X 1

X 2

…

X n

As the dimension of the n in activity context logical address;

(3) the m module is carried out the space tracking conversion to dimension logical bit address of the n in the activity context and physical space, and in each address transfer, separates out the long bit string in k position and incorporate in the key sequence from activity context.In order to obtain migration address, the about fasciculation of difference of the frequency of the maximum of k position bit string value and minimum value is handled before about fasciculation processing module basis, obtains a correction value.By the m module correction value is incorporated into address sequence then, obtain new n dimension migration address through translation, and the reservation traveling locus is used for constructing in the future track ring transformation matrix;

(4) the key length judge module judges according to default parameter whether the length of key is enough, if not enough, then repeats step (3) operation, if enough, then exports key;

(5) generate grouping coefficient and round key Key _r---to the selected encryption round number of user, system realizes whenever taking turns that the grouping coefficient is selected to be generated with round key automatically, and each wheel grouping coefficient of control is counted in the scope at a fixed wheel and do not repeated; Producing length by the pseudo-noise code generator based on broad sense information field is the bit string of a byte or word, and chooses the grouping coefficient n of r wheel in the grouping coefficient sets by the value of this bit string _r, return step (3) then, continue to produce by pseudo-noise code generator based on broad sense information field

Long round key Key _rRepeating step (5) finishes up to all grouping coefficients and round key generation, at last the round key Key of each wheel _rBe spliced into key K successively.This grouping coefficient is related to the operation of step (6), (7), (8), and the track ring transformation of step (9) is not limited by this grouping coefficient then, can increase the round of encryption according to the needs of scramble diffusion;

When many wheels are encrypted, note n '=max (n _r), r=1,2, K, R, wherein R is the encryption round number, and choosing size successively is unit for the piece of 2n ', and the encryption of R wheel is carried out in (6), (7), (8) set by step;

(6) grouping scheme---key K is pressed grouping coefficient n _rDivide into groups, the address space that the grouping coefficient has determined the clear packets displacement to encrypt is

(7) antithesis place-exchange--the content k of-key K grouping _iThe interior address of group of space grouping is encrypted in representative, to k _iThe step-by-step negate obtains k _iWith

Formation is right to even address.Analyze each k _iStatistical property after be shifted accordingly and the exchange of even address corresponding content handled; These processing are by the decision of the alignment characteristics of key, therefore use different keys, and it is different that displacement of taking during encryption and exchange are handled;

(8) in-place computation---note round key is Key _r=(K ₁, K ₂, K, K _t), plain text encryption space grouping A=(A ₀, A ₁..., A _t), corresponding ciphertext block is $A\′=(A_0^{\′},A_1^{\′},...,A_t^{\′})$ 。K wherein _i, A _i,

Account for 1bit, promptly be considered as the form of binary stream.After completing place exchange, calculate A ' value (A ' as the A use of r+1 wheel) as follows:

$\left\{\begin{array}{cc}{A}_0^{\′}=A_0\⊕K_0\⊕A_t,& i=0\\ A_i^{\′}=A_i\⊕K_i\⊕A_{i-1}^{\′},& i\≠0\end{array}\right.;$

Above-mentioned steps (6) to (8) is when the r that carries out for cryptographic algorithm wheel ciphering process, and one takes turns to encrypt and finishes, and encrypts and then do not repeat step (6) to (8) if finish the R wheel, otherwise change (9);

(9) track ring transformation---the individual track address P of n ' chosen _j, and according to P _jThe size ordering is to obtain the sequence about j

Can be considered a switching matrix, realize that the exchange of appropriate address content is handled, wherein the IA interchange address of address i correspondence is Make this transformation matrix become ring or a plurality of ring by constraint, guarantee that all addresses all exchange processing; The key that the pseudo-noise code generator continuation produces and piece is isometric that calls then based on broad sense information field carries out stream encryption to current block, if expressly unencryption finishes, returns (6), otherwise encryption finishes, and returns ciphertext.

In the said method, the described IV of step (2) is by one in system random number (SR), internal system time (ST), the given content (SC) or any multinomial composition, wherein SR, ST obtain by call function, realize randomness and the uniqueness of IV, given content is by the personalization of the given realization of user IV.

In the said method, the effect of the described physics reconstruct of step (1) is that selected broad sense information field (IF) is constructed with certain dispersion, visible physically subspace; Logical reconstruction then is that a spatial mappings that is obtained by physics reconstruct is the logical space of n dimension, has discreteness and randomness; Normalization IV is certain any address in this higher-dimension logical space, the initial address that carries out the space tracking conversion after also being.

In the said method, the described IF of step (1) can be the data of any type, is to be Binary Zero, 1 bit string of any length of unit with the byte in essence, has certain randomness and can think that it is end to end.IF can be produced by algorithm, generates as chaos/mixed chaos system, also one section code of image, text or internal memory etc.Can be to its label, so that use.When experiment, consider to use image, text as broad sense information field, or utilize the mixed chaos system, thereby produce different broad sense information fields according to given different initial value.

In the said method, the structure of the described activity context of step (1) under selected generalized information neck has as giving a definition:

ABG-code

IF-code

[S 1/L 1][，S 2/L 2]…[Si/Li]…

D 1，D 2，D 3[，D 4[，…]]

Wherein:

ABG-code: activity context number, be convenient to quote by code name;

IF-code: broad sense information field number;

[S1/L1] [, S2/L2] ... [Si/Li] ...: the physics reconstruction parameter, can select arbitrarily, consequently produce the activity context of determining.Wherein Si is skew, and Li is a length, decimally expression.Unit during physics reconstruct is a byte;

D1, D2, D3[Di[... ]]: the logical reconstruction parameter, Di is a dimension definition, and decimal representation provides this and ties up maximum subscript value, can choose wantonly in the bracket, and its unit is the position during logical reconstruction.

In the said method, the described physics reconstructed module of step (1) is carried out physics reconstruct to this selected IF, and its concrete operations are as follows:

If the physics reconstruction parameter is empty, then activity context and selected information field equivalence; If physics reconstruction parameter non-NULL, then choose one group of physics reconstruction parameter [Si/Li] successively, be that 0,1 string of Li byte long is as effective information from the Si byte intercepted length of broad sense information field or intermediate object program.Physics reconstruct can be extended to the information of a broad sense information field physical message piece of a plurality of different activity contexts;

In physics reconstruct, introduce one group of discretization rule, algorithm, reach unidirectional and calculate, the target of high degree of isolation and discretization, therefore,, make physics reconstruct have following characteristics by definition rule:

A, a reconstruct might make certain byte value produce multiple variation, satisfy unidirectional computability;

B, reconstruct keep stochastic behaviour, the ratio as 0,1;

The physical structure that c, reconstruct produce intermediate object program or activity context satisfies unidirectional calculating, but does not have inverse function, can't reversely obtain the result on upper strata, has high degree of isolation.

In the said method, the described logical reconstruction module of step (1) is carried out logical reconstruction to the IF through physics reconstruct and is obtained activity context, and its concrete operations are as follows:

Is the linear space conversion of the byte of one dimension the position logical space of any multidimensional, the one-dimensional data that obtains by physics reconstruct be reconstructed into D1 * D2 * ... the block of information of * Dn, each corresponding address then, and each address all available (y1, y2, yn) expression, and D1, D2,, Dn is each maximum subscript value of tieing up of appointing in advance.

In the said method, the m ternary of step (1), (2), (3) described IF, IV, m module coordinates to be implemented in the migration of spatial context track, separates out k position key in transition process, revises traveling locus simultaneously, till the length that generates meets the demands.

The decrypting process of decrypting subsystem is the inverse process of the ciphering process of encryption subsystem basically, and its difference is: the grouping coefficient and the round key backward that generate are used; The execution sequence of grouping scheme, antithesis place-exchange, in-place computation, these four steps of track ring transformation is followed successively by: track ring transformation, grouping scheme, in-place computation, antithesis place-exchange.Decrypting process is specific as follows:

(1) the activity context generation module becomes activity context to this subspace logical reconstruction then by the physics reconstruct of selected IF being obtained certain sub spaces of IF;

(2) the IV generation module produces initial address message (IV), and the IV normalization module becomes the binary address string of determining length to IV compression or stretching, and it is divided into the n piece:

X 1

X 2

…

X n

As the dimension of the n in activity context logical address;

(3) the m module is carried out the space tracking conversion to dimension logical bit address of the n in the activity context and physical space, and in each address transfer, separating out the long bit string in k position from activity context incorporates in the key sequence, in order to obtain migration address, the about fasciculation of difference of the frequency of the maximum of k position bit string value and minimum value is handled before about fasciculation processing module basis, obtains a correction value; By the m module correction value is incorporated into address sequence then, obtain new n dimension migration address through translation, and the reservation traveling locus is used for constructing in the future track ring transformation matrix;

(4) the key length judge module judges according to default parameter whether the length of key is enough, if not enough, then repeats step (3) operation, if enough, then exports key;

(5) generate grouping coefficient and round key Key _r---to the decryption round number, system realizes whenever taking turns that the grouping coefficient is selected to be generated with round key automatically, and each wheel grouping coefficient of control is counted in the scope at a fixed wheel and do not repeated.Producing length by the pseudo-noise code generator based on broad sense information field is the bit string of a byte or word, and chooses the grouping coefficient n of r wheel in the grouping coefficient sets by the value of this bit string _r, return step (3) then, continue to produce by pseudo-noise code generator based on broad sense information field

Long round key Key _rRepeating step (5) finishes up to all grouping coefficients and round key generation, at last the round key Key of each wheel _rBe spliced into key K successively.This grouping coefficient is related to the operation of step (7), (8), (9), and the track ring transformation of step (6) is not limited by this grouping coefficient then;

When many wheels are deciphered, note n '=max (n _r), r=1,2, K, R, wherein R is the decryption round number, chooses size successively to be

Piece be unit, R wheel deciphering is carried out in (7), (8), (9) set by step;

(6) track ring transformation---call to continue to produce with the isometric key of piece current block is flowed deciphering based on the pseudo-noise code generator of broad sense information field.Choose the individual track address P of n ' then _j, and according to P _jThe size ordering is to obtain the sequence about j

Can be considered a switching matrix, realize that the exchange of appropriate address content is handled, wherein the IA interchange address of address i correspondence is

Make this transformation matrix become ring or a plurality of ring by constraint, guarantee that all addresses all exchange processing.

(7) grouping scheme---key K is pressed grouping coefficient n _R-r+1Divide into groups, the grouping coefficient has determined the address space of ciphertext block displacement deciphering to be

(8) in-place computation---note round key is ${\mathrm{Key}}_r^{\′}=(K_1,K_2,K,K_t),$ Be the Key that produces by step (5) _R-r+1, decrypt ciphertext space grouping A=(A ₀, A ₁..., A _t), corresponding clear packets is $A\′=(A_0^{\′},A_1^{\′},...,A_t^{\′}).$ K wherein _i, A _i,

Account for lbit, promptly be considered as the form of binary stream, after completing place exchange, calculate A ' value (A ' as the A use of r+1 wheel) as follows:

$\left\{\begin{array}{cc}{A}_i=A_{i-1}^{\′}\⊕K_i\⊕A_i^{\′},& i\≠0\\ A_0=A_0^{\′}\⊕K_0\⊕A_t,& i=0\end{array}\right.;$

(9) antithesis place-exchange--the content k of-key K grouping _iThe interior address of group of space grouping is encrypted in representative, to k _iThe step-by-step negate obtains

k _iWith

Formation is right to even address; Analyze each k _iStatistical property after be shifted accordingly and the exchange of even address corresponding content handled; These processing are by the decision of the alignment characteristics of key, therefore use different keys, and it is different that displacement of taking during deciphering and exchange are handled;

Above-mentioned steps (7) to (9) is when being r that decipherment algorithm carried out wheel decrypting process, and one takes turns deciphering finishes, and encrypts and does not then repeat step (7) to (9) if finish the R wheel, otherwise change (10);

(10) if ciphertext is not deciphered and finished, return (6), otherwise deciphering finishes, and returns expressly.

In the said method, the described IV of step (2) is by one in system random number (SR), internal system time (ST), the given content (SC) or any multinomial composition, wherein SR, ST obtain by call function, realize randomness and the uniqueness of IV, given content is by the personalization of the given realization of user IV.

In the said method, the effect of the described physics reconstruct of step (1) is that selected broad sense information field (IF) is constructed with certain dispersion, visible physically subspace; Logical reconstruction then is that a spatial mappings that is obtained by physics reconstruct is the logical space of n dimension, has discreteness and randomness; Normalization IV is certain any address in this higher-dimension logical space, the initial address that carries out the space tracking conversion after also being.

In the said method, the described IF of step (1) can be the data of any type, is to be Binary Zero, 1 bit string of any length of unit with the byte in essence, has certain randomness and can think that it is end to end.IF can be produced by algorithm, generates as chaos/mixed chaos system, also one section code of image, text or internal memory etc.Can be to its label, so that use.When experiment, consider to use image, text as broad sense information field, or utilize the mixed chaos system, thereby produce different broad sense information fields according to given different initial value.

In the said method, the structure of the described activity context of step (1) under selected generalized information neck has as giving a definition:

ABG-code

IF-code

[S 1/L 1][，S 2/L 2]…[Si/Li]…

D 1，D 2，D 3[，D 4[，…]]

Wherein:

ABG-code: activity context number, be convenient to quote by code name;

IF-code: broad sense information field number;

[S1/L1] [, S2/L2] ... [Si/Li] ...: the physics reconstruction parameter, can select arbitrarily, consequently produce the activity context of determining.Wherein Si is skew, and Li is a length, decimally expression.Unit during physics reconstruct is a byte;

D1, D2, D3[Di[... ]]: the logical reconstruction parameter, Di is a dimension definition, and decimal representation provides this and ties up maximum subscript value, can choose wantonly in the bracket, and its unit is the position during logical reconstruction.

In the said method, the described physics reconstructed module of step (1) is carried out physics reconstruct to this selected IF, and its concrete operations are as follows:

If the physics reconstruction parameter is empty, then activity context and selected information field equivalence; If physics reconstruction parameter non-NULL, then choose one group of physics reconstruction parameter [Si/Li] successively, be that 0,1 string of Li byte long is as effective information from the Si byte intercepted length of broad sense information field or intermediate object program.Physics reconstruct can be extended to the information of a broad sense information field physical message piece of a plurality of different activity contexts;

In physics reconstruct, introduce one group of discretization rule, algorithm, reach unidirectional and calculate, the target of high degree of isolation and discretization, therefore,, make physics reconstruct have following characteristics by definition rule:

A, a reconstruct might make certain byte value produce multiple variation, satisfy unidirectional computability;

B, reconstruct keep stochastic behaviour, the ratio as 0,1;

The physical structure that c, reconstruct produce intermediate object program or activity context satisfies unidirectional calculating, but does not have inverse function, can't reversely obtain the result on upper strata, has high degree of isolation.

In the said method, the described logical reconstruction module of step (1) is carried out logical reconstruction to the IF through physics reconstruct and is obtained activity context, and its concrete operations are as follows:

Is the linear space conversion of the byte of one dimension the position logical space of any multidimensional, the one-dimensional data that obtains by physics reconstruct be reconstructed into D1 * D2 * ... the block of information of * Dn, each corresponding address then, and each address all available (y1, y2, yn) expression, and D1, D2,, Dn is each maximum subscript value of tieing up of appointing in advance.

In the said method, the m ternary of step (1), (2), (3) described IF, IV, m module coordinates to be implemented in the migration of spatial context track, separates out k position key in transition process, revises traveling locus simultaneously, till the length that generates meets the demands.

The utility model has the following advantages with respect to prior art based on the advanced ciphering system of broad sense information field:

(1) introduce the broad sense information field notion, broken through the restriction of two tuples, (IF), encryption and decryption both sides can produce the key of any number, random length under the joint activity background for m, IV to expand to tlv triple under the broad sense information field conversion., only need to transmit IV to deciphering side from the side of encryption, the not explicit appearance of key does not relate to the transmission of key yet, and the key safety problem is just transferred on the broad sense information field safety issue like this, thereby has improved Information Security greatly.

(2) anti-conventional cryptanalysis.Broad sense information field can obtain any a plurality of activity context by physics reconstruct and logical reconstruction, and selectes and use one of them.And the adjustability of parameter relates to permutation and combination (exhaustive attack space) problem in restructuring procedure, has now to studies show that this conversion complexity is a np hard problem.The selected Dynamic Packet of simultaneity factor, place-exchange, track ring transformation and stream encryption etc. are nonlinear transformation; therefore along with the increase of round; the encryption time is linear increment; and scramble diffusion complexity is exponential increase; conventional cryptanalysis methods such as therefore, linear analysis, difference analysis, algebraically attack are not suitable for native system.

(3) this system has merged stream cipher encrypting and block cipher encryption technology, Dynamic Selection round according to actual needs, and block length dynamically changeable, scramble broadcast algorithm by the alignment characteristics and the decision of segmentation statistical property of key, are realized a realizing one secrete key for one file fully.

Description of drawings

Fig. 1 is the structural representation of the utility model system;

Fig. 2 is the workflow of the utility model system.

Embodiment

Below in conjunction with embodiment and accompanying drawing, the utility model is described in further detail, but execution mode of the present utility model is not limited thereto.

Embodiment

Figure 1 shows that the concrete structure of the utility model based on the advanced ciphering system of broad sense information field, comprise the pseudo-noise code generator based on broad sense information field, the encryption and decryption subsystem that are connected, this encryption and decryption subsystem comprises encryption subsystem, decrypting subsystem;

Wherein encryption subsystem comprises successively the grouping coefficient that connects and round key generation module, grouping module, antithesis place-exchange module, in-place computation module, track ring transformation module; Decrypting subsystem comprises successively the grouping coefficient that connects and round key generation module, track ring transformation module, grouping module, in-place computation module, antithesis place-exchange module; And encryption subsystem, the shared same grouping coefficient of decrypting subsystem and round key generation module;

The pseudo-noise code generator based on broad sense information field wherein comprises IV generation module, IV normalization module, m module, about fasciculation processing module, the key length judge module that connects successively, described m module also is connected with the activity context generation module simultaneously, and described activity context generation module is mainly connected to form by physics reconstructed module, logical reconstruction module;

Simultaneously; described pseudo-noise code generator based on broad sense information field respectively with encryption subsystem, decrypting subsystem in the grouping coefficient be connected with round key generation module, antithesis place-exchange module, in-place computation module, track ring transformation module, the grouping coefficient also enters the mouth by a breakpoint with the round key generation module and links to each other with the m module.

Can be expressed as binary-coded data arbitrarily in the computer, be referred to as IF.

Utilize above-mentioned advanced ciphering system based on broad sense information field to realize the method for encryption and decryption, as shown in Figure 2, comprise ciphering process and decrypting process, ciphering process is specific as follows:

(1) the activity context generation module becomes activity context to this subspace logical reconstruction then by the physics reconstruct of selected IF being obtained certain sub spaces of IF;

(2) the IV generation module produces IV, and the IV normalization module becomes the binary address string of determining length to IV compression or stretching, and it is divided into the n piece:

X 1

X 2

…

X n

As the dimension of the n in activity context logical address;

(3) the m module is carried out the space tracking conversion to dimension logical bit address of the n in the activity context and physical space, and in each address transfer, separating out the long bit string in k position from activity context incorporates in the key sequence, in order to obtain migration address, the about fasciculation of difference of the frequency of the maximum of k position bit string value and minimum value is handled before about fasciculation processing module basis, obtains a correction value; By the m module correction value is incorporated into address sequence then, obtain new n dimension migration address through translation, and the reservation traveling locus is used for constructing in the future track ring transformation matrix;

(4) the key length judge module judges according to default parameter whether the length of key is enough, if not enough, then repeats step (3) operation, if enough, then exports key;

(5) generate grouping coefficient and round key Key _r---to the selected encryption round number of user, system realizes whenever taking turns that the grouping coefficient is selected to be generated with round key automatically, and each wheel grouping coefficient of control is counted in the scope at a fixed wheel and do not repeated.Producing length by the pseudo-noise code generator based on broad sense information field is the bit string of a byte or word, and chooses the grouping coefficient n of r wheel in the grouping coefficient sets by the value of this bit string _r, return step (3) then, continue to produce by pseudo-noise code generator based on broad sense information field

Long round key Key _rRepeating step (5) finishes up to all grouping coefficients and round key generation, at last the round key Key of each wheel _rBe spliced into key K successively.This grouping coefficient is related to the operation of step (6), (7), (8), and the track ring transformation of step (9) is not limited by this grouping coefficient then, can increase the round of encryption according to the needs of scramble diffusion;

When many wheels are encrypted, note n '=max (n _r), r=1,2, K, R, wherein R is the encryption round number, chooses size successively to be

Piece be unit, (6), (7), (8) are carried out R wheel and are encrypted set by step;

(6) grouping scheme---key K is pressed grouping coefficient n _rDivide into groups, the address space that the grouping coefficient has determined the clear packets displacement to encrypt is

(7) antithesis place-exchange--the content k of-key K grouping _iThe interior address of group of space grouping is encrypted in representative, to k _iThe step-by-step negate obtains

k _iWith

Formation is right to even address; Analyze each k _iStatistical property after be shifted accordingly and the exchange of even address corresponding content handled; These processing are by the decision of the alignment characteristics of key, therefore use different keys, and it is different that displacement of taking during encryption and exchange are handled;

(8) in-place computation---note round key is Key _r=(K ₁, K ₂, K, K _t), plain text encryption space grouping A=(A ₀, A ₁..., A _t), corresponding ciphertext block is $A\′=(A_0^{\′},A_1^{\′},...,A_t^{\′})$ K wherein _i, A _i, Account for lbit, promptly be considered as the form of binary stream, after completing place exchange, calculate A ' value (A ' as the A use of r+1 wheel) as follows:

$\left\{\begin{array}{cc}{A}_0^{\′}=A_0\⊕K_0\⊕A_t,& i=0\\ A_i^{\′}=A_i\⊕K_i\⊕A_{i-1}^{\′},& i\≠0\end{array}\right.;$

Above-mentioned steps (6) to (8) is when the r that carries out for cryptographic algorithm wheel ciphering process, and one takes turns to encrypt and finishes, and encrypts and then do not repeat step (6) to (8) if finish the R wheel, otherwise change (9);

(9) track ring transformation---the individual track address P of n ' chosen _j, and according to P _jThe size ordering is to obtain the sequence about j

Can be considered a switching matrix, realize that the exchange of appropriate address content is handled, wherein the IA interchange address of address i correspondence is

Make this transformation matrix become ring or a plurality of ring by constraint, guarantee that all addresses all exchange processing.The key that the key generator continuation produces and piece is isometric that calls then based on broad sense information field carries out stream encryption to current block; If expressly unencryption finishes, return (6), otherwise, encrypt and finish, return ciphertext.

In the said method, the m ternary in step (1), (2), (3) described IF, IV, the m module coordinates to be implemented in the migration of spatial context track, separates out k position key in transition process, revises traveling locus simultaneously, till the length that generates meets the demands.

In the said method, the described IV of step (2) is by one among SR, ST, the SC or any multinomial composition, wherein SR, ST obtain by call function, realize randomness and the uniqueness of IV, given content is given by the user, realizes the personalization of IV, as: " hello; I am * * ", IV does not use as the initial value of algorithm, and what comprise is the information of initial address in activity context.

In the said method, the effect of (1) described physics reconstruct is that selected IF is constructed with certain dispersion, visible physically subspace; Logical reconstruction then is that a spatial mappings that is obtained by physics reconstruct is the logical space of n dimension, has discreteness and randomness; Normalization IV is certain any address in this higher-dimension logical space, the initial address that carries out the space tracking conversion after also being.

In the said method, the described IF of step (1) can be the data of any type, is to be Binary Zero, 1 bit string of any length of unit with the byte in essence, has certain randomness and can think that it is end to end.IF can be produced by algorithm, generates as chaos/mixed chaos system, also one section code of image, text or internal memory etc.Can be to its label, so that use.When experiment, consider to use image, text as broad sense information field, or utilize the mixed chaos system, thereby produce different broad sense information fields according to given different initial value.

In the said method, the structure of the described activity context of step (1) under selected generalized information neck has as giving a definition:

ABG-code

IF-code

[S 1/L 1][，S 2/L 2]…[Si/Li]…

D 1，D 2，D 3[，D 4[，…]]

Wherein:

ABG-code: activity context number, be convenient to quote by code name;

IF-code: broad sense information field number;

[S1/L1] [, S2/L2] ... [Si/Li] ...: the physics reconstruction parameter, can select arbitrarily, consequently produce the activity context of determining.Wherein Si is skew, and Li is a length, decimal representation.Unit during physics reconstruct is a byte;

D1, D2, D3[Di[... ]]: the logical reconstruction parameter, Di is a dimension definition, and decimal representation provides this and ties up maximum subscript value, can choose wantonly in the bracket, and its unit is the position during logical reconstruction.

In the said method, the described physics reconstructed module of step (1) is carried out physics reconstruct to this selected IF, and its concrete operations are as follows:

If the physics reconstruction parameter is empty, then activity context and selected information field equivalence; If physics reconstruction parameter non-NULL, then choose one group of physics reconstruction parameter [Si/Li] successively, be that 0,1 string of Li byte long is as effective information from the Si byte intercepted length of broad sense information field or intermediate object program.Physics reconstruct can be extended to the information of a broad sense information field physical message piece of a plurality of different activity contexts;

In physics reconstruct, introduce one group of discretization rule, algorithm, reach unidirectional and calculate, the target of high degree of isolation and discretization, therefore,, make physics reconstruct have following characteristics by definition rule:

A, a reconstruct might make certain byte value produce multiple variation, satisfy unidirectional computability;

B, reconstruct keep stochastic behaviour, the ratio as 0,1;

The physical structure that c, reconstruct produce intermediate object program or activity context satisfies unidirectional calculating, but does not have inverse function, can't reversely obtain the result on upper strata, has high degree of isolation.

In the said method, the described logical reconstruction module of step (1) is carried out logical reconstruction to the IF through physics reconstruct and is obtained activity context, and its concrete operations are as follows:

Is the linear space conversion of the byte of one dimension the position logical space of any multidimensional, the one-dimensional data that obtains by physics reconstruct be reconstructed into D1 * D2 * ... the block of information of * Dn, each corresponding address then, and each address all available (y1, y2, yn) expression, and D1, D2,, Dn is the maximum subscript value of appointing in advance of every dimension.

For example definition:

4

Sample.txt

[34/256]，[568/512]

456,355,756

It is 4 activity context that code name is chosen in expression.Obtain this activity context, need carry out physics and logical reconstruction then with the file of file Sample.txt by name as broad sense information field.Physics reconstruction parameter [34/256], [568/512] are represented to choose the binary string of 256 and 512 byte longs respectively from the 34th byte and the 568th byte, and be merged into one long be 768 bytes (6144 s') binary string.Logical reconstruction is mapped to 3 spaces of tieing up to these 6144 long binary strings, and the maximum subscript value of every dimension is respectively 456,355 and 756.

Decrypting process is specific as follows:

(1) the activity context generation module becomes activity context to this subspace logical reconstruction then by the physics reconstruct of selected IF being obtained certain sub spaces of IF;

(2) the IV generation module produces IV, and the IV normalization module becomes the binary address string of determining length to IV compression or stretching, and it is divided into the n piece:

X 1

X 2

…

X n

As the dimension of the n in activity context logical address;

(3) the m module is carried out the space tracking conversion to dimension logical bit address of the n in the activity context and physical space, and in each address transfer, separating out the long bit string in k position from activity context incorporates in the key sequence, in order to obtain migration address, the about fasciculation of difference of the frequency of the maximum of k position bit string value and minimum value is handled before about fasciculation processing module basis, obtains a correction value; By the m module correction value is incorporated into address sequence then, obtain new n dimension migration address through translation, and the reservation traveling locus is used for constructing in the future track ring transformation matrix;

(4) the key length judge module judges according to default parameter whether the length of key is enough, if not enough, then repeats step (3) operation, if enough, then exports key;

(5) generate grouping coefficient and round key Key _r---to the decryption round number, system realizes whenever taking turns that the grouping coefficient is selected to be generated with round key automatically, and each wheel grouping coefficient of control is counted in the scope at a fixed wheel and do not repeated.Producing length by the pseudo-noise code generator based on broad sense information field is the bit string of a byte or word, and chooses the grouping coefficient n of r wheel in the grouping coefficient sets by the value of this bit string _r, return step (3) then, continue to produce by pseudo-noise code generator based on broad sense information field

Long round key Key _rRepeating step (5) finishes up to all grouping coefficients and round key generation, at last the round key Key of each wheel _rBe spliced into key K successively.This grouping coefficient is related to the operation of step (7), (8), (9), and the track ring transformation of step (6) is not limited by this grouping coefficient then;

When many wheels are deciphered, note n '=max (n _r), r=1,2, K, R, wherein R is the decryption round number, chooses size successively to be

Piece be unit, R wheel deciphering is carried out in (7), (8), (9) set by step;

(6) track ring transformation---call to continue to produce with the isometric key of piece current block is flowed deciphering based on the pseudo-noise code generator of broad sense information field.Choose the individual track address P of n ' then _j, and according to P _jThe size ordering is to obtain the sequence about j

Can be considered a switching matrix, realize that the exchange of appropriate address content is handled, wherein the IA interchange address of address i correspondence is

Make this transformation matrix become ring or a plurality of ring by constraint, guarantee that all addresses all exchange processing.

(7) grouping scheme---key K is pressed grouping coefficient n _R-r+1Divide into groups, the grouping coefficient has determined the address space of ciphertext block displacement deciphering to be

(8) in-place computation---note round key is ${\mathrm{Key}}_r^{\′}=(K_1,K_2,K,K_t),$ Be the Key that produces by step (5) _R-r+1, decrypt ciphertext space grouping A=(A ₀, A ₁..., A _t), corresponding clear packets is $A\′=(A_0^{\′},A_1^{\′},...,A_t^{\′}).$ K wherein _i, A _i,

Account for lbit, promptly be considered as the form of binary stream, after completing place exchange, calculate A ' value (A ' as the A use of r+1 wheel) as follows:

$\left\{\begin{array}{cc}{A}_i=A_{i-1}^{\′}\⊕K_i\⊕A_i^{\′},& i\≠0\\ A_0=A_0^{\′}\⊕K_0\⊕A_t,& i=0\end{array}\right.;$

(9) antithesis place-exchange--the content k of-key K grouping _iThe interior address of group of space grouping is encrypted in representative, to k _iThe step-by-step negate obtains

k _iWith

Formation is right to even address; Analyze each k _iStatistical property after be shifted accordingly and the exchange of even address corresponding content handled; These processing are by the decision of the alignment characteristics of key, therefore use different keys, and it is different that displacement of taking during deciphering and exchange are handled;

Above-mentioned steps (7) to (9) is when being r that decipherment algorithm carried out wheel decrypting process, and one takes turns deciphering finishes, and encrypts and does not then repeat step (7) to (9) if finish the R wheel, otherwise change (10);

(10) if ciphertext is not deciphered and finished, return (6), otherwise deciphering finishes, and returns expressly.

In the said method, the m ternary in step (1), (2), (3) described IF, IV, the m module coordinates to be implemented in the migration of spatial context track, separates out k position key in transition process, revises traveling locus simultaneously, till the length that generates meets the demands.

In the said method, the described IV of step (2) is by one among SR, ST, the SC or any multinomial composition, wherein SR, ST obtain by call function, realize randomness and the uniqueness of IV, given content is given by the user, realizes the personalization of IV, as: " hello; I am * * ", IV does not use as the initial value of algorithm, and what comprise is the information of initial address in activity context.

In the said method, the effect of (1) described physics reconstruct is that selected IF is constructed with certain dispersion, visible physically subspace; Logical reconstruction then is that a spatial mappings that is obtained by physics reconstruct is the logical space of n dimension, has discreteness and randomness; Normalization IV is certain any address in this higher-dimension logical space, the initial address that carries out the space tracking conversion after also being.

In the said method, the described IF of step (1) can be the data of any type, is to be Binary Zero, 1 bit string of any length of unit with the byte in essence, has certain randomness and can think that it is end to end.IF can be produced by algorithm, generates as chaos/mixed chaos system, also one section code of image, text or internal memory etc.Can be to its label, so that use.When experiment, consider to use image, text as broad sense information field, or utilize the mixed chaos system, thereby produce different broad sense information fields according to given different initial value.

In the said method, the structure of the described activity context of step (1) under selected generalized information neck has as giving a definition:

ABG-code

IF-code

[S 1/L 1][，S 2/L 2]…[Si/Li]…

D 1，D 2，D 3[，D 4[，…]]

Wherein:

ABG-code: activity context number, be convenient to quote by code name;

IF-code: broad sense information field number;

[S1/L1] [, S2/L2] ... [Si/Li] ...: the physics reconstruction parameter, can select arbitrarily, consequently produce the activity context of determining.Wherein Si is skew, and Li is a length, decimal representation.Unit during physics reconstruct is a byte;

D1, D2, D3[Di[... ]]: the logical reconstruction parameter, Di is a dimension definition, and decimal representation provides this and ties up maximum subscript value, can choose wantonly in the bracket, and its unit is the position during logical reconstruction.

In the said method, the described physics reconstructed module of step (1) is carried out physics reconstruct to this selected IF, and its concrete operations are as follows:

If the physics reconstruction parameter is empty, then activity context and selected information field equivalence; If physics reconstruction parameter non-NULL, then choose one group of physics reconstruction parameter [Si/Li] successively, be that 0,1 string of Li byte long is as effective information from the Si byte intercepted length of broad sense information field or intermediate object program.Physics reconstruct can be extended to the information of a broad sense information field physical message piece of a plurality of different activity contexts;

In physics reconstruct, introduce one group of discretization rule, algorithm, reach unidirectional and calculate, the target of high degree of isolation and discretization, therefore,, make physics reconstruct have following characteristics by definition rule:

A, a reconstruct might make certain byte value produce multiple variation, satisfy unidirectional computability;

B, reconstruct keep stochastic behaviour, the ratio as 0,1;

The physical structure that c, reconstruct produce intermediate object program or activity context satisfies unidirectional calculating, but does not have inverse function, can't reversely obtain the result on upper strata, has high degree of isolation.

In the said method, the described logical reconstruction module of step (1) is carried out logical reconstruction to the IF through physics reconstruct and is obtained activity context, and its concrete operations are as follows:

Is the linear space conversion of the byte of one dimension the position logical space of any multidimensional, the one-dimensional data that obtains by physics reconstruct be reconstructed into D1 * D2 * ... the block of information of * Dn, each corresponding address then, and each address all available (y1, y2, yn) expression, and D1, D2,, Dn is the maximum subscript value of appointing in advance of every dimension.

For example definition:

4

Sample.txt

[34/256]，[568/512]

456,355,756

It is 4 activity context that code name is chosen in expression.Obtain this activity context, need carry out physics and logical reconstruction then with the file of file Sample.txt by name as broad sense information field.Physics reconstruction parameter [34/256], [568/512] are represented to choose the binary string of 256 and 512 byte longs respectively from the 34th byte and the 568th byte, and be merged into one long be 768 bytes (6144 s') binary string.Logical reconstruction is mapped to 3 spaces of tieing up to these 6144 long binary strings, and the maximum subscript value of every dimension is respectively 456,355 and 756.

According to the tlv triple that is produced key by broad sense information field as can be known, trielement synergistic produces key, and is indispensable.The enciphering/deciphering both sides have identical broad sense information field, are to arrange in advance by both party, do not participate in the transmittance process of information.The superencipherment algorithm uses key under encapsulation state, encryption side produces key according to the information field of appointing in advance and encrypts, and afterwards ciphertext and information header (comprising ABG number and IV) is passed to deciphering side.The deciphering root is separated out real decruption key according to IV and is deciphered from the broad sense information field of agreement.To deciphering side, the not explicit appearance of key does not relate to the transmission of key yet from the side of encryption.If can guarantee broad sense information field safety, IV and m promptly expose does not influence fail safe yet.This moment, the key safety problem changed the broad sense information field safety issue into, the no longer explicit transmission of key and management, tightening security property greatly.Conventional cryptanalysis methods such as linear analysis, difference analysis, algebraically attack are not suitable for the utility model system.

The key of at present a lot of encryption systems is repeatedly used, thereby reduces the fail safe of system.The utility model can produce the key of any number random length, realizes that grouping combines with stream cipher, realizes a realizing one secrete key for one file, thereby improves the fail safe of system greatly.

The foregoing description is the utility model preferred implementation; but execution mode of the present utility model is not restricted to the described embodiments; other any do not deviate from change, the modification done under spirit of the present utility model and the principle, substitutes, combination, simplify; all should be the substitute mode of equivalence, be included within the protection range of the present utility model.

Claims (2)

1, based on the advanced ciphering system of broad sense information field, it is characterized in that: comprise the pseudo-noise code generator based on broad sense information field, the encryption and decryption subsystem that are connected, this encryption and decryption subsystem comprises encryption subsystem, decrypting subsystem;

Wherein encryption subsystem comprises successively the grouping coefficient that connects and round key generation module, grouping module, antithesis place-exchange module, in-place computation module, track ring transformation module; Decrypting subsystem comprises successively the grouping coefficient that connects and round key generation module, track ring transformation module, grouping module, in-place computation module, antithesis place-exchange module; And encryption subsystem, the shared same grouping coefficient of decrypting subsystem and round key generation module;

The pseudo-noise code generator based on broad sense information field wherein comprises IV generation module, IV normalization module, m module, about fasciculation processing module, the key length judge module that connects successively, and described m module also is connected with the activity context generation module simultaneously;

Simultaneously; described pseudo-noise code generator based on broad sense information field respectively with encryption subsystem, decrypting subsystem in the grouping coefficient be connected with round key generation module, antithesis place-exchange module, in-place computation module, track ring transformation module, the grouping coefficient also enters the mouth by a breakpoint with the round key generation module and links to each other with the m module.

2, according to the described senior encrypting and deciphering system based on broad sense information field of claim 1, it is characterized in that: described activity context generation module is mainly connected to form by physics reconstructed module, logical reconstruction module.

Images