JPH117239A - Cipher processor, cipher processing method and storage medium storing cipher processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a cipher processor improving safety without remarkably increasing a device scale and a processing time, etc. SOLUTION: This device is a data ciphering device 10 performing cipher processing specified by the key data and generating a ciphered message from a plain text, and is provided with a block storage part 102 storing the chain data to be used for affecting the former data to the later data and updating the chain data whenever the cipher processing is performed, a key data fusion part 103 fusing the chain data stored in the block storage part 102 to the key data and generating the fusion key data and the first - eight ciphering parts 105a-h performing the cipher processing based on the fusion key data, generating the ciphered message and outputting the middle data generated in a process until the ciphered message is generated. Then, the block storage part 102 updates the chain data stored in itself with the middle data outputted from the first - eight ciphering parts 105a-h as the new chain data to make them use to the next cipher processing.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a cryptographic processing apparatus, a cryptographic processing method, and a storage medium storing a cryptographic processing program for encrypting or decrypting encrypted data in block units based on a secret key. In particular, the present invention relates to a technique for improving safety without greatly increasing the scale of the apparatus, processing time, and the like.

[0002]

2. Description of the Related Art In recent years, remittance by digital communication and communication of all kinds of information have become widespread, so that important information to be transmitted is protected from eavesdropping and tampering by a third party, and a technique for improving security is improved. The demand for is increasing. One of the effective technologies to improve security is cryptography.
raphy).

[0003] In a system that communicates using encryption, the original message is called plaintext.
The one whose meaning is converted into a form that is difficult for a third party to understand is called a cryptogram. Also, this conversion is called encryption, and conversely, the inverse conversion for restoring the ciphertext to the original plaintext is decrypted (decryption).
(cryption).

[0004] The contents of conversion between encryption and decryption are specified by an algorithm and a parameter key. The algorithm identifies a family of transforms consisting of multiple transforms, and the key identifies one transform within that family. Usually, what corresponds to a fixed part of the device is an algorithm, and what is sometimes replaced in one device is a key.

[0005] The ciphertext is assumed to be eavesdropped. The fact that an eavesdropper or the like attempts to decrypt into plain text without having algorithm or key information,
It is referred to as cryptoanalysis. A person attempting to decipher (hereinafter, referred to as “cryptanalyst (crypt
analyst) ") performs decryption on the assumption that the ciphertext is known. Basically, a ciphertext-only attack refers to a decryption method that determines a secret plaintext or key only from ciphertext.
That. Further, a decryption method of determining a secret key from a pair of unspecified ciphertexts and plaintexts and determining a plaintext corresponding to an arbitrary ciphertext is referred to as “known plaintext attack (known-pl).
aintextattack) ".

[0006] One example of encryption is pseudo-random number addition type encryption.

In this cipher, a sender and a receiver secretly share the same key, and use a random number generator having the same algorithm to set the key as a seed to a predetermined number of bits (hereinafter referred to as “block”). )), And in the encryption by the sender, a ciphertext is generated by performing an exclusive OR operation on the random number and the plaintext for each corresponding bit in block units, In decryption on the receiver side, a plaintext is generated by performing an exclusive OR operation on the random number and the ciphertext for each corresponding bit in block units.

Here, the plaintext in block units is “M”, the ciphertext in block units is “C”, the random number is “R”, and the exclusive OR operation for each corresponding bit is “(+)”. Then, encryption can be expressed by the following (Equation 1), and decryption can be expressed by the following (Equation 2). C = M (+) R (Equation 1) M = C (+) R (Equation 2)

The problem with this encryption is that it is very vulnerable to "known plaintext attacks". For example, if a pair of a plaintext and a ciphertext of one block is known, the random number R is obtained from the following (Equation 3), so that all other plaintexts can be decrypted. R = M (+) C (Equation 3)

[0010] Therefore, the cryptanalyst can very easily decrypt the pseudo-random number addition type cipher by the known plaintext attack. An example of a cipher that cannot be easily deciphered by a known plaintext attack is the DES (Data Encryption Standard).
And FEAL (Fast Data Encipherment Algorithm). These are described in "Introduction to Cryptography" (Eiji Okamoto:
Published by Kyoritsu Shuppan).

[0011] These ciphers make 64 bits one block, and strongly disturb data in block units. For example, the DES algorithm uses transpos
(ion) and substitution (substitution) are repeated 16 times. Cipher block chaining (Cipher Block Chaining) (hereinafter abbreviated as “CBC mode”) has been devised in order to make DES resistant to cryptanalysis and active fraud. CBC
The mode is “Modern Cryptography Theory” (Shinichi Ikeno, Kenji Koyama:
This is described in detail in pages 66-67 of the Institute of Electronics, Information and Communication Engineers.

FIG. 50 is a diagram showing a configuration of the encryption device 30 for realizing the CBC mode. The encryption device 30 includes an exclusive OR unit 301, a data encryption unit 302, and a register 303. The register 303 stores the ciphertext of one block encrypted immediately before. When the first block is encrypted, the initial value IV (In
initialValue) is set.

The exclusive OR unit 301 includes a register 303
The exclusive-OR operation is performed for each block of the ciphertext of one block immediately before storage and the plaintext of one block to be encrypted next, and the result is passed to the data encryption unit 302. When the first block is encrypted, an exclusive OR operation is performed on the initial value IV and the plaintext of the first block for each corresponding bit. The data encryption unit 302
Based on the key data of bits, the 64-bit data passed from the exclusive OR unit 301 is encrypted by a DES algorithm.

[0014] The encryption device 30 is a block unit.
An exclusive OR operation is performed on the initial value IV and the first block of plaintext for each corresponding bit, and encrypted based on the 64-bit key data to generate one block of ciphertext. The sentence and the plaintext of the next block are subjected to an exclusive OR operation for each corresponding bit, and are input to the next encryption.

The plaintext in block units is Mi, and the ciphertext in block units is Ci (i is the block number: i = 2, 3,...).
), The key data of 64 bits is K, the encryption using the key data K is Ek, and the exclusive OR operation for each corresponding bit is “(+)”. Equations 4) and 5 can be used. C1 = Ek (M1 (+) IV) (Equation 4) Ci = Ek (Mi (+) Ci-1) (i = 2, 3,...) (Equation 5) In the CBC mode Since each Ci depends on all ciphertext data before Ci, the statistical characteristics of the plaintext are disturbed.

[0016] Therefore, it is more resistant to decryption and active fraud. Problems such as CBC mode in DES, FEAL and DES as described above are because the algorithm is public and the key length is limited.
In the "known plaintext attack", the correct key is always discovered sometime by trying to encrypt using all the keys. The key length of DES is
As described above, since the parity bit is 64 bits but the parity bit is 8 bits, the effective length is 56 bits, and the possible number of keys is 2 to the 56th power.

It is theorized that, with a key length of about 56 bits such as DES, enormous costs are incurred, but brute force decryption will be possible at the current technology level.
However, if multiple encryption is performed using multiple independent keys,
Brute force decoding is not possible at the current technology level. However, given that computer processing power has improved so rapidly in the last decade or so, no matter how much encryption is used, it will not be possible to use brute force decryption in the future. could not say it all.

Further, the security is improved as the number of multiplexed encryptions is increased. However, if the conventional device is simply changed to the multiplexed encryption, the device scale and the processing time are greatly increased. Not desirable. The conventional technology for improving security such as CBC mode without multiple encryption is as follows.
It is disclosed in Japanese Patent Application Laid-Open No. Sho 52-130504 (encryption processing device) and Japanese Patent Publication No. 8-12537 (encryption device). The former updates key data used in the next encryption processing based on the result of encryption processing such as cipher text. In the latter, a plurality of intermediate keys are generated in advance from an encryption key and stored, and each intermediate key is updated based on each intermediate key update information generated by performing bit conversion using each intermediate key.

[0019]

However, in the above-mentioned conventional cryptographic processing apparatus, etc., it cannot be said that sufficient security has been secured, and further improvement in security is desired. Therefore, the present invention has been made in view of such a problem, and a cryptographic processing apparatus, a cryptographic processing method, and a cryptographic processing program capable of improving security without significantly increasing the apparatus scale, processing time, and the like. It is an object of the present invention to provide a storage medium in which is stored.

[0020]

In order to achieve the above object, an encryption processing apparatus according to the present invention is an encryption processing apparatus that performs encryption processing based on input data to generate output data. Storage means for storing chain data used to exert the influence of the data on subsequent data and updating the chain data each time encryption processing is performed; and merging the chain data stored in the storage means with the input data to generate the merged data. Fusion means for generating, and main encryption processing means for performing intermediate encryption processing based on the fusion data, generating output data, and outputting intermediate data generated in the process of generating output data, wherein the storage means It is characterized in that the intermediate data output from the main encryption processing means is updated as chain data stored therein as new chain data, and is used for the next encryption process.

According to this configuration, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with the input data such as the key data or the data to be encrypted in the subsequent encryption process. Since each time the cryptographic process is performed, the chain data is updated, each output data depends on all the data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the size of the device is reduced. Decryption becomes difficult even though the processing time and the like are not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, the safety can be improved without significantly increasing the device scale, the processing time, and the like.

[0022]

BEST MODE FOR CARRYING OUT THE INVENTION

(Embodiment 1) Embodiment 1 of the present invention performs an encryption process or a decryption process specified by key data (both encryption and decryption processes are referred to as “encryption processes”).
An encryption device that generates ciphertext data from plaintext data and a decryption device that generates plaintext data from ciphertext data (both encryption devices and decryption devices are referred to as “cipher processing devices that generate output data from data to be encrypted”). )
Each time an encryption process is performed on a block basis, an intermediate block generated in the process of performing the encryption process until one block of output data is generated is stored as a chain block, and stored when the next block is encrypted. This is a cryptographic processing device that fuses a chained block into key data.

<Configuration> (Configuration of Cryptographic Communication System) FIG. 1 is a diagram showing a configuration of a cryptographic communication system according to the first embodiment of the present invention.
This cipher communication system includes a transmitter 1 for encrypting and transmitting plaintext data and a receiver 2 for receiving and decrypting ciphertext data. The transmission path 3 for transmitting ciphertext data from the transmitter 1 to the receiver 2 is shown on the same figure. The transmitter 1 includes a data encryption device 10 and a transmission unit 11, as shown in FIG.

The data encryption device 10 obtains the plaintext data by encrypting each block of a predetermined number of bits according to a predetermined algorithm based on preset key data. Generate ciphertext data from The key data used here is secretly shared between the transmitter 1 and the receiver 2 in advance, the predetermined algorithm is device-specific, and the conversion family (famil) is used.
y), and this key data identifies one of the family
Two transformations are specified. The plaintext data is digital information obtained by digitally encoding voice, image information, character codes, and the like. Here, one block composed of a predetermined number of bits will be described as, for example, 64 bits. Transmission unit 1
1 transmits to the transmission line 3 transmission data obtained by modulating and amplifying ciphertext data. The receiver 2 includes a data decoding device 20 and a receiving unit 21 as shown in FIG.

The receiving section 21 receives the transmission data via the transmission path 3 and passes the demodulated ciphertext data to the data decryption device 20. The data decryption device 20 generates plaintext data from ciphertext data by decrypting each block according to a predetermined algorithm based on the key data. (Configuration of Data Encryption Device 10) FIG. 2 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 according to the first embodiment of the present invention.

The data encryption device 10 includes a block division unit 101, a block storage unit 102, a key data fusion unit 1
03, partial key generation unit 104, first to eighth encryption units 105a
105h, a fraction data processing unit 106 and a block combining unit 107. The relationship between the conventional encryption device 30 shown in FIG. 50 and the data encryption device 10 according to the first embodiment of the present invention shown in FIG. 2 is such that the exclusive OR unit 301 corresponds to the key data fusion unit 103, The encryption unit 302 includes a block division unit 101, a partial key generation unit 104,
Encryption units 105a to 105h, fraction data processing unit 106
The register 303 corresponds to the block storage unit 102.

The block dividing unit 101 divides the obtained plaintext data into units of 64-bit plaintext data (hereinafter, referred to as "plaintext blocks"), and sequentially passes them to the first encryption unit 105a. Finally, when fraction plaintext data of less than 64 bits is generated, the fraction plaintext data is passed to the fraction data processing unit 106. Here, as an example, 200-bit plaintext data is obtained, a first plaintext block of 1 to 64 bits from the beginning, a second plaintext block of 65 to 128 bits, a third plaintext block of 129 to 192 bits, and 193 to 193 bits. The first to third plaintext blocks are sequentially divided into 200-bit fractional plaintext data, and the fractional plaintext data is fractionally processed to the fractional data processing unit 106.
Shall be passed to

The block storage unit 102 stores a chain block used to apply the influence of the preceding block to the succeeding block when processing each block divided by the block dividing unit 101. When processing the first block, the initial value IV of the chained block is stored in advance.

The key data fusion unit 103 fuses the chained blocks stored in the block storage unit 102 with key data to generate fusion key data. Here, the preset 6
When 4-bit key data is obtained and the first plaintext block is processed, an exclusive OR operation is performed on the initial value IV of the 64-bit chain block and the 64-bit key data for each corresponding bit. When processing the second and third plaintext blocks, the 64-bit chain block generated during the processing of the first and second plaintext blocks and the 64-bit key data are exclusively processed for each corresponding bit. Performs OR operation.

The partial key generation unit 104 includes a key data fusion unit 1
03 generates partial keys corresponding to the number of encryption units from the fusion key data generated. Here, eight 48-bit partial keys are generated from the 64-bit fusion key data.

The first encryption unit 105a generates a first intermediate block from a plaintext block based on the first partial key. The second to seventh encryption units 105b to 105g generate the second to seventh intermediate blocks from the first to sixth intermediate blocks based on the second to seventh partial keys, respectively.

The eighth encryption unit 105h generates one block of ciphertext data (hereinafter, referred to as "ciphertext block") from the seventh intermediate block based on the eighth partial key.
The first to eighth encryption units 105a to 105h all have the same structure, and convert the upper 32 bits using the lower 32 bits of the 64-bit input by the conversion specified by the 48-bit partial key, Conversions for exchanging the upper 32 bits and the lower 32 bits are respectively performed in series, and this conversion is performed in a total of eight stages. Here, the first to seventh intermediate blocks and the first to third ciphertext blocks respectively corresponding to the first to third plaintext blocks are generated.

FIG. 3 shows the first to eighth encrypting units 105a to 105a.
It is a figure which shows the detailed structure of 5h.

The 64-bit plaintext block is divided into upper 32 bits and lower 32 bits.
0, the lower order is L0, and the input of the n-th encryption unit is ΔH (n−
1), L (n-1)}, and assuming that the output is (Hn, Ln), Hn and Ln are represented by the following (Equation 6) and (Equation 7). Hn = L (n-1) (Equation 6) Ln = H (n-1) (+) f {L (n-1), Kn} (Equation 7)

Here, “(+)” means an exclusive OR operation for each corresponding bit, “Kn” is a 48-bit partial key input to the n-th encryption unit, and “f” Is L
This is a function that outputs 32-bit data using (n-1) and Kn. FIG. 4 is a diagram showing a detailed configuration of a part for calculating the function “f”.

The 32-bit L (n-1) is expanded to 48 bits and rearranged by an expansion transposition E shown in (Table 1) below.

The numerical values in the table indicate the new bit positions at which the input bits are replaced. For example, the 32nd bit of the input is the 1st and 47th bits of the output, and the 1st bit of the input is
The bit is replaced by the second bit and the 48th bit of the output.

The 48 bits and the 48-bit partial key K
The exclusive OR EXOR operation is performed for each bit corresponding to n, and the result is further divided into eight sets of 6 bits each and input to eight selection functions S1 to S8.

The selection functions S1 to S8 (also called S boxes) are functions for inputting 6 bits and outputting 4 bits, and the processing contents can be represented by a substitution table. FIG. 5 is a diagram showing a substitution table of the selection functions S1 to S8.

One selection function has 64 numbers from 0 to 15, arranged in 4 rows and 16 columns. Input 6
The first and last bits of the bits identify the row of the substitution table, and the four bits except the first and last identify the columns.

For example, "011011" is added to the selection function S1.
Is input, the second row is specified from the first bit “0” and the last bit “1”, and the fourteenth bit is specified from the four bits “1101” excluding the first and last bits. Then, since the 2nd row and 14th column of the substitution table of the selection function S1 are “5”, “0”
101 "is output.

The outputs of a total of 32 bits (4 bits × 8 = 32 bits) output from the eight selection functions S1 to S8 are subjected to the transposition P shown in (Table 2) below to obtain “f ｛L (n−1) ,
Kn #}.

The numerical values in the table indicate the new bit positions at which the input bits are replaced. For example, the 16th bit of the input is the first bit of the output, and the 7th bit of the input is the second bit of the output. Be replaced.

The block storage unit 102 has a block updating function. Each time the fourth encryption unit 105d generates a fourth intermediate block, the fourth intermediate unit updates the chained block storing the fourth intermediate block as a new chained block. Then, it is used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first plaintext block, and the fourth intermediate block generated during this processing is updated as a new chain block. I do. Next, the chain block updated in the processing of the first plaintext block is used in processing the second plaintext block, and the fourth intermediate block generated in this processing is updated as a new chain block. Next, the chain block updated in the processing of the second plaintext block is used in processing the third plaintext block, and the fourth intermediate block generated in this process is updated as a new chain block. Finally, the chain block updated during the processing of the third plaintext block is used when processing the fractional plaintext data.

The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101 and, based on the chained blocks stored in the block storage unit 102, converts the fraction plaintext data into a fraction ciphertext having the same bit number as the fraction plaintext data. The data is generated by the data matching unit 106a.
And a fraction data fusion unit 106b.

FIG. 6 is a diagram showing a detailed configuration of the fraction data processing unit 106 shown in FIG. 2 according to the first embodiment of the present invention. The data matching unit 106 a
From the chained blocks stored in 2, fraction chained data having the same bit number as the fractional plaintext data is generated. Here, since the fractional plaintext data is 8 bits, the block storage unit 102
In this case, fractional chain data composed of, for example, upper 8 bits of the chained block stored in is generated.

The fraction data fusion unit 106b fuses the fraction chain data into the fraction plaintext data. Here, an exclusive OR operation is performed on the 8-bit fraction chain data and the 8-bit fraction plaintext data for each corresponding bit to generate 8-bit fraction ciphertext data.

The block combining section 107 is connected to the eighth encrypting section 1
Each ciphertext block generated by 05h and the fraction ciphertext data generated by the fraction data processing unit 106 are combined to generate ciphertext data. Here, the first to third bits of each 64 bits are used.
The ciphertext block and the 8-bit fractional ciphertext data are combined to generate 200-bit ciphertext data.

The block storage unit 102 updates the chained block to the fourth intermediate block generated by the fourth encryption unit 105d, but this is only an example, and any intermediate block generated in the process of processing is used. Since there may be
The first to seventh generated by the first to seventh encryption units 105a to 105g
It may be updated to another one of the seven intermediate blocks.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 2 is a diagram illustrating a detailed configuration of the data decoding device 20 illustrated in FIG. 1 according to Embodiment 1 of the present invention. The data decryption device 20 includes a block division unit 201, a block storage unit 202, a key data fusion unit 203, a partial key generation unit 204,
It comprises first to eighth decoding units 205a to 205h, a fraction data processing unit 206, and a block combining unit 207.

The relationship between the encryption device 30 shown in FIG. 50 and the data decryption device 20 shown in FIG.
1 corresponds to the key data fusion unit 203 and the data encryption unit 3
Reference numeral 02 corresponds to the block division unit 201, the partial key generation unit 204, the first to eighth decryption units 205a to 205h, the fraction data processing unit 206, and the block combination unit 207.
03 corresponds to the block storage unit 202.

The block dividing unit 201 divides the obtained ciphertext data into blocks each having 64 bits and transfers the block to the first decryption unit 205a. If fractional ciphertext data of less than 64 bits is generated at the end, The fraction ciphertext data is passed to the fraction data processing unit 206. Here, as an example, 200-bit ciphertext data is obtained, a first ciphertext block of 1 to 64 bits from the beginning, a second ciphertext block of 65 to 128 bits, and a third ciphertext of 129 to 192 bits. It is divided into blocks and fractional ciphertext data of 193 to 200 bits, and the first to third ciphertext blocks are passed to the first decryption unit 205a, and the fractional ciphertext data is passed to the fraction data processing unit 206.

The block storage unit 202 stores a chain block used to influence the previous block when processing each block divided by the block division unit 201. When processing the first block, the initial value IV of the chained block is stored in advance. The initial value IV is the same as that used in the data encryption device 10. Initial value IV used to encrypt certain plaintext data
And the initial value IV used for decrypting the ciphertext data corresponding to the plaintext data.

The key data fusion unit 203 fuses the chained blocks stored in the block storage unit 202 with key data to generate fusion key data. This fusion is the same as the fusion performed by the key data fusion unit 103 of the data encryption device 10. This key data is stored in the data encryption device 10.
It is the same as used in. The key data used for encrypting certain plaintext data and the key data used for decrypting ciphertext data corresponding to the plaintext data are the same.
Here, a predetermined 64-bit key data is obtained, and when the first ciphertext block is processed, the initial value IV of the 64-bit chain block and the 64-bit key data are converted into the corresponding bits for each corresponding bit. Perform exclusive OR operation on
When processing the second and third ciphertext blocks, the 64-bit chain block and the 64-bit key data generated during the processing of the first and second ciphertext blocks are exclusively processed for each corresponding bit. Performs OR operation.

The partial key generation unit 204 includes a key data fusion unit 2
03 generates partial keys corresponding to the number of decryption units from the fusion key data generated. Here, eight 48-bit partial keys are generated from the 64-bit fusion key data. Note that the function of generating the partial key is performed by the data encryption device 1.
This is exactly the same as that performed by the partial key generation unit 104 of 0.

The first decryption unit 205a generates a seventh intermediate block from a ciphertext block based on the eighth partial key. The second to seventh decryption units 205b to 205g generate the sixth to first intermediate blocks from the seventh to second intermediate blocks based on the seventh to second partial keys, respectively.

The eighth decryption unit 205h generates a plaintext block from the first intermediate block based on the first partial key. The first to eighth decoding units 205a to 205h have the same structure, and convert the upper 32 bits using the lower 32 bits of the 64-bit input by the conversion specified by the 48-bit partial key, Upper 32 bits and lower 32
Conversions for exchanging bits are performed in series, and this conversion is performed for a total of eight stages. Here, the seventh to first intermediate blocks and the first to third plaintext blocks are respectively generated from the first to third ciphertext blocks. Note that the first to first
The conversions performed by the 8 decryption units 205a to 205h are performed by the 8th to 1st encryption units 105h to 105h of the data encryption device 10, respectively.
This is the inverse of the conversion performed by 105a.

The block storage unit 202 has a block updating function. Every time the fourth decoding unit 205d generates a fourth intermediate block, the fourth intermediate unit updates the chained block storing the fourth intermediate block as a new chained block. Then, it is used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the fourth intermediate block generated during this processing is used as a new chain block. Remember. Next, the chain block updated during the processing of the first ciphertext block is used when processing the second ciphertext block, and the fourth intermediate block generated at the time of this processing is used as a new chain block. Remember. Next, the chained block stored in the processing of the second ciphertext block is the third block.
Used when processing a ciphertext block, the fourth intermediate block generated during this processing is stored as a new chained block. Finally, the chain block stored during the processing of the third ciphertext block is used when processing the fractional ciphertext data.

The fraction data processing unit 206 receives the fraction cipher text data from the block dividing unit 201 and, based on the chained blocks stored in the block storage unit 202, converts the fraction cipher text data into the same number of bits as the fraction cipher text data. The data matching unit 20 generates fractional plaintext data.
6a and a fraction data fusion unit 206b.

FIG. 8 is a diagram showing a detailed configuration of the fraction data processing unit 206 shown in FIG. 7 according to the first embodiment of the present invention. The data matching unit 206 a
From the chained blocks stored in 2, fraction chained data having the same bit number as the fraction ciphertext data is generated. here,
Since the fraction cipher data is 8 bits, the block storage unit 2
For example, fraction chain data composed of upper 8 bits of the chain block stored in 02 is generated.

The fraction data fusion unit 206b fuses the fraction chained data into the fraction ciphertext data. Here, an exclusive-OR operation is performed on the 8-bit fraction chain data and the 8-bit fraction ciphertext data for each corresponding bit,
Generate 8-bit fractional plaintext data.

The block combining section 207 is connected to the eighth decoding section 2
Each block of the plaintext data generated by 05h and the fractional plaintext data generated by the fraction data processing unit 206 are combined to generate plaintext data. Here, the first to 64 bits are
The 3-plaintext data and the 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

Note that the block storage unit 202 has updated the chained block to the fourth intermediate block generated by the fourth decoding unit 205d, but this is only an example, and any intermediate block generated during the processing is used. Since there may be
The first to seventh generated by the first to seventh decoding units 205a to 205g
It may be updated to another one of the seven intermediate blocks. However, it is necessary to update to the same intermediate block as the block storage unit 102 of the data encryption device 10.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 9 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the first embodiment of the present invention. Here, as an example, a description will be given in accordance with the DES algorithm assuming that 200-bit plaintext data is obtained and the initial value IV is stored in the block storage unit 102 in advance.

(1) The block division unit 101 determines whether or not the unprocessed portion of the obtained plaintext data has 64 bits or more (step S101). Here, the first time
The unprocessed portion of the obtained plaintext data is 200 bits, so 6
It is determined that the number of bits is 4 bits or more (step S101: first time).

(2) If the unprocessed portion of the plaintext data is 64 bits or more, 64 bits are separated from the head of the unprocessed portion (step S102). Here, 1 to 64 bits counted from the head of the 200 bits are separated as the first plaintext block (step S102: first time).

(3) The key data fusion unit 103 fuses the chained blocks stored in the block storage unit 102 with key data to generate fusion key data (step S103).
Here, the initial values IV and 6 of the 64-bit chain block are set.
The exclusive-OR operation is performed on the 4-bit key data for each corresponding bit to generate fusion key data and pass it to the partial key generation unit 104 (step S103: first time).

(4) The partial key generation unit 104 generates a number of partial keys corresponding to the number of encryption units from the fusion key data (step S104). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S104: first time). The procedure for generating the first to eighth 8 × 48-bit partial keys from the 64-bit key data including 8 parity bits is, for example, as follows.

The 64-bit key data including the parity bit is transposed by the transposition shown in (Table 3) into 56 bits with the parity bit removed.

The numerical values in the table indicate the new bit positions where the input bits are replaced. For example, the 57th bit of the input is the first bit in the output, and the 49th bit of the input is the second bit in the output. Be replaced.

Of the 56 bits, the first 28 bits are C0 and the second 28 bits are D0, and C0 and D0 are shifted to the left by the number of shifts shown in (Table 4) to obtain C1 to C8 and D1. To D8. (Table 4) Partial key number 1 2 3 4 5 6 7 8 8 Number of shifts 2 4 8--------------------- 12 16 20 24 26 ----------------------------------------- For example, C0 = (c1 c2 c3... C26
c27 c28), C1 = (c3 c4 c5
... c28 c1 c2). Next, each of the 56 bits becomes 48 bits by the transposition shown in (Table 5).

The numerical values in the table indicate the new bit positions at which the input bits are replaced. For example, the 14th bit of the input is the first bit of the output, and the 17th bit of the input is the second bit of the output. Be replaced.

(5) The first encryption unit 105a generates a first intermediate block from a plaintext block based on the first partial key (step S105). Here, a first intermediate block is generated from the first plaintext block (step S1).
05: the first time).

(6) Second to fourth encryption units 105b to 105
d is based on the second to fourth partial keys, respectively,
The second to fourth intermediate blocks are generated from the intermediate blocks (step S106). Here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the first plaintext block (step S106: first time).

(7) The block storage unit 102 updates the stored chain block with the fourth intermediate block as a new chain block (step S107). Here, it is updated to a fourth intermediate block corresponding to the first plaintext block (step S107: first time).

(8) Fifth to seventh encryption units 105e to 105
g is the fourth to sixth keys based on the fifth to seventh partial keys, respectively.
The fifth to seventh intermediate blocks are generated from the intermediate blocks (step S108). Here, the fifth to seventh intermediate blocks are generated from the fourth and sixth intermediate blocks corresponding to the first plaintext block (step S108: first time).

(9) The eighth encryption unit 105h generates a ciphertext block from the seventh intermediate block based on the eighth partial key (step S109). Here, the first ciphertext block is generated from the seventh intermediate block corresponding to the first plaintext block (step S109: first time).

(10) It is determined whether there is any unprocessed plaintext data. If there is still unprocessed data, the next plaintext block or fractional plaintext data is processed in step S10.
It returns to 1 (step S110). Here, since there is still an unprocessed portion, the process returns to step S101 (step S11).
0: the first time).

(11) In step S101, here, 64 bits are separated from the 200-bit plaintext data for the first time, and the rest is 136 bits. Therefore, it is determined that the number is 64 bits or more (step S101: second time).

(12) In step S102, here, 65 to 12 counting from the head of the first 200 bits
8 bits are separated as a second plaintext block (step S102: second time).

(13) In step S103, the 64-bit chain block generated in the processing of the first plaintext block and the 64-bit key data are exclusive-ORed for each corresponding bit. To generate the fusion key data and pass it to the partial key generation unit 104 (step S
103: 2nd time).

(14) In step S104, here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S104: second time).

(15)-(19) In steps S105-S109, the second plaintext block is
The same processing as the first plaintext block is performed to generate first to seventh intermediate blocks and ciphertext blocks corresponding to the second plaintext block, and the chained block stored in the block storage unit 102 corresponds to the second plaintext block. (Steps S105 to S109:
The second).

(20) In step S110, since there is still unprocessed plaintext data, step S110 is executed.
It returns to 101 (step S110: 2nd time).

(21) In step S101, here, 64 bits are separated from the 136-bit plaintext data for the second time, and the rest are 72 bits. Therefore, it is determined that the number is 64 bits or more (step S101: third time).

(22) In step S102, here, 129 to 1 counted from the head of the first 200 bits
The 92 bits are separated as a third plaintext block (step S102: third time).

(23) In step S103, an exclusive OR operation is performed on the chained block generated during the processing of the second plaintext block and the 64-bit key data for each corresponding bit. The fusion key data is generated and passed to the partial key generation unit 104 (step S103: third time).

(24) In step S104, here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S104: third time).

(25)-(29) In steps S105-S109, for the third plaintext block,
The same processing as the first plaintext block is performed to generate first to seventh intermediate blocks and ciphertext blocks corresponding to the third plaintext block, and the chained block stored in the block storage unit 102 corresponds to the third plaintext block. (Steps S105 to S109:
Third time).

(30) In step S110, since there is still unprocessed plaintext data, step S110
It returns to 101 (step S110: 3rd time).

(31) In step S101, here, 64 bits are separated from the 72-bit plaintext data for the third time, and the rest is 8 bits, so it is determined that it is less than 64 bits (step S101: fourth time) .

(32) If the unprocessed portion of the plaintext data is less than 64 bits, the unprocessed portion is converted to the fraction data processing unit 10
6 (step S111). Here, the first 20
193 to 200 bits counted from the beginning of 0 bits are passed to the fraction data processing unit 106 as fraction plaintext data.

(33) The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101 and, based on the chained blocks stored in the block storage unit 102, converts the fraction plaintext data to the same number of bits as the fraction plaintext data. The fraction ciphertext data is generated (step S112).
Here, the upper 8 bits and the 8-bit fractional plaintext data of the 64-bit chain block generated at the time of processing the third plaintext block stored in the block storage unit 102 are stored for each corresponding bit. An exclusive OR operation is performed to generate 8-bit fractional ciphertext data.

(34) If it is determined in step S110 that there is no unprocessed plaintext data, or
After the generation of the fraction ciphertext data in 112, the block combining unit 107 combines the ciphertext blocks generated by the eighth encryption unit 105h and the fraction ciphertext data generated by the fraction data processing unit 106 to generate the ciphertext data. It is generated (step S113). Here, the ciphertext blocks corresponding to the first to third plaintext blocks and the fraction ciphertext data are combined to generate 200-bit ciphertext data.

(Operation of Data Decoding Device 20) FIG.
FIG. 4 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the first embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Here, as an example, it is assumed that 200-bit ciphertext data is obtained, and the initial value IV is previously stored in the block storage unit 202, similarly to the block storage unit 102 of the data encryption device 10. The description will be made according to the DES algorithm.

(1) The block division unit 201 determines whether or not the unprocessed portion of the obtained ciphertext data has 64 bits or more (step S201). Here, in the first time, since the unprocessed portion of the obtained encrypted data is 200 bits, it is determined to be 64 bits or more (step S201: 1).
Times).

(2) If the unprocessed portion of the ciphertext data is 64 bits or more, 64 bits are separated from the head of the unprocessed portion (step S202). Here, 1 to 64 bits counted from the beginning of the 200 bits are separated as the first ciphertext block (step S202: first time).

(3) The key data fusion unit 203 fuses the chained blocks stored in the block storage unit 202 with key data to generate fusion key data (step S203).
Here, the initial values IV and 6 of the 64-bit chain block are set.
The exclusive-OR operation is performed on the 4-bit key data for each corresponding bit to generate fusion key data and pass it to the partial key generation unit 204 (step S203: first time).

(4) The partial key generation unit 204 generates a number of partial keys corresponding to the number of decryption units from the fusion key data (step S204). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S204: first time). From 64-bit key data including 8 parity bits, 8 × 48 from the first to eighth key data
The procedure for generating a bit partial key is as follows:
0 is the same as the partial key generation unit 104.

(5) The first decryption unit 205a generates a seventh intermediate block from a ciphertext block based on the eighth partial key (step S205). Here, a seventh intermediate block is generated from the first ciphertext block (step S205: first time).

(6) Second to fourth decoding units 205b to 205
d is the seventh through fifth partial keys based on the seventh through fifth partial keys, respectively.
The sixth to fourth intermediate blocks are generated from the intermediate blocks (step S206). Here, the sixth to fourth intermediate blocks are generated from the seventh to fifth intermediate blocks corresponding to the first ciphertext block (step S206: first time).

(7) The block storage unit 202 updates the stored chain block with the fourth intermediate block generated by the fourth decoding unit 205d as a new chain block (step S207). Here, it is updated to a fourth intermediate block corresponding to the first ciphertext block (step S2).
07: the first time).

(8) Fifth to seventh decoding units 205e to 205
g is based on the fourth to second partial keys, respectively,
The third to first intermediate blocks are generated from the intermediate blocks (step S208). Here, the third to first intermediate blocks are generated from the fourth and second intermediate blocks corresponding to the first ciphertext block (step S208: first time).

(9) The eighth decryption unit 205h generates a plaintext block from the first intermediate block based on the first partial key (step S209). Here, a plaintext block is generated from the first intermediate block corresponding to the first ciphertext block (step S209: first time).

(10) It is determined whether there is any unprocessed ciphertext data. If there is an unprocessed portion, the process returns to step S201 to process the next ciphertext block or fractional ciphertext data (step S210). Here, since there is still an unprocessed portion, the process returns to step S201 (step S210: first time).

(11) In step S201, 64 bits are separated from the 200-bit ciphertext data at the first time, and the rest is 136 bits.
It is determined that the number is equal to or more than the bit (step S201: second time).

(12) In step S202, here, 65 to 12 counting from the beginning of the first 200 bits
8 bits are separated as a second ciphertext block (step S202: second time).

(13) In step S203, here, the 64 generated at the time of processing the first ciphertext block is used.
The exclusive-OR operation is performed on the bit chain block and the 64-bit key data for each corresponding bit to generate fusion key data and pass it to the partial key generation unit 204 (step S203: second time).

(14) In step S204, here, eight 48-bit partial keys are generated from the 64-bit fused key data (step S204: second time).

(15) to (19) In steps S205 to S209, the same processing as that of the first ciphertext block is performed on the second ciphertext block, and the seventh to first intermediate blocks corresponding to the second ciphertext block are performed. And a plaintext block, and updates the chained block stored in the block storage unit 202 to a fourth intermediate block corresponding to the second ciphertext block (steps S205 to S205).
209: 2nd time).

(20) In step S210, since there is still unprocessed ciphertext data, the process returns to step S201 (step S210: second time).

(21) In step S201, here, 64 bits are separated from the 136-bit ciphertext data for the second time, and the remaining is 72 bits. Therefore, it is determined that the number is 64 bits or more (step S201: third time).

(22) In step S202, here, 129 to 1 counted from the head of the first 200 bits
92 bits are separated as a third ciphertext block (step S202: third time).

(23) In step S203, an exclusive OR operation is performed on the chain block generated in the processing of the second ciphertext block and the 64-bit key data for each corresponding bit. Generates the fusion key data and passes it to the partial key generation unit 204 (step S203: 3)
Times).

(24) In step S204, here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S204: third time).

(25)-(29) In steps S205-S209, the same processing as that of the first ciphertext block is performed on the third ciphertext block, and the seventh to first intermediate blocks corresponding to the third ciphertext block are processed. And a plaintext block, and updates the chained block stored in the block storage unit 202 to a fourth intermediate block corresponding to the third ciphertext block (steps S205 to S205).
209: 3rd time).

(30) In step S210, the process returns to step S201 because there is still unprocessed ciphertext data (step S210: third time).

(31) In step S201, here, 64 bits are separated from the 72-bit ciphertext data for the third time, and the rest is 8 bits, so that it is determined that it is less than 64 bits (step S201: fourth time) ).

(32) If the unprocessed portion of the ciphertext data is less than 64 bits, the unprocessed portion is converted to the fraction data processing unit 2
06 (step S211). Here, the first two
193 to 200 bits counted from the beginning of the 00 bits are passed to the fraction data processing unit 206 as fraction ciphertext data.

(33) The fraction data processing unit 206 receives the fraction cipher text data from the block dividing unit 201 and, based on the chained blocks stored in the block storage unit 202, converts the fraction cipher text data to the same as the fraction cipher text data. Generate fractional plaintext data of the bit number (step S21)
2). Here, the upper 8 bits and the 8-bit fractional ciphertext data in the 64-bit chain block generated at the time of processing the third ciphertext block stored in the block storage unit 202 are stored in the corresponding bits. An exclusive OR operation is performed every time to generate 8-bit fraction plaintext data.

(34) If it is determined in step S210 that there is no unprocessed ciphertext data, or after the generation of the fractional plaintext data in step S212, the block combining unit 207 causes the plaintext block and the fractional data processing to be performed. The plaintext data generated by the unit 206 is combined to generate plaintext data (step S213). Here, the first to third
The plaintext block and the fractional plaintext data respectively corresponding to the ciphertext blocks are combined to generate 200-bit plaintext data.

The cryptographic processing apparatus according to the first embodiment stores intermediate blocks generated in the process of performing cryptographic processing on a previous block as chained blocks, and merges them with key data at the time of subsequent cryptographic processing. Each time the encryption process is performed, the chain block is updated.

(Embodiment 2) Embodiment 2 of the present invention
Is that the stored chained block is not fused to the key data, but to the data to be encrypted or the data after the encryption processing is performed on the data to be encrypted.
And different.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Device 10) FIG. 11 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 according to the second embodiment of the present invention.

The same components as those of the data encryption device 10 shown in FIG.
The description of the components having the same functions is omitted. The data encryption device 10 includes a block division unit 101, a block storage unit 102, a partial key generation unit 104, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combination unit 107, and a block fusion unit 108. It consists of.

The conventional encryption device 30 shown in FIG.
1, the exclusive OR section 301 corresponds to the block fusion section 108, the data encryption section 302 corresponds to the block division section 101, and the partial key generation. The register 104 corresponds to the block storage unit 102, and corresponds to the unit 104, the first to eighth encryption units 105a to 105h, the fraction data processing unit 106, and the block combining unit 107.

[0128] The block dividing section 101 sends the divided block to the block combining section 1 without passing it to the first encrypting section 105a.
The second embodiment is different from the first embodiment only in that the data is passed to the step 08. The block fusion unit 108 fuses the chained blocks stored in the block storage unit 102 into plaintext blocks to generate a fused plaintext block. Here, when the first plaintext block is processed, the initial value IV of the 64-bit chain block and the 64-bit first plaintext block are subjected to an exclusive OR operation for each corresponding bit, and the 64-bit first block is processed. When generating the first fused plaintext block and processing the second and third plaintext blocks,
The 64-bit chained block generated in the processing of the first and second plaintext blocks and the 64-bit second and third plaintext blocks are subjected to an exclusive OR operation for each corresponding bit, and the 64-bit second block is processed. Generate a ~ 3 fused plaintext block.

The partial key generation unit 104 generates a number of partial keys corresponding to the number of encryption units from the key data. Here, a 64-bit key data set in advance is obtained, and 6-bit key data is acquired.
Eight 48-bit partial keys are generated from the 4-bit key data. The first encryption unit 105a generates the first intermediate block not from the plaintext block but from the fused plaintext block generated by the block fusion unit 108.

The first to eighth encryption units 105a to 105h
It has the same functions as those of the first embodiment. Here, the first to seventh intermediate blocks and the first to third ciphertext blocks respectively corresponding to the first to third fused plaintext blocks are generated.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 14 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 according to Embodiment 2 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 7 in the first embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted.

This data decryption device 20 includes a block division unit 201, a block storage unit 202, a partial key generation unit 20
4, the first to eighth decoding units 205a to 205h, the fraction data processing unit 206, the block combination unit 207, and the block fusion unit 208. The partial key generation unit 204 generates a number of partial keys corresponding to the number of decryption units from the key data. Here, 64-bit key data set in advance is obtained, and eight 48-bit partial keys are generated from the 64-bit key data. The function to generate this partial key is as follows:
This is exactly the same as that performed by the partial key generation unit 104 of the data encryption device 10.

The eighth decryption unit 205h generates an encryption processing block from the first intermediate block based on the first partial key. The first to eighth decoding units 205a to 205h have the same functions as those of the first embodiment. here,
From the first to third ciphertext blocks, the first
To 7 intermediate blocks and first to third cryptographic processing blocks.

The block fusion unit 208 fuses the chained blocks stored in the block storage unit 202 with the cryptographic processing block to generate a plaintext block. Here, when processing the first ciphertext block, an exclusive OR operation is performed on the initial value IV of the 64-bit chain block and the 64-bit first cryptographic processing block for each corresponding bit. When generating the first plaintext block of bits and processing the second and third ciphertext blocks, the 64-bit chain block generated during the processing of the first and second ciphertext blocks and 6
An exclusive OR operation is performed on the 4-bit second and third encryption processing blocks for each corresponding bit, and a 64-bit second
Generate ~ 3 plaintext blocks.

The block combining section 207 combines each block of the plaintext data generated by the block fusion section 208 and the fractional plaintext data generated by the fractional data processing section 206 to generate plaintext data. Here, the first to 64 bits are
The 3-plaintext data and the 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 13 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the second embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 9 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted.

(1) and (2) Same as in the first embodiment (step S101, step S102: first time).

(3) The partial key generation unit 104 generates a number of partial keys corresponding to the number of encryption units from the key data (step S301). Here, a 64-bit key data set in advance is obtained, and 48 bits are obtained from the 64-bit key data.
Eight bit partial keys are generated (step S301: 1)
Times).

(4) The block merging section 108 merges the chained blocks stored in the block storage section 102 into plaintext blocks to generate a merged plaintext block (step S).
302). Here, the initial value IV of the 64-bit chained block and the 64-bit first plaintext block are subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit first fused plaintext block (step S302: First time).

(5) The first encryption unit 105a generates a first intermediate block from the fused plaintext block based on the first partial key (step S303). Here, a first intermediate block is generated from the first fused plaintext block (step S303: first time).

(6) to (12) Same as in the first embodiment (steps S106 to S110: first time, step S101, step S102: second time).

(13) In step S301, here, eight 48-bit partial keys are generated from 64-bit key data. If there is no change in the key data, the process is exactly the same as the first time, so each partial key may be stored (step S301: second time).

(14) In step S302, the 64-bit chain block generated in the processing of the first plaintext block and the 64-bit second plaintext block are exclusive-ORed for each corresponding bit. , And
A 64-bit second fused plaintext block is generated (step S302: second time).

(15) In step S303, a first intermediate block is generated from the second fused plaintext block (step S303: second time).

(16)-(22) Same as in the first embodiment (steps S106-S110: second time,
Step S101, Step S102: Third time).

(23) In step S301, here, eight 48-bit partial keys are generated from 64-bit key data. If there is no change in the key data, the process is exactly the same as the first process, so each partial key may be stored (step S301: third time).

(24) In step S302, the 64-bit chain block generated in the processing of the second plaintext block and the 64-bit third plaintext block are exclusive-ORed for each corresponding bit. , And
A 64-bit third plaintext block is generated (step S302: third time).

(25) In step S303, here, a first intermediate block is generated from the third fused plaintext block (step S303: third time).

(26) to (34) The same as the first embodiment (steps S106 to S110: the third time,
Step S101: fourth time, steps S111 to S113).

(Operation of Data Decoding Apparatus 20) FIG.
FIG. 9 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the second embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Steps common to those of data decoding apparatus 20 shown in FIG. 10 in the first embodiment are denoted by the same reference numerals, and description thereof is omitted. (1)-(2) Same as the first embodiment (step S
201 to step S202: first time).

(3) The partial key generation unit 204 generates a number of partial keys corresponding to the number of decryption units from the key data (step S401). Here, a 64-bit key data set in advance is obtained, and 48 bits are obtained from the 64-bit key data.
Eight bit partial keys are generated (step S401: 1)
Times).

(4) to (6) Embodiment (5),
This is the same as (6) and (8) (step S205, step S206, step S208: first time).

(7) The eighth decryption unit 205h generates an encryption processing block from the first intermediate block based on the first partial key (Step S402). Here, the first cipher processing block is generated from the first intermediate block corresponding to the first ciphertext block (step S402: first time).

(8) The block fusion unit 208 fuses the chained block stored in the block storage unit 202 with the cryptographic processing block to generate a plaintext block (step S4).
03). Here, the exclusive OR of the initial value IV of the 64-bit chained block and the 64-bit first cryptographic processing block is performed for each corresponding bit, and the 64-bit first bit is processed.
A plaintext block is generated (step S403: first time).

(9) Same as (7) of the first embodiment (step S207: first time).

(10) to (12) Same as in the first embodiment (step S210: first time, steps S201 to S201)
Step S202: second time).

(13) In step S401, here, eight 48-bit partial keys are generated from 64-bit key data. If there is no change in the key data, the process is exactly the same as the first time, so each partial key may be stored (step S401: second time).

(14)-(16) In the first embodiment, (1)
5), (16), and (18) (Step S2)
05, step S206, step S208: second time).

(17) In step S402, a second cryptographic processing block is generated from the first intermediate block corresponding to the second ciphertext block (step S40).
2: Second time).

(18) In step S403, here, the 64 generated at the time of processing the first ciphertext block is used.
An exclusive-OR operation is performed on the chained bits block and the 64-bit second cryptographic processing block for each corresponding bit to generate a 64-bit second plaintext block (step S403: second time).

(19) This is the same as (17) of the first embodiment (step S207: second time). (20) to (22) Same as in the first embodiment (step S210: second time, steps S201 to S2
02: 3rd time).

(23) In step S401, here, eight 48-bit partial keys are generated from 64-bit key data. If there is no change in the key data, the process is exactly the same as the first time, so each partial key may be stored (step S401: third time). (24) to (26) Embodiments (25) and (2)
6) and (28) (step S205, step S206, step S208: third time).

(27) In step S402, a third cryptographic processing block is generated from the first intermediate block corresponding to the third ciphertext block (step S40).
2: Third time).

(28) In step S403, here, the 64 generated at the time of processing the second ciphertext block is used.
An exclusive OR operation is performed on the chained bits block and the 64-bit third encryption processing block for each corresponding bit to generate a 64-bit third plaintext block (step S403: third time).

(29) This is the same as (27) of the first embodiment (step S207: third time). (30) to (34) The same as in the first embodiment (step S210: third time, step S201: fourth time, steps S211 to S213). The cryptographic processing device according to the second embodiment stores an intermediate block generated in a process of performing cryptographic processing on a previous block as a chained block, and fuses the intermediate block with a plaintext block or a cryptographic processing block during the subsequent cryptographic processing. Then, each time the encryption processing is performed, the chain block is updated.

(Embodiment 3) The data encryption device 10 of Embodiment 3 of the present invention is different from that of Embodiment 1 only in the input of the fifth encryption section 105e. The input of the fifth encryption unit 105e in the first embodiment is the output of the fourth encryption unit 105d, but the input in the third embodiment is a plaintext block. Therefore, the chained block and the plaintext block are processed by different encryption units.

Also, the data decryption device 20 according to the third embodiment of the present invention is a reverse conversion of the data
The data of the first embodiment is that the output of the fourth decryption unit 205d is a plaintext block, and the plaintext block is encrypted as in the data encryption device 10 and the fourth intermediate block generated and stored as a new chain block. Decryption device 20
And different.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Device 10) FIG. 15 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 according to the third embodiment of the present invention. FIG. 2 in Embodiment 1
The same reference numerals are given to the same components as those of the data encryption device 10 shown in FIG.

The configuration of this data encryption device 10 is the same as that of the first embodiment, except that the fifth encryption unit 105e generates the fifth intermediate block from a plaintext block instead of the fourth intermediate block. Different from the form 1.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 14 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 according to Embodiment 3 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 7 in the first embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted.

The data decrypting apparatus 20 includes a block dividing section 201, a block storing section 202, a key data fusing section 2
03, partial key generation unit 204, first to fourth decryption units 205a
To 205d, first to fourth encryption units 205i to 205l, a fraction data processing unit 206, and a block combining unit 207.

The fourth decryption section 205d generates a plaintext block from the fifth intermediate block based on the fifth partial key. Here, the first to third plaintext blocks are generated from the fifth intermediate blocks respectively corresponding to the first to third ciphertext blocks. Note that the conversions performed by the first to fourth decryption units 205a to 205d are respectively performed by the eighth to
5 is a reverse conversion of the conversion performed by the encryption units 105h to 105e.

The first encryption unit 205i generates a first intermediate block from the plaintext block generated by the fourth decryption unit 205d based on the first partial key. The second to fourth encryption units 205j to 205l generate the second to fourth intermediate blocks from the first to third intermediate blocks based on the second to fourth partial keys, respectively.

The first to fourth encryption units 205i to 205l
The first to fourth encryption units 10 of the data encryption device 10 respectively
It has the same function as 5a-105d, and its operation is exactly the same. Here, first to fourth intermediate blocks corresponding to the first to third plaintext blocks are generated. The block storage unit 202 has a block update function. Each time the fourth encryption unit 205l generates a fourth intermediate block, the fourth encryption unit 205l updates a chained block that stores the fourth intermediate block as a new chained block. Used when processing the block. The operation here is the same as in the first embodiment.

[0176] The block combining section 207 is the fourth decoding section 2
Each block of the plaintext data generated by 05d and the fractional plaintext data generated by the fraction data processing unit 206 are combined to generate plaintext data. Here, the first to 64 bits are
The 3-plaintext data and the 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 17 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the third embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 9 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted.

(1) to (7) Same as in the first embodiment (steps S101 to S107: first time). (8) The fifth to seventh encrypting units 105e to 105g respectively generate a plaintext block and a fifth plaintext block based on the fifth to seventh partial keys.
The fifth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks (step S501). Here, the fifth to seventh intermediate blocks are generated from the first plaintext block and the fifth to sixth intermediate blocks corresponding to the first plaintext block (step S50).
1: 1).

(9)-(17) Same as in the first embodiment (step S109, step S110: first time, steps S101-S107: second time). (18) In step S501, here, the fifth to seventh intermediate blocks are generated from the second plaintext block and the fifth to sixth intermediate blocks corresponding to the second plaintext block (step S501: second time).

(19)-(27) The same as the first embodiment (step S109, step S110: second time,
Step S101 to step S107: third time). (28) In step S501, here, the third plaintext block and the fifth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks corresponding to the third plaintext block (step S501: third time).

(29) to (34) The same as in the first embodiment (step S109, step S110: third time,
Step S101: fourth time, steps S111 to S113). (Operation of Data Decoding Device 20)

FIG. 18 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the third embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10. FIG. 1 in Embodiment 1
Steps common to those of the operation of the data decoding device 20 indicated by 0 are denoted by the same reference numerals, and description thereof will be omitted.

(1) to (5) Same as in the first embodiment (steps S201 to S205: first time). (6) The second to fourth decryption units 205b to 205d generate a sixth intermediate block, a fifth intermediate block, and a plaintext block from the seventh to fifth intermediate blocks based on the seventh to fifth partial keys, respectively ( Step S601). Here, the first
A sixth intermediate block, a fifth intermediate block, and a first plaintext block are generated from the seventh to fifth intermediate blocks corresponding to the ciphertext blocks (step S601: first time).

(7) The first encryption unit 205i generates a first intermediate block from the plaintext block generated by the fourth decryption unit 205d based on the first partial key (Step S).
602). Here, a first intermediate block is generated from the first plaintext block (step S602: first time). (8) The second to fourth encryption units 205j to 205l generate the second to fourth intermediate blocks from the first to third intermediate blocks based on the second to fourth partial keys, respectively (step S60).
3). Here, the first to third blocks corresponding to the first plaintext block
The second to fourth intermediate blocks are generated from the intermediate blocks (step S603: first time).

(9) The block storage unit 202 updates the stored chain block with the fourth intermediate block generated by the fourth encryption unit 205l as a new chain block (step S604). Here, it is updated to a fourth intermediate block corresponding to the first plaintext block (step S60).
4: First time). (10) to (15) Same as in the first embodiment (step S210: first time, steps S201 to S2
05: 2nd time).

(16) In step S601, here, from the seventh to fifth intermediate blocks corresponding to the second ciphertext block to the sixth intermediate block, the fifth intermediate block, and the second
A plaintext block is generated (step S601: second time). (17) In step S602, a first intermediate block is generated from the second plaintext block (step S602: second time).

(18) In step S603, here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the second plaintext block (step S6).
03: 2nd time). (19) In step S604, update to a fourth intermediate block corresponding to the second plaintext block here (step S604: second time).

(20) to (25) The same as in the first embodiment (step S210: second time, steps S201 to S201)
Step S205: third time). (26) In step S601, here, from the seventh to fifth intermediate blocks corresponding to the third ciphertext block to the sixth
An intermediate block, a fifth intermediate block, and a third plaintext block are generated (step S601: third time). (27) In step S602, a first intermediate block is generated from the third plaintext block (step S602: third time).

(28) In step S603, here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the third plaintext block (step S6).
03: Third time). (29) In step S604, update to a fourth intermediate block corresponding to the third plaintext block here (step S604: third time).

(30) to (34) The same as in the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213). The cryptographic processing apparatus according to the third embodiment stores an intermediate block generated in a process of performing encryption processing on a previous block as a chained block, fuses the intermediate block with key data at the time of subsequent encryption processing, and performs encryption processing. Each time is performed, the chained block is updated.

In the third embodiment, the above-described change is made to the first embodiment in which a chained block is merged with key data. However, the second embodiment in which a chained block is merged with a plaintext block or a cryptographic processing block is described. Alternatively, the above change may be similarly performed. Such a cryptographic processing device stores an intermediate block generated in a process of performing cryptographic processing on a previous block as a chained block, and fuses the intermediate block with a plaintext block or a cryptographic processing block in a subsequent cryptographic process, Each time the encryption process is performed, the chain data is updated.

(Embodiment 4) Embodiment 4 of the present invention
Reverses the order of the first to fourth encryption units for encrypting the data to be fused and the block storage unit for storing the chained blocks when the second embodiment is changed as in the third embodiment. Thus, the block after or before the fusion is stored as a new chain block.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and a description thereof will be omitted. (Configuration of Data Encryption Apparatus 10) FIG. 19 is a diagram showing a detailed configuration of data encryption apparatus 10 shown in FIG. 1 according to the fourth embodiment of the present invention.

In the second embodiment, the same components as those of the data encryption device 10 shown in FIG. 11 are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. The data encryption device 10 includes a block division unit 101, a block storage unit 102, a partial key generation unit 104, first to eighth encryption units 105a to 105h, a fraction data processing unit 106,
It comprises a block combining unit 107 and a block fusing unit 108.

The first encryption unit 105a generates the first intermediate block from the chained block stored in the block storage unit 102, not from the fused plaintext block. First to fourth
The encryption units 105a to 105d have the same functions as those of the second embodiment. Here, from the chain block,
The first to third intermediate blocks and the encryption processing blocks corresponding to each are generated. The block fusion unit 108 fuses the cryptographic processing block generated by the fourth encryption unit 105d into a plaintext block to generate a fourth intermediate block. Here, when the first plaintext block is processed, the 64-bit first cryptographic processing block and the 64-bit first plaintext block generated from the initial value IV of the chained block are exclusively processed for each corresponding bit. When performing OR operation and processing the second and third plaintext blocks, the 64-bit second and third cryptographic processing blocks generated during the processing of the first and second plaintext blocks and the 64-bit second The exclusive OR operation is performed on the corresponding ~ 3 plaintext blocks for each corresponding bit.

The block storage unit 102 has a block updating function. Each time the block fusion unit 108 generates a fourth intermediate block, the block storage unit 102 updates a chain block storing the fourth intermediate block as a new chain block, Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first plaintext block, and the fourth intermediate block generated during this processing is stored as a new chained block. I do. Next, the chain block updated in the processing of the first plaintext block is used in processing the second plaintext block, and the fourth intermediate block generated in this processing is stored as a new chain block. . Next, the chain block stored in the processing of the second plaintext block is used in processing the third plaintext block, and the fourth intermediate block generated in this processing is stored as a new chain block. . Finally, the chain block stored during the processing of the third plaintext block is used when processing the fractional plaintext data. The fifth to eighth encryption units 105e to 105h have the same functions as those of the second embodiment. Here, corresponding fifth to seventh intermediate blocks and first to third ciphertext blocks are generated from the fourth intermediate block.

[0197] The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101, and, based on the encryption processing block generated by the fourth encryption unit 105d, converts the fraction plaintext data into a fraction having the same number of bits as the fraction plaintext data. The data matching unit 106a generates encrypted data.
And a fraction data fusion unit 106b. Data matching unit 1
06a generates fraction encryption data having the same bit number as the fraction plaintext data from the encryption processing block generated by the fourth encryption unit 105d. Here, the fraction plaintext data is 8
Since it is a bit, fractional encryption processing data composed of, for example, upper 8 bits of the encryption processing block generated by the fourth encryption unit 105d is generated.

The fraction data fusion unit 106b fuses the fractionally encrypted data with the fractional plaintext data. In this case, the exclusive-OR operation is performed on the 8-bit fractional encrypted data and the 8-bit fractional plaintext data for each corresponding bit to generate 8-bit fractional encrypted data. Note that the fraction data processing unit 106 may have the same function as that of the second embodiment.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 14 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 according to Embodiment 4 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 12 according to the second embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted.

The data decrypting apparatus 20 includes a block dividing section 201, a block storing section 202, a partial key generating section 20
4, first to fourth decryption units 205a to 205d, first to fourth encryption units 205i to 205l, fraction data processing unit 206,
It comprises a block combining unit 207 and a block fusing unit 208. The first encryption unit 205i generates a first intermediate block from the chained block stored in the block storage unit 202 based on the first partial key.

The second to fourth encryption units 205j to 205l
A second intermediate block, a third intermediate block, and a cryptographic processing block are generated from the first to third intermediate blocks based on the second to fourth partial keys, respectively. The block fusion unit 208
The encryption processing block generated by the fourth encryption unit 205l is merged with the fourth intermediate block generated by the fourth decryption unit 205d to generate a plaintext block. Here, when processing the first ciphertext block, the 64-bit first cipher processing block generated from the initial value IV of the chained block and the first ciphertext block are processed.
The 64-bit fourth intermediate block generated from the ciphertext block is subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit first plaintext block.
When processing the three ciphertext blocks, the 64-bit second to third cipher processing blocks generated from the chained blocks generated during the processing of the first and second ciphertext blocks and the second to third ciphertext blocks are used.
An exclusive-OR operation is performed on each of the 64-bit fourth intermediate blocks generated from the ciphertext block with respect to each corresponding bit, to generate 64-bit second to third plaintext blocks.

The fraction data processing unit 206 receives the fraction cipher text data from the block dividing unit 201 and, based on the cipher processing block generated by the fourth encrypting unit 205l, converts the fraction cipher text data into the same bits as the fraction cipher text data. The data matching unit 2 generates plaintext data of a fraction.
06a and the fraction data fusion unit 206b. The data matching unit 206a generates the fractional encryption processing data having the same bit number as the fractional ciphertext data from the encryption processing block generated by the fourth encryption unit 205l. In this case, since the fractional ciphertext data is 8 bits, fractional encryption processing data composed of, for example, upper 8 bits of the encryption processing block generated by the fourth encryption unit 205l is generated.

The fraction data fusion unit 206b fuses the fractionally encrypted data into the fractionally encrypted text data. Here, 8
An exclusive-OR operation is performed on the bit-fraction-encrypted data and the 8-bit fraction-ciphertext data for each corresponding bit to generate 8-bit fraction plaintext data. Note that the fraction data processing unit 206 may have the same function as that of the second embodiment.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 21 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the fourth embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 13 in the second embodiment are denoted by the same reference numerals, and description thereof will be omitted.

(1) to (3) The same as the second embodiment (steps S101, S102, S3)
01: the first time). (4) The first encryption unit 105a generates a first intermediate block from the chained blocks stored in the block storage unit 102 based on the first partial key (Step S701).
Here, the first intermediate block is generated from the initial value IV of the chained block (step S701: first time).

(5) Second to fourth encryption units 105b to 105
d is based on the second to fourth partial keys, respectively,
A second intermediate block, a third intermediate block, and a cryptographic processing block are generated from the intermediate blocks (step S70).
2). Here, a second intermediate block, a third intermediate block, and a first cryptographic processing block are generated from the first to third intermediate blocks corresponding to the initial value IV of the chained block (step S702: first time). (6) The block fusion unit 108 fuses the cryptographic processing block into a plaintext block to generate a fourth intermediate block (step S703). Here, the 64-bit first cryptographic processing block and the 64-bit first plaintext block are subjected to exclusive OR for each corresponding bit to generate a 64-bit fourth intermediate block (step S703: first time). ).

(7)-(13) Same as the second embodiment (steps S107-S110: first time, step S101, step S102, step S30)
1: 2). (14) In step S701, here, a first intermediate block is generated from the 64-bit chain block generated during the processing of the first plaintext block (step S7).
01: 2nd time).

(15) In step S702, here, from the first to third intermediate blocks corresponding to the concatenated block generated in the processing of the first plaintext block, the second intermediate block, the third intermediate block, and the second cipher A processing block is generated (step S702: second time). (16) In step S703, the 64-bit second cryptographic processing block and the 64-bit second plaintext block are subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit fourth intermediate block. (Step S703: second time).

(17) to (23) The same as the second embodiment (steps S107 to S110: the second time,
Step S101, step S102, step S30
1: 3). (24) In step S701, the first intermediate block is generated from the 64-bit chain block generated in the processing of the second plaintext block (step S7).
01: third time).

(25) In step S702, here, the first to third intermediate blocks, the third intermediate block, the third intermediate block, and the third cipher block corresponding to the chain block generated during the processing of the second plaintext block are used. A processing block is generated (step S702: third time). (26) In step S703, an exclusive OR is performed on the 64-bit third cryptographic processing block and the 64-bit third plaintext block for each corresponding bit to generate a 64-bit fourth intermediate block. (Step S703: third time).

(27) to (34) The same as the second embodiment (steps S107 to S110: the third time,
Step S101: fourth time, steps S111 to S113). (Operation of Data Decryption Device 20) FIG. 22 is a diagram showing a flow of the encryption process in the data decryption device 20 according to the fourth embodiment of the present invention.

The operation of the data decryption device 20 is the inverse conversion of the operation of the data encryption device 10. Steps common to the operations of data decoding apparatus 20 shown in FIG. 14 in the second embodiment are denoted by the same reference numerals, and description thereof will be omitted.

(1) to (5) The same as in the second embodiment (step S201, step S202, step S4)
01, step S205, step S206: first time). (6) The first encryption unit 205i generates a first intermediate block from the chained blocks stored in the block storage unit 202 based on the first partial key (Step S801).
Here, the first intermediate block is generated from the initial value IV of the chained block (step S801: first time).

(7) Second to fourth encryption units 205j to 205
1 is based on the second to fourth partial keys, respectively,
A second intermediate block, a third intermediate block, and a cryptographic processing block are generated from the intermediate blocks (step S80).
2). Here, a second intermediate block, a third intermediate block, and a first cryptographic processing block are generated from the first to third intermediate blocks corresponding to the initial value IV of the chained block (step S802: first time). (8) The block fusion unit 208 converts the cryptographic processing block into
A plaintext block is generated by merging with the fourth intermediate block (step S803). Here, an exclusive OR is performed on the 64-bit first cryptographic processing block and the 64-bit fourth intermediate block corresponding to the first ciphertext block for each corresponding bit, and the 64-bit first plaintext block is converted. Generated (step S803: first time).

(9)-(15) Same as in the second embodiment (step S207, step S210: first time, step S201, step S202, step S40)
1, step S205, step S206: second time). (16) In step S801, the first intermediate block is generated from the 64-bit chain block generated in the processing of the first ciphertext block (step S801).
801: the second time).

(17) In step S802, here, the first to third intermediate blocks, the third intermediate block, and the second intermediate block corresponding to the chained block generated during the processing of the first ciphertext block. An encryption processing block is generated (step S802: second time). (18) In step S803, exclusive OR is performed for the corresponding 64-bit second cryptographic processing block and the 64-bit fourth intermediate block corresponding to the second ciphertext block for each corresponding bit. A second plaintext block of bits is generated (step S803: second time).

(19)-(25) Same as in the second embodiment (step S207, step S210: second time,
Step S201, step S202, step S40
1, step S205, step S206: third time). (26) In step S801, the first intermediate block is generated from the 64-bit chain block generated in the processing of the second ciphertext block (step S801).
801: the third time).

(27) In step S802, here, the first to third intermediate blocks, the third intermediate block, and the third intermediate block corresponding to the chained block generated during the processing of the second ciphertext block. An encryption processing block is generated (step S802: third time). (28) In step S803, exclusive OR of the 64-bit third cryptographic processing block and the 64-bit fourth intermediate block corresponding to the third ciphertext block is performed for each corresponding bit. A third plaintext block of bits is generated (step S803: third time).

(29)-(34) The same as in the second embodiment (step S207, step S210: third time,
Step S201: fourth time, steps S211 to S213). The cryptographic processing device according to the fourth embodiment stores intermediate blocks generated in the process of performing encryption processing on a previous block as a chained block, and performs encryption processing on subsequent encryption processing to perform plaintext block processing. It is integrated with the cryptographic processing block, and the chained block is updated each time the cryptographic processing is performed.

(Embodiment 5) Embodiment 5 of the present invention
Is different from the fourth embodiment only in that a block obtained by performing encryption processing on a chained block is stored as a new chained block, instead of using a block after or before fusion as a new chained block.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Apparatus 10) FIG. 23 is a diagram showing a detailed configuration of the data encryption apparatus 10 shown in FIG. 1 according to the fifth embodiment of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 11 according to the second embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. The data encryption device 10 includes a block division unit 101, a block storage unit 102, a partial key generation unit 104, first to eighth encryption units 105a to 105h, a fraction data processing unit 106,
It comprises a block combining unit 107 and a block fusing unit 108. The first encryption unit 105a generates the first intermediate block from the chained block stored in the block storage unit 102, not from the fused plaintext block.

The first to fourth encryption units 105a to 105d
It has the same functions as those of the second embodiment. Here, the corresponding first to fourth intermediate blocks are generated from the chained blocks. The block fusion unit 108
The fourth intermediate block generated by the encryption unit 105d is fused to a plaintext block to generate a fused plaintext block. Here, when processing the first plaintext block, the 64-bit fourth intermediate block and the 64-bit first plaintext block generated from the initial value IV of the chained block are subjected to exclusive logic for each corresponding bit. When a sum operation is performed and the second and third plaintext blocks are processed, a 64-bit fourth corresponding to each generated during the processing of the first and second plaintext blocks is used.
An exclusive OR operation is performed on the intermediate block and the second and third 64-bit plaintext blocks for each corresponding bit.

The fifth encryption unit 105e generates the fifth intermediate block not from the fourth intermediate block but from the fused plaintext block generated by the block fusion unit 108. Fifth
The eight encryption units 105e to 105h have the same functions as those of the second embodiment. Here, the corresponding fifth to seventh intermediate blocks and first to third ciphertext blocks are generated from the fused plaintext block. The fraction data processing unit 106 has the same function as that of the fourth embodiment.

Note that the fraction data processing unit 106 may have the same function as that of the second embodiment. (Structure of Data Decoding Device 20) FIG. 24 is a diagram showing a detailed structure of the data decoding device 20 shown in FIG. 1 according to the fifth embodiment of the present invention.

The same components as those of data decoding apparatus 20 shown in FIG. 12 in the second embodiment are denoted by the same reference numerals, and description of the components having the same functions will be omitted. The data decryption device 20 includes a block division unit 201, a block storage unit 202, a partial key generation unit 204, first to fourth decryption units 205a to 205d, and first to fourth encryption units 205i.
2051; a fraction data processing unit 206; a block combining unit 207;

The fourth decryption unit 205d generates a cryptographic processing block from the fifth intermediate block based on the fifth partial key. Here, the first to third cipher processing blocks are generated from the fifth intermediate blocks respectively corresponding to the first to third ciphertext blocks. The first to fourth decoding units 205a to 205a-2
The conversion performed by each of the data encryption devices 10d
Is the inverse conversion of the conversion performed by the fourth to first encryption units 105d to 105a. The first encryption unit 205i generates a first intermediate block from the chained block stored in the block storage unit 202 based on the first partial key.

The second to fourth encryption units 205j to 205l
The second to fourth intermediate blocks are generated from the first to third intermediate blocks based on the second to fourth partial keys, respectively. The block storage unit 202 has a block update function, and every time the fourth encryption unit 205l generates a fourth intermediate block,
A chain block storing an intermediate block as a new chain block is updated and used when processing the next block. The operation here is the same as in the first embodiment. The first to fourth encryption units 205i to 205l are respectively the first to fourth encryption units 105a to 105d of the data encryption device 10.
And the operation is exactly the same. Here, from each chained block, the first to
Generate four intermediate blocks.

[0229] The block fusion section 208 is the fourth encryption section 2
05l generated by the fourth decoding unit 20
5d is merged with the generated cryptographic processing block to generate a plaintext block. Here, when processing the first ciphertext block, 6 bits generated from the initial value IV of the chained block are used.
A 4-bit fourth intermediate block and a 64-bit cryptographic processing block generated from the first ciphertext block are subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit first plaintext block, When processing the second to third ciphertext blocks, each of the 64-bit fourth intermediate blocks and the second to third ciphers generated from the chained blocks generated during the processing of the first and second ciphertext blocks is used. Exclusive OR operation is performed on the 64-bit second and third encryption processing blocks generated from the sentence block for each corresponding bit.
Generate the second and third 4-bit plaintext blocks. The fraction data processing unit 206 has the same function as that of the fourth embodiment.

[0230] The fraction data processing unit 206 may have the same function as that of the second embodiment. <Operation> (Operation of Data Encryption Device 10) FIG. 25 is a diagram showing a flow of an encryption process in the data encryption device 10 according to the fifth embodiment of the present invention.

Steps common to the operations of data encryption apparatus 10 shown in FIG. 13 in the second embodiment are denoted by the same reference numerals, and description thereof will be omitted. (1) to (3) Same as in the second embodiment (step S
101, step S102, step S301: first time). (4) The first encryption unit 105a generates a first intermediate block from the chained blocks stored in the block storage unit 102 based on the first partial key (Step S901).
Here, a first intermediate block is generated from the initial value IV of the chained block (step S901: first time).

(5) to (6) Embodiments (6) to (6)
Same as (7) (Step S106, Step S1)
07: the first time). (7) The block fusion unit 108 fuses the fourth intermediate block into a plaintext block to generate a fused plaintext block (step S902). Here, the initial value I of the chained block is
An exclusive OR is performed on the 64-bit fourth intermediate block corresponding to V and the 64-bit first plaintext block for each corresponding bit to generate a 64-bit first fused plaintext block (step S902: 1). Times). (8) The fifth encryption unit 105e generates a fifth intermediate block from the fused plaintext block based on the fifth partial key,
The sixth and seventh encryption units 105f to 105g respectively
The sixth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks based on the partial keys to （(step S903).
Here, the fifth intermediate block is generated from the first fused plaintext block, and the sixth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks (step S903: first time).

(9)-(13) Same as in the second embodiment (step S109, step S110: first time, step S101, step S102, step S30)
1: 2). (14) In step S901, here, the first intermediate block is generated from the 64-bit chain block generated in the processing of the first plaintext block (step S9).
01: 2nd time). (15)-(16) (16)-(17) of the second embodiment
(Steps S106 and S107:
The second).

(17) In step S902, here, the 64-bit fourth intermediate block corresponding to the chain block generated in the processing of the first plaintext block and 64
An exclusive OR is performed on the second plaintext block of bits for each corresponding bit to generate a second fused plaintext block of 64 bits (step S902: second time). (18) In step S903, a fifth intermediate block is generated from the second fused plaintext block, and
The sixth and seventh intermediate blocks are generated from the intermediate blocks (step S903: second time). (19) to (23) Same as in the second embodiment (step S109, step S110: second time, step S1
01, step S102, step S301: third time).

(24) In step S901, here, the first intermediate block is generated from the 64-bit chain block generated in the processing of the second plaintext block (step S901: third time). (25) to (26) (26) to (27) of the second embodiment
(Steps S106 and S107:
Third time). (27) In step S902, here, the 64-bit fourth intermediate block and the 64-bit third intermediate block corresponding to the chained block generated during the processing of the second plaintext block are used.
An exclusive OR is performed with the plaintext block for each corresponding bit to generate a 64-bit third fused plaintext block (step S902: third time).

(28) In step S903, the fifth intermediate block is generated from the third fused plaintext block, and the sixth and seventh intermediate blocks are generated from the fifth and sixth intermediate blocks (step S903: third time). (29)-(34) Same as the second embodiment (step S109, step S110: third time, step S1
01: 4th time, steps S111 to S11
3). (Operation of Data Decoding Device 20)

FIG. 26 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the fifth embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10. FIG. 1 in Embodiment 2
Steps common to those of the operation of the data decoding device 20 shown in FIG.

(1) to (4) The same as the second embodiment (steps S201, S202, S4
01, step S205: first time). (5) The second to fourth decryption units 205b to 205d generate a sixth intermediate block, a fifth intermediate block, and a cryptographic processing block from the seventh to fifth intermediate blocks based on the seventh to fifth partial keys, respectively. (Step S1001). Here, a sixth intermediate block, a fifth intermediate block, and a first cryptographic processing block are generated from the seventh to fifth intermediate blocks corresponding to the first ciphertext block (step S1001: first time). (6) The first encryption unit 205i generates a first intermediate block from the chained blocks stored in the block storage unit 202 based on the first partial key (Step S100)
2). Here, a first intermediate block is generated from the initial value IV of the chained block (step S1002: first time).

(7) Second to fourth encryption units 205j to 205
1 is based on the second to fourth partial keys, respectively,
The second to fourth intermediate blocks are generated from the intermediate blocks (step S1003). Here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the initial value IV of the chained block (step S1003: first time). (8) The block fusion unit 208 defines the fourth intermediate block as
A plaintext block is generated by fusing with the cryptographic processing block (step S1004). Here, the 64-bit fourth intermediate block corresponding to the first ciphertext block and the 64-bit first cryptographic processing block are XORed for each corresponding bit, and the 64-bit first plaintext block is converted to a 64-bit first plaintext block. It is generated (step S1004: first time). (9) to (14) Same as the second embodiment (step S207, step S210: first time, step S20
1, Step S202, Step S401, Step S
205: 2nd time).

(15) In step S1001, here, a sixth intermediate block, a fifth intermediate block, and a second cryptographic processing block are generated from the seventh to fifth intermediate blocks corresponding to the second ciphertext block (step S1001:
The second). (16) In step S1002, here, the first
A first intermediate block is generated from the 64-bit chain block generated during processing of the ciphertext block (step S1002: second time). (17) In step S1003, here, the first
The second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the chained blocks generated during the processing of the ciphertext block (step S1003: second time).

(18) In step S1004, exclusive OR of the 64-bit fourth intermediate block and the 64-bit second cryptographic processing block corresponding to the second ciphertext block is performed for each corresponding bit. To generate a 64-bit second plaintext block (step S100).
4: Second time). (19) to (24) Same as in the second embodiment (step S207, step S210: second time, step S2
01, step S202, step S401, step S205: third time). (25) In step S1001, here, the third
A sixth intermediate block, a fifth intermediate block, and a third cryptographic processing block are generated from the seventh to fifth intermediate blocks corresponding to the ciphertext blocks (step S1001: third time).

(26) In step S1002, here, the 6 generated at the time of processing the second ciphertext block
A first intermediate block is generated from a 4-bit chain block (step S1002: third time). (27) In step S1003, here, the second
The second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the chained blocks generated during the processing of the ciphertext block (step S1003: third time). (28) In step S1004, here, the third
An exclusive-OR operation is performed on the 64-bit fourth intermediate block corresponding to the ciphertext block and the 64-bit third encryption processing block for each corresponding bit to generate a 64-bit third plaintext block (step S1004). : 3rd time).

(29)-(34) The same as in the second embodiment (step S207, step S210: third time,
Step S201: fourth time, steps S211 to S213).

The encryption processing apparatus according to the fifth embodiment stores intermediate blocks generated in the process of performing encryption processing on the previous block as a chain block, and performs encryption processing on the subsequent encryption processing. The block is merged with a plaintext block or a cryptographic processing block, and the chain block is updated each time cryptographic processing is performed.

(Embodiment 6)

The sixth embodiment of the present invention is a cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted. Output blocks, encrypted blocks and intermediate blocks are stored as chained blocks,
This is a cryptographic processing device that performs block conversion on a chained block stored when performing cryptographic processing of the next block and fuses it with key data.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Apparatus 10) FIG. 27 is a diagram showing a detailed configuration of the data encryption apparatus 10 shown in FIG. 1 according to the sixth embodiment of the present invention. FIG. 2 in Embodiment 1
The same reference numerals are given to the same components as those of the data encryption device 10 shown in FIG. The data encryption device 10 includes a block division unit 101, a block storage unit 102, a key data fusion unit 10
3. Partial key generation unit 104, first to eighth encryption units 105a to 105a
105h, fraction data processing unit 106, block combining unit 1
07 and a block conversion unit 109.

The block storage unit 102 has a block updating function, and every time the eighth encryption unit 105h generates a ciphertext block, it updates a chain block storing this ciphertext block as a new chain block. Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first plaintext block, and the first ciphertext block generated in this process is used as a new chain block. Update. Next, the chain block updated during the processing of the first plaintext block is used when processing the second plaintext block,
The second ciphertext block generated in this process is updated as a new chain block. Next, the chain block updated in the processing of the second plaintext block is used in processing the third plaintext block, and the third ciphertext block generated in this processing is updated as a new chain block. . Finally, the chain block updated during the processing of the third plaintext block is used when processing the fractional plaintext data.

[0249] The block converter 109 applies a predetermined conversion to the chained blocks stored in the block storage 102 to generate a converted block. here,
The predetermined conversion performed by the block conversion unit 109 is, for example, bit replacement or bit conversion. This bit replacement is
Bit-wise replacement similar to the transposition P described in the first to eighth encryption units 105a to 105h of the first embodiment. This bit conversion is, for example, performing an exclusive OR operation with specific data. Is a fixed bit-unit operation. Here, when processing the first plaintext block,
When a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block and the second to third plaintext blocks are processed, the 64 bits generated in the processing of the first and second plaintext blocks, respectively. A second conversion block of 64 bits is generated from the chain block of bits.

The key data fusion unit 103 fuses the conversion block generated by the block conversion unit 109 with key data to generate fusion key data. Here, when 64-bit key data set in advance is obtained and the first plaintext block is processed, the 64-bit first conversion block and the 64-bit key data are mutually exclusive for each corresponding bit. When performing a logical sum operation and processing the second and third plaintext blocks, 6
An exclusive-OR operation is performed on the 4-bit second and third conversion blocks and the 64-bit key data for each corresponding bit.

The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101 and, based on the conversion block generated by the block conversion unit 109, converts the fraction plaintext data to the fraction ciphertext data having the same bit number as the fraction plaintext data. , And includes a data matching unit 106a and a fractional data fusion unit 106b. Data matching unit 10
6a generates fraction conversion data having the same bit number as the fraction plaintext data from the conversion block generated by the block conversion unit 109. Here, since the fractional plaintext data is 8 bits, the conversion block generated by the block
For example, it generates fraction conversion data composed of upper 8 bits.

The fraction data fusion unit 106b fuses the fraction converted data into the fraction plaintext data. Here, an exclusive OR operation is performed on the 8-bit fraction converted data and the 8-bit fraction plaintext data for each corresponding bit to generate 8-bit fraction ciphertext data. Note that the fraction data processing unit 106 may have the same function as that of the first embodiment.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 20 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 according to Embodiment 6 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 7 in the first embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. This data decoding device 20
A block division unit 201, a block storage unit 202, a key data fusion unit 203, a partial key generation unit 204, first to eighth decryption units 205a to 205h, a fraction data processing unit 206, a block combination unit 207, and a block conversion unit 209. Is done.

The block storage unit 202 has a block updating function. Each time the block dividing unit 201 generates a ciphertext block, the block storage unit 202 updates a chain block storing this ciphertext block as a new chain block, and Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the first ciphertext block is stored as a new chain block. Next, the chain block updated during the processing of the first ciphertext block is used when processing the second ciphertext block, and the second ciphertext block is stored as a new chain block. Next, the chain block stored at the time of processing the second ciphertext block is used at the time of processing the third ciphertext block, and the third ciphertext block is stored as a new chain block. Finally, the chain block stored during the processing of the third ciphertext block is used when processing the fractional ciphertext data.

The block conversion unit 209 performs a predetermined conversion on the chained blocks stored in the block storage unit 202 to generate a conversion block. here,
The predetermined conversion performed by the block conversion unit 209 is the same as the predetermined conversion performed by the block conversion unit 109 of the data encryption device 10, and is, for example, bit replacement or bit conversion. Here, when processing the first ciphertext block,
A 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and when processing the second to third ciphertext blocks, the first conversion block is generated when the first and second ciphertext blocks are processed. 6 bits from a 64-bit chained block
Generate 4-bit second to third conversion blocks.

The key data fusion unit 203 fuses the conversion block generated by the block conversion unit 209 with key data to generate fusion key data. Here, when 64-bit key data set in advance is obtained and the first ciphertext block is processed, the 64-bit first conversion block and the 64-bit key data are mutually exclusive for each corresponding bit. When the second and third ciphertext blocks are processed by performing a logical OR operation, the 64-bit second and third conversion blocks and the 64-bit key data are subjected to exclusive OR operation for each corresponding bit. Perform the operation.

The fraction data processing unit 206 receives the fraction cipher text data from the block dividing unit 201 and, based on the converted block generated by the block converting unit 109, converts the fraction cipher text data into The data matching unit 206 generates plaintext data.
a and a fraction data fusion unit 206b. The data matching unit 206a generates fraction conversion data having the same bit number as the fraction ciphertext data from the conversion block generated by the block conversion unit 109. Here, since the fractional ciphertext data is 8 bits, fraction conversion data composed of, for example, upper 8 bits of the conversion block generated by the block conversion unit 109 is generated.

The fraction data fusion unit 206b fuses the fraction conversion data into the fraction ciphertext data. Here, an exclusive-OR operation is performed on the 8-bit fraction conversion data and the 8-bit fraction ciphertext data for each corresponding bit,
Generate 8-bit fractional plaintext data. Note that the fraction data processing unit 206 may have the same function as that of the first embodiment. <Operation>

(Operation of Data Encryption Apparatus 10) FIG.
FIG. 14 is a diagram showing a flow of an encryption process in the data encryption device 10 according to the sixth embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 9 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted. (1)-(2) Same as the first embodiment (step S
101, step S102: first time). (3) The block conversion unit 109 is used by the block storage unit 102
A conversion block is generated by performing a predetermined conversion predetermined on the chained block stored in the key data fusion unit 10.
3 fuses the converted block into key data and generates fused key data (step S1101). Here, 64
A first conversion block of 64 bits is generated from the initial value IV of the chain block of bits, a predetermined 64-bit key data is obtained, and the first conversion block of 64 bits and 6 bits are converted.
An exclusive OR operation is performed on the 4-bit key data for each corresponding bit (step S1101: first time).

(4)-(8) Embodiments (4)-(8)
This is the same as (6), (8), and (9) (step S10).
4 to Step S106, Step S108, Step S
109: first time).

(9) The block storage unit 102 updates the stored chain block with the ciphertext block as a new chain block (step S1102). Here, the first ciphertext block is updated (step S110).
2: 1). (10) to (12) Same as the first embodiment (step S110: first time, step S101, step S1
02: 2nd time). (13) In step S1101, here, the first
A 64-bit second conversion block is generated from the 64-bit chain block generated during the processing of the plaintext block,
The exclusive-OR operation is performed on the 64-bit second conversion block and the 64-bit key data for each corresponding bit (step S1101: second time).

(14)-(18) In the first embodiment, (1)
4) to (16), (18), and (19) (Steps S104 to S106 and Step S10)
8, step S109: second time). (19) In step S1102, here, the second
The ciphertext block is updated (step S1102: second time). (20) to (22) Same as in the first embodiment (step S110: second time, step S101, step S1
02: 3rd time).

(23) In step S1101, here, the 64 generated at the time of processing the second plaintext block is used.
A 64-bit third conversion block is generated from the bit chain block, and an exclusive-OR operation is performed on the 64-bit third conversion block and the 64-bit key data for each corresponding bit (steps S1101: 3). Times). (24) to (28) (24) to (2) of the first embodiment
6), (28), and (29) (Step S1)
04 to step S106, step S108, step S109: third time). (29) In step S1102, here, the third
The ciphertext block is updated (step S1102: third time).

(30)-(34) The same as in the first embodiment (step S110: third time, step S101:
Fourth time, steps S111 to S113). (Operation of Data Decryption Device 20) FIG. 30 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the sixth embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Steps common to those of data decoding apparatus 20 shown in FIG. 10 in the first embodiment are denoted by the same reference numerals, and description thereof is omitted. (1)-(2) Same as the first embodiment (step S
201 to step S202: first time). (3) The block conversion unit 209 uses the block storage unit 202
A conversion is generated by applying a predetermined conversion to the chained block stored in the key data fusion unit 20.
3 fuses the converted block into key data and generates fused key data (step S1201). Here, 64
A first conversion block of 64 bits is generated from the initial value IV of the chain block of bits, a predetermined 64-bit key data is obtained, and the first conversion block of 64 bits and 6 bits are converted.
The exclusive-OR operation is performed on the 4-bit key data for each corresponding bit (step S1201: first time).

(4)-(8) Embodiments (4)-(4)
This is the same as (6), (8), and (9) (Step S20)
4 to Step S206, Step S208, Step S
209: the first time). (9) The block storage unit 202 updates the stored chain block with the ciphertext block as a new chain block (step S1202). Here, the first ciphertext block is updated (step S1202: first time). (10) to (12) Same as in the first embodiment (step S210: first time, step S201, step S2
02: 2nd time).

(13) In step S 1201, here, the 64 generated at the time of processing the first plaintext block is used.
A 64-bit second conversion block is generated from the chained block of bits, and an exclusive-OR operation is performed on the 64-bit second conversion block and the 64-bit key data for each corresponding bit (steps S1201: 2). Times). (14) to (18) (14) to (1) of the first embodiment
6), (18), and (19) (Step S2)
04 to step S206, step S208, step S209: second time). (19) In step S1202, here, the second
The ciphertext block is updated (step S1202: second time).

(20)-(22) Same as in the first embodiment (step S210: second time, step S201,
Step S202: Third time). (23) In step S1201, here, the second
A 64-bit third transformation block is generated from the 64-bit chain block generated during the processing of the plaintext block,
An exclusive OR operation is performed on the 64-bit third conversion block and the 64-bit key data for each corresponding bit (step S1201: third time). (24) to (28) (24) to (2) of the first embodiment
6), (28), and (29) (Step S2)
04 to step S206, step S208, step S209: third time).

(29) In step S1202, here, the block is updated to the third ciphertext block (step S1).
202: 3rd time). (30) to (34) The same as in the first embodiment (step S210: third time, step S201: fourth time, steps S211 to S213). The cryptographic processing apparatus according to the sixth embodiment stores a previous ciphertext block as a chained block, performs block conversion at the time of subsequent cryptographic processing, fuses it with key data, and performs chaining every time the cryptographic processing is performed. Updates a block. In addition,
Although the ciphertext block is a new chain block in the sixth embodiment, a plaintext block or any intermediate block may be a new chain block.

(Embodiment 7) Embodiment 7 of the present invention
Embodiment 6 differs from Embodiment 6 in that instead of fusing a transformed block obtained by subjecting a chained block to block conversion to key data, fusing the data to be encrypted or data obtained by performing cryptographic processing on the data to be encrypted. different. <Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Device 10)

FIG. 31 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 according to the seventh embodiment of the present invention. The same components as those of the data encryption device 10 according to the second embodiment shown in FIG. The data encryption device 10 includes a block division unit 101, a block storage unit 102, a partial key generation unit 104, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combination unit 107, and a block fusion unit 108. And a block conversion unit 109.

The block storage unit 102 has a block updating function. Every time the eighth encryption unit 105h generates a ciphertext block, the block storage unit 102 updates a chain block storing this ciphertext block as a new chain block. Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first plaintext block, and the first ciphertext block generated in this process is used as a new chain block. Update. Next, the chain block updated during the processing of the first plaintext block is used when processing the second plaintext block,
The second ciphertext block generated in this process is updated as a new chain block. Next, the chain block updated in the processing of the second plaintext block is used in processing the third plaintext block, and the third ciphertext block generated in this processing is updated as a new chain block. . Finally, the chain block updated during the processing of the third plaintext block is used when processing the fractional plaintext data. The block conversion unit 109 performs a predetermined conversion on the chained blocks stored in the block storage unit 102 to generate a conversion block. Here, the predetermined conversion performed by the block conversion unit 109 is, for example, bit replacement or bit conversion. Here, when processing the first plaintext block, the initial value I of the 64-bit chain block is used.
A first 64-bit conversion block is generated from V,
When processing three plaintext blocks, a 64-bit second to third conversion block is generated from the 64-bit chain block generated during the processing of the first and second plaintext blocks.

[0273] The block fusion unit 108 fuses the converted block generated by the block conversion unit 109 with a plaintext block to generate a fused plaintext block. Here, when processing the first plaintext block, the 64-bit first transform block and the 64-bit first plaintext block are subjected to exclusive OR operation for each corresponding bit, and the 64-bit first plaintext block is processed. When a fused plaintext block is generated and the second and third plaintext blocks are processed, the 64-bit second and third conversion blocks and 64
An exclusive OR operation is performed on the second and third plaintext blocks of bits for the corresponding bits to generate second and third fused plaintext blocks of 64 bits. (Configuration of Data Decoding Device 20)

FIG. 32 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 according to the seventh embodiment of the present invention. The same components as those of the data decoding device 20 shown in FIG. 12 according to the second embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. The data decryption device 20 includes a block division unit 201, a block storage unit 202, a key data fusion unit 203, a partial key generation unit 2
04, the first to eighth decoding units 205a to 205h, the fraction data processing unit 206, the block combining unit 207, and the block converting unit 209.

The block storage unit 202 has a block updating function. Each time the block dividing unit 201 generates a ciphertext block, it updates a chain block storing this ciphertext block as a new chain block. Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the first ciphertext block is stored as a new chain block. Next, the chain block updated during the processing of the first ciphertext block is used when processing the second ciphertext block, and the second ciphertext block is stored as a new chain block. Next, the chain block stored at the time of processing the second ciphertext block is used at the time of processing the third ciphertext block, and the third ciphertext block is stored as a new chain block. Finally, the chain block stored during the processing of the third ciphertext block is used when processing the fractional ciphertext data.

[0276] The block conversion unit 209 performs a predetermined conversion on the chained blocks stored in the block storage unit 202 to generate a conversion block. here,
The predetermined conversion performed by the block conversion unit 209 is the same as the predetermined conversion performed by the block conversion unit 109 of the data encryption device 10, and is, for example, bit replacement or bit conversion. Here, when processing the first ciphertext block,
A 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and when processing the second to third ciphertext blocks, the first conversion block is generated when the first and second ciphertext blocks are processed. 6 bits from a 64-bit chained block
Generate 4-bit second to third conversion blocks.

[0277] The block fusion unit 208 fuses the conversion block generated by the block conversion unit 209 with the cryptographic processing block to generate a plaintext block. Here, when processing the first ciphertext block, a 64-bit first conversion block and a 64-bit first cipher processing block are subjected to an exclusive OR operation for each corresponding bit to perform a 64-bit conversion. When the first plaintext block is generated and the second and third ciphertext blocks are processed, the 64-bit second and third conversion blocks and the 64-bit second and third cryptographic processing blocks are divided into corresponding bits. The exclusive OR operation is performed to generate the second and third plaintext blocks of 64 bits.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 33 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the seventh embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 13 in the second embodiment are denoted by the same reference numerals, and description thereof will be omitted. (1) to (3) Same as in the second embodiment (step S
101, step S102, step S301: first time).

(4) The block conversion section 109 performs a predetermined conversion on the chained blocks stored in the block storage section 102 to generate a conversion block, and the block fusion section 108 generates the conversion block. Fused with plaintext block to generate fused plaintext block (step S130)
1). Here, the initial value I of the 64-bit chain block is
A first conversion block of 64 bits is generated from V, an exclusive OR operation is performed on the first conversion block of 64 bits and the first plaintext block of 64 bits for each corresponding bit, and the first conversion block of 64 bits is generated. A fused plaintext block is generated (step S1301: first time). (5) to (8) Same as the second embodiment (step S
303, step S106, step S108, step S109: first time). (9) The block storage unit 102 updates the stored chain block with the ciphertext block as a new chain block (step S1302). Here, the first ciphertext block is updated (step S1302: first time).

(10)-(13) Same as the second embodiment (step S110: first time, step S101,
Step S102, step S301: second time). (14) In step S1301, here, the first
A 64-bit second conversion block is generated from the 64-bit chain block generated during the processing of the plaintext block,
An exclusive-OR operation is performed on the 64-bit second transformed block and the 64-bit second plaintext block for each corresponding bit to generate a 64-bit second fused plaintext block (step S1301: second time). . (15)-(18) Same as the second embodiment (step S303, step S106, step S108, step S109: second time).

(19) In step S1302, here, the block is updated to the second ciphertext block (step S1).
302: 2nd time). (20) to (23) Same as in the second embodiment (step S110: second time, step S101, step S1)
02, step S301: third time). (24) In step S1301, here, the second
A 64-bit third transformation block is generated from the 64-bit chain block generated during the processing of the plaintext block,
An exclusive OR operation is performed on the 64-bit third transformed block and the 64-bit third plaintext block for each corresponding bit to generate a 64-bit third fused plaintext block (step S1301: third time). .

(25)-(28) The same as the second embodiment (step S303, step S106, step S108, step S109: third time). (29) In step S1302, here, the third
The ciphertext block is updated (step S1302: third time). (30) to (34) The same as in the second embodiment (step S110: third time, step S101: fourth time, steps S111 to S113). (Operation of Data Decoding Device 20)

FIG. 34 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the seventh embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10. FIG. 1 in Embodiment 2
Steps common to those of the operation of the data decoding device 20 shown in FIG. (1) to (7) Similar to the first embodiment (step S
201 to step S202, step S401, step S205, step S206, step S208, step S402: first time).

(8) The block conversion unit 209 performs a predetermined conversion on the chained blocks stored in the block storage unit 202 to generate a conversion block, and the block fusion unit 208 converts the conversion block into A plaintext block is generated by fusing with the cryptographic processing block (step S140)
1). Here, a 64-bit first conversion block is generated from the initial value IV of the chained block, and the 64-bit first conversion block and the 64-bit first encryption processing block are defined by:
An exclusive OR operation is performed for each corresponding bit to generate a 64-bit first plaintext block (step S140).
1: 1). (9) The block storage unit 202 updates the stored chain block with the ciphertext block as a new chain block (step S1402). Here, the first ciphertext block is updated (step S1402: first time). (10) to (17) Same as in the first embodiment (step S210: first time, step S201, step S2
02, step S401, step S205, step S206, step S208, step S402: second time).

(18) In step S1401, here, the 64 generated at the time of processing the first plaintext block is used.
A 64-bit second conversion block is generated from the bit chain block, and the 64-bit second conversion block and the 64-bit second cryptographic processing block are subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit second conversion block. Is generated (step S1401: second time). (19) In step S1402, here, the second
The ciphertext block is updated (step S1402: second time). (20) to (27) Same as in the first embodiment (step S210: second time, step S201, step S2
02, step S401, step S205, step S206, step S208, step S402: third time).

(28) In step S1401, here, the 64 generated at the time of processing the second plaintext block is used.
A 64-bit third conversion block is generated from the bit chain block, and the 64-bit third conversion block and the 64-bit third cryptographic processing block are subjected to an exclusive OR operation for each corresponding bit to generate a 64-bit third conversion block. Is generated (step S1401: third time). (29) In step S1402, here, the third
The ciphertext block is updated (step S1402: third time). (30) to (34) The same as in the first embodiment (step S210: third time, step S201: fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the seventh embodiment stores the previous ciphertext block as a chain block, performs block conversion at the time of subsequent cryptographic processing, fuses it into a plaintext block or a cryptographic processing block, and Each time processing is performed, the chained block is updated. Note that Embodiment 7 above
Now, the ciphertext block is a new chain block,
The plaintext block or any intermediate block may be a new chain block. (Embodiment 8)

The data encryption device 10 according to the eighth embodiment of the present invention includes a first encryption unit 105a, a block storage unit 10
2. The inputs of the block combining unit 107 and the block fusing unit 108 are different from those of the seventh embodiment, and the order of processing and the like are interchanged. The data decryption device 20 according to the eighth embodiment of the present invention is the same as the data encryption device 10 except that only the input of the block storage unit is different from that of the data encryption device 10.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and a description thereof will be omitted. (Configuration of Data Encryption Apparatus 10) FIG. 35 shows a detailed configuration of data encryption apparatus 10 shown in FIG. 1 according to the eighth embodiment of the present invention. FIG. 3 in Embodiment 7
1 are denoted by the same reference numerals, and the description of the components having the same functions is omitted. The configuration of the data encryption device 10 is the same as that of the seventh embodiment.

The first encryption unit 105a generates the first intermediate block from the transformed block generated by the block conversion unit 109, not from the fused plaintext block generated by the block fusion unit 108 as in the seventh embodiment. The eighth encryption unit 105h generates a cryptographic processing block instead of a ciphertext block as in the seventh embodiment. First to eighth encryption units 1
05a to 105h have the same functions as those of the seventh embodiment. Here, first to seventh intermediate blocks and first to third encryption processing blocks corresponding to the first to third conversion blocks are generated.

The block storage unit 102 has a block updating function. Each time the block fusion unit 108 generates a ciphertext block, it updates a chain block storing this ciphertext block as a new chain block. Used when processing blocks. The operation here is the same as in the seventh embodiment.
Is the same as The block fusion unit 108 is different from the seventh embodiment.
The cipher processing block generated by the eighth encryption unit 105h, instead of the conversion block generated by the block conversion unit 109, is fused to a plaintext block to generate a ciphertext block. Here, when processing the first plaintext block, 6
An exclusive-OR operation is performed on the 4-bit first cipher processing block and the 64-bit first plaintext block for each corresponding bit to generate a 64-bit first ciphertext block,
When processing the second and third plaintext blocks, the exclusive OR operation is performed on the corresponding 64-bit second and third plaintext blocks and the 64-bit second and third plaintext blocks for each corresponding bit. Generate a second to third ciphertext block of bits.

The block combining section 107 combines each of the ciphertext blocks generated by the block fusion section 108 and the fraction ciphertext data generated by the fraction data processing section 106 to generate ciphertext data. Here, the first to third bits of each 64 bits are used.
The ciphertext block and the 8-bit fractional ciphertext data are combined to generate 200-bit ciphertext data. (Configuration of Data Decoding Apparatus 20) FIG. 36 shows a detailed configuration of the data decoding apparatus 20 shown in FIG. 1 according to the eighth embodiment of the present invention. This data decryption device 20
Are the block dividing unit 201, the block storing unit 202, the partial key generating unit 204, the first to eighth encrypting units 205i to 205
p, fraction data processing unit 206, block combining unit 207,
It comprises a block fusion unit 208 and a block conversion unit 209.

The block storage unit 202 has a block updating function. Each time the block dividing unit 201 generates a ciphertext block, it updates a chain block storing this ciphertext block as a new chain block. Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and updates the first ciphertext block as a new chain block. Next, the chain block updated during the processing of the first ciphertext block is used when processing the second ciphertext block, and the second ciphertext block is updated as a new chain block. Next, the chain block updated during the processing of the second ciphertext block is used when processing the third ciphertext block, and the third ciphertext block is updated as a new chain block. Finally, the chained block updated during the processing of the third ciphertext block is used when processing the fractional ciphertext data. The components having the same names as those of the data encryption device 10 shown in FIG.
It is the same as the data encryption device 10 except that only the input of 02 is different from the input of the block storage unit 102 of the data encryption device 10.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 37 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the eighth embodiment of the present invention. Steps common to those of the data encryption device 10 shown in FIG. 33 according to the seventh embodiment are denoted by the same reference numerals, and description thereof is omitted. (1) to (3) Same as in the seventh embodiment (step S
101, step S102, step S301: first time).

(4) The block conversion unit 109 performs a predetermined conversion on the chained blocks stored in the block storage unit 102 to generate a conversion block, and the first encryption unit 105 a A first intermediate block is generated from the converted block based on the partial key of (1) (step S1).
501). Here, a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and
A first intermediate block is generated from the 4-bit first transform block (step S1501: first time). (5)-(6) Same as (6)-(7) of the seventh embodiment (step S106, step S108: first time). (7) The eighth encryption unit 105h generates an encryption processing block from the seventh intermediate block based on the eighth partial key (step S1502). Here, the first encryption processing block is generated from the seventh intermediate block corresponding to the initial value IV of the chained block (step S1502: first time).

(8) The block fusion unit 108 fuses the cryptographic processing block into a plaintext block to generate a ciphertext block (step S1503). Here, an exclusive OR operation is performed on the 64-bit first cipher processing block and the 64-bit first plaintext block for each corresponding bit to generate a 64-bit first ciphertext block (step S1503). : The first time). (9) to (13) Same as the seventh embodiment (step S1302, step S110: first time, step S1
01, step S102, step S301: second time).

(14) In step S1501, in this case, the 64 generated at the time of processing the first plaintext block is used.
A 64-bit second transform block is generated from the bit chain block, and a first intermediate block is generated from the 64-bit second transform block (step S1501: second time). (15)-(16) (16)-(17) of the seventh embodiment
(Steps S106 and S108:
The second). (17) In step S1502, here, the first
A second cryptographic processing block is generated from the seventh intermediate block corresponding to the chain block generated during the processing of the plaintext block (step S1502: second time).

(18) In step S1503, the 64-bit second cryptographic processing block and the 64-bit second plaintext block are subjected to exclusive OR operation for each corresponding bit, and the 64-bit second cryptographic processing block is processed. Two ciphertext blocks are generated (step S1503: second time). (19) to (23) Same as in the seventh embodiment (step S1302, step S110: second time, step S
101, step S102, step S301: third time). (24) In step S1501, here, the second
A 64-bit third transformation block is generated from the 64-bit chain block generated during the processing of the plaintext block,
A first intermediate block is generated from the 64-bit third transform block (step S1501: third time).

(25)-(26) In the seventh embodiment, (2)
6) to (27) (step S106, step S108: third time). (27) In step S1502, here, the second
A third cryptographic processing block is generated from the seventh intermediate block corresponding to the chain block generated during the processing of the plaintext block (step S1502: third time). (28) In step S1503, here, 64
An exclusive-OR operation is performed on the bit-wise third cipher processing block and the 64-bit third plaintext block for each corresponding bit to generate a 64-bit third ciphertext block (step S1503: third time). .

(29) to (34) The same as in the seventh embodiment (step S1302, step S110: third time, step S101: fourth time, steps S111 to S113). (Operation of Data Decoding Device 20) Data Decoding Device 20
Is an inverse conversion of the operation of the data encryption device 10. The operation of the data decryption device 20 according to the eighth embodiment is the same as the operation of the data encryption device 10 according to the eighth embodiment except that the input to the block storage unit is different.

The encryption processing device according to the eighth embodiment stores the previous ciphertext block as a chain block, and performs block conversion and encryption processing at the time of subsequent encryption processing to convert the block into a plaintext block or a ciphertext block. The chain block is merged and the chain block is updated each time the cryptographic process is performed. Although the ciphertext block is a new chain block in the eighth embodiment, a plaintext block or any intermediate block may be a new chain block. (Ninth Embodiment) A ninth embodiment of the present invention is different from the eighth embodiment only in the input of the block storage unit.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and a description thereof will be omitted. (Structure of Data Encryption Apparatus 10) FIG. 38 shows a detailed structure of data encryption apparatus 10 shown in FIG. 1 according to the ninth embodiment of the present invention. FIG. 3 in Embodiment 8
5, the same components as those of the data encryption device 10 shown in FIG. 5 are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. The configuration of this data encryption device 10 is the same as the configuration of the eighth embodiment.

[0303] The block storage unit 102 has a block updating function, and every time the eighth encryption unit 105h generates an encryption processing block, it updates a chain block storing this encryption processing block as a new chain block. Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first plaintext block, and the first cryptographic processing block generated during this processing is used as a new chain block. Update. Next, the chain block updated during the processing of the first plaintext block is used when processing the second plaintext block, and the second cryptographic processing block generated at the time of this processing is updated as a new chain block. . Next, the chain block updated in the processing of the second plaintext block is used in processing the third plaintext block, and the third cryptographic processing block generated in this process is updated as a new chain block. . Finally, the chain block updated during the processing of the third plaintext block is used when processing the fractional plaintext data.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 21 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 according to Embodiment 9 of the present invention. The configuration of this data decryption device 20 is the same as that of the eighth embodiment, and the components having the same names as those of the data encryption device 10 shown in FIG. 38 in the ninth embodiment have the same functions. , The description of which is omitted.

<Operation> (Operation of Data Encryption Apparatus 10) Embodiment 9 of the Invention
Is the same as the data encryption device 10 according to the eighth embodiment except that the input to the block storage unit 102 is different, and the description of the operation is omitted.

(Operation of Data Decryption Device 20) The operation of the data decryption device 20 is the inverse of the operation of the data encryption device 10. The operation of the data decryption device 20 according to the ninth embodiment is the same as the operation of the data encryption device 10 according to the ninth embodiment, and a description thereof will not be repeated. The cryptographic processing block generated in the process of processing is stored as a new chained block, and subjected to block conversion and cryptographic processing at the time of subsequent cryptographic processing to be fused into a plaintext block or ciphertext block, and Each time the processing is performed, the chained block is updated.

(Embodiment 10) Embodiment 1 of the present invention
0 adds the function of updating the key data every time one block is processed to the first embodiment. <Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted.

(Configuration of Data Encryption Apparatus 10) FIG.
FIG. 14 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 according to the tenth embodiment of the present invention. The same components as those of the data encryption device 10 according to the first embodiment shown in FIG. 2 are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. This data encryption device 10
Is a block division unit 101, a block storage unit 102, a key data fusion unit 103, a partial key generation unit 104, first to eighth encryption units 105a to 105h, a fraction data processing unit 106,
It comprises a block combining unit 107 and a key data storage unit 110.

The conventional encryption device 30 shown in FIG.
The relationship between the data encryption device 10 and the data encryption device 10 according to the tenth embodiment of the present invention shown in FIG. The key data storage unit 110 stores key data. When processing the first block, the initial value of the key data is stored in advance. The key data fusion unit 103
Is merged with the key data stored in the key data storage unit 110 to generate fused key data. Here, when processing the first plaintext block, 6
An exclusive OR operation is performed on the initial value IV of the 4-bit chain block and the initial value of the 64-bit key data for each corresponding bit, and when processing the second to third plaintext blocks, the first 64 generated during processing of ~ 2 plaintext blocks
The exclusive-OR operation is performed for each corresponding bit of the chained block of bits and the 64-bit key data generated in the processing of the first and second plaintext blocks. The key data storage unit 110 has a key data updating function, and the key data fusion unit 10
Each time 3 generates the fusion key data, it updates the key data storing the fusion key data as new key data and uses the updated key data when processing the next block. Here, a 64-bit initial value is stored in advance, and this initial value is used when processing the first plaintext block, and the fusion key data generated during this processing is updated as new key data. next,
The key data updated during the processing of the first plaintext block is the second key data.
Used when processing a plaintext block, the fusion key data generated during this processing is updated as new key data. Next, the key data updated in the processing of the second plaintext block is used in processing the third plaintext block, and the fusion key data generated in this processing is updated as new key data.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 21 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 according to Embodiment 10 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 7 in the first embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. This data decryption device 20
Is a block division unit 201, a block storage unit 202, a key data fusion unit 203, a partial key generation unit 204, first to eighth decryption units 205a to 205h, a fraction data processing unit 206,
It comprises a block combining unit 207 and a key data storage unit 210.

[0311] The key data storage section 210 stores key data. When processing the first block, the initial value of the key data is stored in advance. The key data fusion unit 203
The chained block stored in the block storage unit 202 is fused with the key data stored in the key data storage unit 210 to generate fused key data. Here, when processing the first ciphertext block, the exclusive OR of the initial value IV of the 64-bit chain block and the initial value of the 64-bit key data is calculated for each corresponding bit. When generating 1 fusion key data and processing the second and third ciphertext blocks,
The 64-bit chain block generated at the time of processing of the first and second ciphertext blocks and the 64-bit key data generated at the time of processing of the first and second ciphertext blocks are respectively associated with the corresponding bits. And an exclusive OR operation is performed to generate second and third fusion key data. Key data storage unit 21
0 is provided with a key data update function. Each time the key data fusion unit 203 generates fusion key data, it updates the key data storing the fusion key data as new key data, and processes the next block. Used for Here, a 64-bit initial value is stored in advance, and this initial value is used when processing the first ciphertext block, and the first fusion key data generated during this processing is updated as new key data. I do. Next, the key data updated at the time of processing the first ciphertext block is used at the time of processing the second ciphertext block, and the second fusion key data generated at the time of this processing is used as new key data. Update. Next, the key data updated at the time of processing the second ciphertext block is used at the time of processing the third ciphertext block, and the third fusion key data generated at the time of this processing is used as new key data. Update.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 42 is a diagram showing a flow of an encryption process in the data encryption apparatus 10 according to the tenth embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 9 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted. Here, it is assumed that an initial value of key data is stored in advance in key data storage section 110 in addition to the conditions of the first embodiment.

(1) and (2) Same as in the first embodiment (step S101, step S102: first time). (3) The key data fusion unit 103 fuses the chained block stored in the block storage unit 102 with the key data stored in the key data storage unit 110 to generate fusion key data, and the key data storage unit 110 The key data stored by itself is updated using the fusion key data as new key data (step S1601). Here, the 64-bit initial value IV stored in the block storage unit 102 and the key data storage unit 1
10 and the initial value of the 64-bit key data stored in
The exclusive OR operation is performed for each corresponding bit.
The fusion key data is generated and passed to the partial key generation unit 104, and the key data is updated using the first fusion key data as new key data (step S1601: first time).

(4) to (12) Same as in the first embodiment (steps S104 to S110: first time, step S101, step S102: second time). (13) In step S1601, here, the first
The 64-bit chain block generated during the processing of the plaintext block and the 64-bit key data generated during the processing of the first plaintext block are subjected to an exclusive OR operation for each corresponding bit. , Generates the second fusion key data and passes it to the partial key generation unit 104, and updates the key data with the second fusion key data as new key data (step S160)
1: 2).

(14)-(22) The same as in the first embodiment (steps S104-S110: the second time,
Step S101, Step S102: Third time). (23) In step S1601, here, the second
The 64-bit chain block generated during the processing of the plaintext block and the 64-bit key data generated during the processing of the second plaintext block are subjected to an exclusive OR operation for each corresponding bit. , Generates the third fusion key data and passes it to the partial key generation unit 104, and updates the key data with the third fusion key data as new key data (step S160)
1: 3).

(24) to (34) The same as the first embodiment (steps S104 to S110: the third time,
Step S101: fourth time, steps S111 to S113). (Operation of Data Decryption Device 20) FIG. 43 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the tenth embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Steps common to those of data decoding apparatus 20 shown in FIG. 10 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted. (1)-(2) Same as the first embodiment (step S
201, step S202: first time). (3) The key data fusion unit 203 fuses the chained block stored in the block storage unit 202 with the key data stored in the key data storage unit 210 to generate fusion key data, and the key data storage unit 210 The key data stored by itself is updated using the fusion key data as new key data (step S1701). Here, the 64-bit initial value IV stored in the block storage unit 202 and the key data storage unit 2
10 and the initial value of the 64-bit key data stored in
The exclusive OR operation is performed for each corresponding bit.
The fusion key data is generated and passed to the partial key generation unit 204, and the key data is updated using the first fusion key data as new key data (step S1701: first time).

(4) to (12) Same as in the first embodiment (steps S204 to S210: first time, step S201, step S202: second time). (13) In step S1701, here, the first
XOR operation of the 64-bit chain block generated during the processing of the ciphertext block and the 64-bit key data generated during the processing of the first ciphertext block for each corresponding bit To generate the second fusion key data and pass it to the partial key generation unit 204 to update the key data with the second fusion key data as new key data (step S17).
01: 2nd time).

(14)-(22) The same as in the first embodiment (steps S204-S210: second time,
Step S201, Step S202: Third time). (23) In step S1701, here, the second
XOR operation of the 64-bit chain block generated during the processing of the ciphertext block and the 64-bit key data generated during the processing of the second ciphertext block for each corresponding bit Is performed, and the third fused key data is generated and passed to the partial key generating unit 204, and the key data is updated using the third fused key data as new key data (step S17).
01: third time).

(24) to (34) The same as in the first embodiment (steps S204 to S210: the third time,
Step S201: fourth time, steps S211 to S213). The cryptographic processing device according to the tenth embodiment stores the intermediate block and the fusion key block generated in the process of performing the encryption process on the previous block as a chain block and a key block, and stores the chain in the subsequent cryptographic process. The block is fused with the key block, and the chain block and the key block are updated each time the encryption processing is performed.

In the tenth embodiment, the key data storage unit 110 is added to the data encryption device 10 of the first embodiment, and the key data storage unit 210 is added to the data decryption device 20 of the first embodiment. However, a key data storage unit 110 and a key data storage unit 210 may be added similarly to the other embodiments 2 to 9. (Eleventh Embodiment) An eleventh embodiment of the present invention is the same as the first embodiment, except that
A function of selecting one block from an output block, a block to be processed, an intermediate block, and the like is added.

<Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and a description thereof will be omitted. (Configuration of Data Encryption Apparatus 10) FIG. 44 shows a data encryption apparatus 10 according to the eleventh embodiment of the present invention shown in FIG.
FIG. 3 is a diagram showing a detailed configuration of the embodiment. The same components as those of the data encryption device 10 according to the first embodiment shown in FIG. 2 are denoted by the same reference numerals, and the description of the components having the same functions will be omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, a key data fusion unit 1
03, partial key generation unit 104, first to eighth encryption units 105a
105h, a fraction data processing unit 106, a block combining unit 107, and a block selecting unit 111. FIG.
The relationship between the conventional encryption device 30 shown in FIG. 14 and the data encryption device 10 in the eleventh embodiment of the present invention shown in FIG. I have.

[0324] The block selecting section 111 selects one block from the plaintext block, each intermediate block and the ciphertext block based on the chained blocks stored in the block storage section 102, and transfers it to the block storage section 102. . Specifically, for example, when the lower three bits of the chained block stored in the block storage unit 102 are “001”, the first intermediate block is selected, and similarly, “010” to “11”
In the case of "1", the second to seventh intermediate blocks are selected. Also, the lower three bits of the chained block are “00”.
In the case of "0", the plaintext block is selected when the lower 4th bit is "0", and the ciphertext block is selected when the lower 4th bit is "1". Block storage unit 102
Is used to update the chain block storing the block selected by the block selection unit 111 as a new chain block and to process the next block. here,
A 64-bit initial value IV is stored in advance, and this initial value I
V is used when processing the first plaintext block, and the block selected based on the lower 4 bits of the initial value IV is updated as a new chain block. Next, the chain block updated at the time of processing the first plaintext block is used at the time of processing the second plaintext block, and the block selected based on the lower 4 bits of this chain block is updated as a new chain block. I do. Next, the chain block updated at the time of processing the second plaintext block is used at the time of processing the third plaintext block, and the block selected based on the lower 4 bits of this chain block is updated as a new chain block. I do. Finally, the chain block updated during the processing of the third plaintext block is used when processing the fractional plaintext data.

(Configuration of Data Decoding Apparatus 20) FIG.
FIG. 26 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 in Embodiment 11 of the present invention. The same components as those of the data decoding device 20 shown in FIG. 7 in the first embodiment are denoted by the same reference numerals, and the description of the components having the same functions will be omitted. This data decryption device 20
Is a block division unit 201, a block storage unit 202, a key data fusion unit 203, a partial key generation unit 204, first to eighth decryption units 205a to 205h, a fraction data processing unit 206,
It comprises a block combining unit 207 and a block selecting unit 211.

The block selecting section 211 selects one block from the ciphertext block, each intermediate block and the plaintext block based on the chained blocks stored in the block storage section 202 and transfers the block to the block storage section 202. . Specifically, for example, when the lower three bits of the chained block stored in the block storage unit 202 are “001”, the first intermediate block is selected, and similarly, “010” to “11”
In the case of "1", the second to seventh intermediate blocks are selected. Also, the lower three bits of the chained block are “00”.
In the case of "0", the plaintext block is selected when the lower 4th bit is "0", and the ciphertext block is selected when the lower 4th bit is "1".

[0327] The block storage unit 202 updates the chain block storing the block selected by the block selection unit 211 as a new chain block, and uses the block to process the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block.
The block selected based on the bit is updated as a new chain block. Next, the chain block updated at the time of processing the first ciphertext block is used at the time of processing the second ciphertext block, and the block selected based on the lower 4 bits of this chain block is replaced with a new chain block. Update as Next, the chain block updated during the processing of the second ciphertext block is used when processing the third ciphertext block, and the block selected based on the lower 4 bits of this chain block is replaced with a new chain block. Update as Finally, the chained block updated during the processing of the third ciphertext block is used when processing the fractional ciphertext data.

<Operation> (Operation of Data Encryption Device 10) FIG. 46 is a diagram showing a flow of an encryption process in the data encryption device 10 according to the eleventh embodiment of the present invention. Steps common to the operations of the data encryption device 10 shown in FIG. 9 in the first embodiment are denoted by the same reference numerals, and description thereof will be omitted. (1) to (8) (1) to (6) and (8) of the first embodiment
(Steps S101 to S9)
106, step S108, step S109: first time).

(9) The block selection unit 111 selects one block from the plaintext block, each intermediate block and the ciphertext block based on the chained blocks stored in the block storage unit 102, and 102 is
The stored chain block is updated with the selected block as a new chain block (step S180)
1). Here, for example, the lower 3 bits of the initial value IV of the chained block stored in the block storage unit 102 are “0”.
If "11", the third intermediate block corresponding to the first plaintext block is selected, and the selected third intermediate block is updated as a new chain block, and the chain block is updated (step S1801: first time). (10) to (18) Same as in the first embodiment (step S110: first time, steps S101 to S1
06, step S108, step S109: second time). (19) In step S1801, for example, assuming that the lower 4 bits of the selected chained block generated and processed in the processing of the first plaintext block are “0000”, the second plaintext block is selected and selected. The chain block is updated with the second plaintext block thus obtained as a new chain block (step S1801: second time).

(20) to (28) The same as in the first embodiment (step S110: second time, steps S101 to S101)
Step S106, step S108, step S10
9: Third time). (29) In step S1801, for example, assuming that the lower 4 bits of the selected chained block generated and processed in the processing of the second plaintext block are “1000”, the third ciphertext block is selected, The chain block is updated with the selected third ciphertext block as a new chain block (step S1801: third time). (30) to (34) The same as in the first embodiment (step S110: third time, step S101: fourth time, steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 33 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the eleventh embodiment of the present invention. The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Steps common to those of data decoding apparatus 20 shown in FIG. 10 in Embodiment 1 are denoted by the same reference numerals, and description thereof is omitted. (1) to (8) (1) to (6) and (8) of the first embodiment
To (9) (step S201 to step S201).
206, step S208, step S209: first time). (9) The block selection unit 211 determines that the block storage unit 202
, One block is selected from the ciphertext block, each intermediate block, and the plaintext block, and the block storage unit 202 stores the selected block as a new chained block. The linked chain block is updated (step S1901). Here, for example, assuming that the lower three bits of the initial value IV of the chained block stored in the block storage unit 202 are “011”, the third intermediate block corresponding to the first ciphertext block is selected and selected. The chained block is updated using the third intermediate block as a new chained block (step S
1901: the first time).

(10) to (18) Same as in the first embodiment (step S210: first time, steps S201 to S201)
Step S206, step S208, step S20
9: Second time). (19) In step S1901, for example, assuming that the lower 4 bits of the selected chain block generated and processed in the processing of the first ciphertext block are “0000”, the second plaintext block is selected. The chain block is updated with the selected second plaintext block as a new chain block (step S1901: second time).

(20) to (28) The same as in the first embodiment (step S210: second time, steps S201 to S201)
Step S206, step S208, step S20
9: Third time). (29) In step S1901, for example, assuming that the lower 4 bits of the selected chain block generated and processed in the processing of the second ciphertext block are “1000”, the third ciphertext block is selected. , Selected third
The chain block is updated with the ciphertext block as a new chain block (step S1901: third time).

(30) to (34) The same as in the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213). The encryption processing device according to the eleventh embodiment stores intermediate blocks and the like generated in the process of performing encryption processing on a previous block as a chain block, and fuses the key data with key data at the time of subsequent encryption processing. Each time processing is performed, one block is selected from a plurality of intermediate blocks or the like based on the chained block and the chained block is updated. In the eleventh embodiment, the block selection unit 111 is added to the data encryption device 10 of the first embodiment, and the block selection unit 211 is added to the data decryption device 20 of the first embodiment.
Is added, but the block selecting unit 111 and the block selecting unit 211 may be added similarly to the other embodiments 2 to 10.

(Embodiment 12) Embodiment 1 of the present invention
2 is a modification of the fraction data processing performed by the fraction data processing unit 106 in the data encryption device 10 of the first embodiment. <Structure> The structure of the cryptographic communication system is the same as that of the first embodiment, and the description is omitted. (Configuration of Data Encryption Device 10) The configuration of the data encryption device 10 is the same as the configuration of the first embodiment. The description of the components having the same functions as those of the data encryption device 10 shown in FIG.

FIG. 48 is a diagram showing a detailed configuration of the fraction data processing unit 106 according to the twelfth embodiment of the present invention. The fraction data processing unit 106 includes the block dividing unit 101
Receives the fractional plaintext data from the first to eighth encryption units 1
The ciphertext block processed immediately before is subjected to cipher processing based on the chained block stored in the block storage unit 102 by passing the ciphertext block processed immediately before to 05a to 105h and encrypting the ciphertext block. A data processing block is generated, and based on this, fraction ciphertext data having the same number of bits as the fraction plaintext data is generated from the fraction plaintext data. The data matching unit 106a, the fraction data fusion unit 106b, and the ciphertext block The storage unit 106c is included.

The ciphertext block storage unit 106c stores the ciphertext block processed immediately before the processing of the fraction data,
When processing the fraction data, the stored ciphertext blocks are passed to the first to eighth encryption units 105a to 105h. Here, when the third ciphertext block is stored and the fraction plaintext data is processed, the stored third ciphertext block is passed to the first to eighth encryption units 105a to 105h. here,
The first to eighth encryption units 105a to 105h correspond to the first embodiment.
By performing the same encryption processing as described above, a fraction data processing block is generated from the ciphertext block passed from the ciphertext block storage unit 106c. Here, a fraction data processing block is generated from the third ciphertext block.

The data matching unit 106a generates matched data having the same number of bits as the fractional plaintext data from the fractional data processing block generated by performing the encryption processing. In this case, since the fractional plaintext data is 8 bits, matching data composed of, for example, upper 8 bits of the fractional data processing block is generated. The fraction data fusion unit 106b fuses the matching data into the fraction plaintext data. Here, the exclusive-OR operation is performed on the 8-bit matched data and the 8-bit fractional plaintext data for each corresponding bit to generate 8-bit fractional ciphertext data. <Operation>

(Operation of Data Encryption Device 10) The operation of the data encryption device 10 is the same as the operation of the data encryption device 10 of the first embodiment shown in FIG. (Operation of Data Encryption Apparatus 10) FIG. 49 is a diagram showing a flow of the fraction data processing in the data encryption apparatus 10 according to the twelfth embodiment of the present invention.

Here, as an example, 200-bit plaintext data is obtained, the initial value IV is stored in the block storage unit 102 in advance, the encryption of the first to third plaintext blocks is already completed, and the third ciphertext is obtained. It is assumed that the sentence block is stored in the ciphertext block storage unit 106c, and that the remaining 8 bits are passed from the block division unit 101 to the fraction data processing unit 106 as fraction plaintext data, according to the DES algorithm. . (1) The key data fusion unit 103
Is merged with key data to generate fusion key data (step S2001). here,
An exclusive OR operation is performed on the chained block generated during the processing of the third plaintext block and the 64-bit key data for each corresponding bit to generate fusion key data, and the partial key generation unit 104 hand over.

(2) The partial key generation unit 104 generates a number of partial keys corresponding to the number of encryption units from the fusion key data (step S2002). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data. (3) Based on the first partial key, the first encryption unit 105a generates a first intermediate block from the just-processed ciphertext block stored in the ciphertext block storage unit 106c (Step S2003). Here, a first intermediate block is generated from the third ciphertext block.

(4) Second to seventh encryption units 105b to 105
g, based on the second to seventh partial keys, respectively,
The second to seventh intermediate blocks are generated from the intermediate blocks (step S2004). Here, the second to seventh intermediate blocks are generated from the first to sixth intermediate blocks corresponding to the third ciphertext block. (5) The eighth encryption unit 105h generates a fraction data processing block from the seventh intermediate block based on the eighth partial key (step S2005). Here, a fraction data processing block is generated from the seventh intermediate block corresponding to the third ciphertext block.

(6) The data matching unit 106a generates matched data having the same number of bits as the fractional plaintext data from the fractional data processing block generated by performing the encryption process (step S2006). In this case, since the fractional plaintext data is 8 bits, matching data composed of, for example, upper 8 bits of the fractional data processing block is generated. (7) The fraction data fusion unit 106b fuses the matched data into the fractional plain data (step S2007). Here, the exclusive-OR operation is performed on the 8-bit matched data and the 8-bit fractional plaintext data for each corresponding bit to generate 8-bit fractional ciphertext data.

(8) The block combining unit 107 combines the ciphertext blocks generated by the eighth encryption unit 105h and the fraction ciphertext data generated by the fraction data processing unit 106 to generate ciphertext data (step S2008). Here, the ciphertext blocks corresponding to the first to third plaintext blocks and the fraction ciphertext data are combined to generate 200-bit ciphertext data. In accordance with the change in the processing of the fraction data performed by the fraction data processing unit 106 in the data encryption device 10, the processing of the fraction data performed by the fraction data processing unit 206 in the data decryption device 20 also changes. The content of the change is to generate a fraction data processing block by encrypting the previous ciphertext block as a new input block based on the chain block, and based on this, from the fraction plaintext data to the same as the fraction plaintext data This is for generating the fractional ciphertext data of the bit number, which is similar to the modification of the fractional data processing unit 106, and thus the description thereof is omitted.

In the twelfth embodiment, the processing of the fraction data performed by the fraction data processing unit 106 and the processing of the fraction data performed by the fraction data processing unit 206 of the first embodiment are changed. The processing of the fraction data may be similarly changed to 2 to 11. The original DES algorithm performs the initial transposition before the encryption processing by each encryption processing unit and performs the final transposition after the 16-stage encryption processing. For this reason, the initial transposition, the final transposition, and the encryption processing unit in the 9th and subsequent stages are omitted.

The algorithm of each of the above embodiments is not limited to the DES algorithm, but may be any algorithm. Of course, the number of stages of the encryption processing unit is not limited to eight, but may be any number. Further, in each of the above-described embodiments, the output of the fourth stage is mainly a new chain block. However, the output is not limited to the output of the fourth stage. Good. Further, in each of the above embodiments, the case where the number of bits of the chained block and the key data are the same has been described, but this is not necessarily the same. In each embodiment in which the chain block and the key data are merged, if the number of bits of the chain block and the key data are different, data having the same bit number as the key data is extracted from the block to be merged with the key data. Generate and fuse this with key data. For example, here, when the number of bits of the key data is larger than 64 bits, data having the same number of bits as the key data is generated by enlarging and transposing a block to be fused with the key data. If the number of bits is smaller than the number of bits, data composed of upper bits corresponding to the number of bits of the key data is generated and fused with the key data.

In each of the above embodiments, the plaintext data is input and encrypted by the data encryption device 10, and the encrypted data is decrypted by the data decryption device 20. Since the encryption and the decryption in the data decryption device 20 are in a reverse conversion relationship, each can be an encryption device and a decryption device. Therefore,
In each of the above embodiments, each of the data decoding devices 2
0 may input plaintext data and encrypt it, and each of the data encryption devices 10 may decrypt the ciphertext data.

[0349]

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing based on input data to generate output data, and is used to exert the influence of previous data on subsequent data. Storage means for storing the chained data and updating the chained data each time the encryption processing is performed; fusion means for merging the chained data stored in the storage means with the input data to generate fusion data; Main cryptographic processing means for generating intermediate data generated in the process of generating output data by performing cryptographic processing and generating output data, wherein the storage means stores the intermediate data output by the main cryptographic processing means as new data. The present invention is characterized in that the chain data stored by itself is updated as the chain data and used for the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption process. Each output data updates its chain data, so each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the device size and processing time Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

Further, the main encryption processing means performs a plurality of stages of partial processing. The plurality of stages of partial processing includes a plurality of stages of partial processing, and the data subjected to the partial processing in the first stage is further partially processed in the second stage. Performing the processing and performing this for the number of stages.Data obtained by performing the partial processing in the final stage becomes output data, and data obtained by performing the partial processing in each stage other than the final stage becomes each intermediate data. The means may store one of the intermediate data output by the main encryption processing means as new chain data. by this,
The cryptanalyst cannot know which intermediate data becomes new chain data.

Therefore, the safety can be further improved without greatly increasing the scale of the apparatus and the processing time. Further, the input data includes key data and data to be encrypted, the fusion unit fuses the chain data stored in the storage unit with the key data to generate fusion key data, and the cryptographic processing device includes: Further, there is provided partial key generating means for generating partial keys corresponding to the number of stages of the main cryptographic processing means from the fusion key data, supplying the partial keys to the respective stages of the main cryptographic processing means, and subjecting them to respective partial processing, May perform a plurality of stages of partial processing specified by partial keys corresponding to the number of stages, and generate output data from the data to be encrypted. Thereby, the intermediate data generated in the process of performing the encryption process is stored as chained data,
Since it is merged with the key data at the time of later encryption processing, and the chain data is updated each time encryption processing is performed, each output data depends on all data before itself, and statistical data of plain text Such a characteristic is disturbed by each chain data, and the decryption becomes difficult even though the device scale and the processing time are not increased so much.

The encryption processing device further prepares a block of encrypted data to be processed next in order while dividing the data to be encrypted into blocks each having a predetermined number of bits. Means for generating output data having the same length as the fraction data based on the chained data from the fraction data smaller than the block generated when the block preparation means divides the data to be encrypted into blocks. Wherein the cryptographic processing device performs cryptographic processing in block units. As a result, output data having the same length as the fraction data can be generated from the fraction data, so that all input data and all output data have the same length.
Therefore, even if the encryption processing is performed, the data length does not change, and the data is easy to handle.

In addition, the fraction data processing means includes data matching means for generating fraction chain data having the same length as the fraction data from the chain data, and the same as the fraction data by fusing the fraction chain data to the fraction data. And a fraction data fusion unit for generating length output data. Thereby, since the fraction chain data having the same length as the fraction data can be generated from the chain data, the fraction chain data can be fused with the fraction data. Therefore, even if the encryption processing is performed, the data length does not change, and the data is easy to handle. Further, the fraction data processing means stores the block that has been subjected to the encryption processing by the main encryption processing means, and uses the block stored when the fraction data is generated as new encrypted data to be processed. Means for outputting data from the block passed from the block storage means, and passing the output data to the fraction data processing means as a fraction data processing block, wherein the fraction data processing means Data matching means for generating matched data having the same length as the fraction data from the fraction data processing block; and a fraction for fusing the matched data into the fraction data to generate output data having the same length as the fraction data. And data fusion means.

As a result, the encryption processing performed on the fractional data is comparable to the encryption processing performed on each block. Therefore, security can be improved even though the data length does not change. Further, the fusion in the fusion means and the fractional data fusion means may be a calculation of an exclusive OR for each corresponding bit. As a result, the same data length is subjected to exclusive OR calculation for each bit to obtain a result of the same data length, and the same processing can be performed for encryption and decryption.

The storage means stores the initial value of the chained data in advance and uses it when processing the first block, and the key data and the initial value of the chained data are used to encrypt certain encrypted data. Is the same as the one used by the device that receives and decrypts the output of the encrypting device and is the same as the one used by the device that decrypts it, and the encrypting device and the decrypting device use the same key data. In the case where the same initial value of the chained data is used, the encryption processing performed by the decrypting apparatus is always the inverse conversion of the encryption processing performed by the encrypting apparatus.
This allows the initial value of the chained data to be used when processing the first block, and the same key data is used for encryption and decryption, and decryption is performed by using the initial value of the chained data. , Only those having correct key data and chained data can decrypt the data.

Further, since the correct key data and the chain data are not disclosed, the decryption becomes more difficult as compared with the case where only the key data is not disclosed, though the apparatus scale and the processing time are not increased so much. . Therefore, the safety can be further improved without greatly increasing the device scale, the processing time, and the like. Further, the cryptographic processing apparatus further includes key data storage means for storing key data and updating the key data each time encryption processing is performed, and the fusing means stores the chain data stored in the storage means in key data storage. The key data storage unit stores the initial value of the key data and uses the key data when processing the first data to update the key data stored therein as new key data. It may be characterized in that it is subjected to the next encryption processing.

Thus, the key data can be updated, so that decryption becomes more difficult than when the key data is not updated. Therefore, the safety can be further improved without greatly increasing the device scale, the processing time, and the like. The storage unit selects one of the intermediate data, the input data, the fusion data, and the output data output from the main encryption processing unit based on the chain data stored therein, and creates a new chain data. It is also characterized in that the chain data stored by itself is updated and subjected to the next encryption processing. As a result, which data becomes new chained data is determined based on the chained data, so that decryption becomes more difficult than in the case where fixed intermediate data becomes new chained data.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus and the processing time. The input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the data to be encrypted to generate fused data to be processed. The encryption processing means may perform a main encryption process specified by the key data and generate output data from the fusion-processed encrypted data. As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, merged with the data to be encrypted in the subsequent encryption process, and the chained data is updated each time the encryption process is performed. Each output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each chain data, and the encryption is performed even though the device size and processing time etc. do not increase much. Decryption becomes difficult.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs an encryption process specified by key data to generate output data from data to be encrypted, and applies the effect of the preceding data to the subsequent data. Storage means for storing the chain data used for the application and updating the chain data each time the encryption processing is performed, and performing encryption processing by generating the encryption processing data from the data to be encrypted by performing the main encryption processing specified by the key data A main cryptographic processing unit for outputting intermediate data generated in a process until data is generated; and a fusing unit for generating output data by fusing chained data stored in the storage unit with cryptographically processed data. Is characterized in that the intermediate data output from the main encryption processing means is updated as new chain data, and the chain data stored therein is updated and subjected to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, merged with the encryption-processed data at the time of the subsequent encryption process, and the chained data is updated each time the encryption process is performed. Therefore, each output data depends on all data before itself,
The statistical characteristics of the plaintext are disturbed by each chain of data,
Decryption becomes difficult even though the device scale and processing time are not significantly increased. In addition, the cryptanalyst
Even if you could get a ciphertext / plaintext pair,
It is practically impossible to obtain the chain data used for the encryption process, and since the algorithm for generating the chain data and the initial value of the chain data are not disclosed, it is more difficult to decipher by "known plaintext attack" It is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing based on input data to generate output data, and stores chained data used to exert the influence of previous data on subsequent data. Storage means for updating the chain data each time the cryptographic process is performed; fusion means for merging the chain data stored in the storage means with all or a part of the input data to generate fusion data; A first main encryption processing means for performing intermediate encryption data by performing one main encryption processing; and a second main encryption processing means for performing second main encryption processing based on the fusion data to generate output data, wherein the storage means includes: It is characterized in that the intermediate data generated by the primary encryption processing means is updated as chain data stored therein as new chain data, and is used for the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption process. Each output data updates its chain data, so each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the device size and processing time Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

The input data includes key data and data to be encrypted, and the fusing means fuses the chain data stored in the storage means with the key data to generate fusion key data. The apparatus further includes partial key generation means for respectively generating the partial keys of the first main encryption processing means and the second main encryption processing means from the fusion key data and subjecting them to the respective main encryption processing, The processing means performs a first main encryption process specified by the partial key to generate intermediate data from the data to be encrypted, and the second main encryption processing means performs a second main encryption process specified by the partial key. The output data may be generated from the data to be encrypted.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, merged with the key data in the subsequent encryption process, and the chained data is updated each time the encryption process is performed. However, each output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each chained data, and although the device size and processing time etc. do not increase much, Decryption becomes difficult.

Further, the encryption processing device further prepares a block of encrypted data to be processed next in order while dividing the data to be encrypted into blocks each having a predetermined number of bits. Means for generating output data having the same length as the fraction data based on the chained data from the fraction data smaller than the block generated when the block preparation means divides the data to be encrypted into blocks. Wherein the cryptographic processing device performs cryptographic processing in block units.

As a result, output data having the same length as the fraction data can be generated from the fraction data.
All input data and all output data have the same length. Therefore, even if the encryption processing is performed, the data length does not change, and the data is easy to handle. Further, the fraction data processing means includes data matching means for generating fraction chain data having the same length as the fraction data from the chain data, and combining the fraction chain data with the fraction data so as to have the same length as the fraction data. And a fraction data fusion unit for generating output data.

[0368] Thereby, since fraction chain data having the same length as the fraction data can be generated from the chain data, the fraction chain data can be fused with the fraction data. Therefore, even if the encryption processing is performed, the data length does not change, and the data is easy to handle.

[0369] The fraction data processing means stores the block which has been subjected to the encryption processing by the second main encryption processing means, and stores the block stored when the fraction data is generated as new encrypted data. The second main cryptographic processing unit generates output data from the block passed from the block storage unit and uses the generated output data as a fraction data processing block as a fraction data processing unit. The fraction data processing means further includes data matching means for generating matched data having the same length as the fraction data from the fraction data processing block, and integrating the matched data into the fraction data to be the same as the fraction data. And a fraction data fusion unit for generating length output data.

As a result, the encryption processing performed on the fractional data is comparable to the encryption processing performed on each block. Therefore, security can be improved even though the data length does not change. Further, the cryptographic processing device further includes key data storage means for storing key data and updating the key data each time encryption processing is performed,
The fusion unit fuses the chain data stored in the storage unit with the key data stored in the key data storage unit. The key data stored therein may be updated with the data as new key data, and the key data may be subjected to the next encryption process.

[0371] Thus, since the key data can be updated, decryption becomes more difficult than in the case where the key data is not updated. Therefore, the safety can be further improved without greatly increasing the device scale, the processing time, and the like.

The input data includes key data and data to be encrypted, and the fusing means fuses the chain data stored in the storage means with the data to be encrypted to generate fused data to be encrypted. The first main cryptographic processing means performs a first main cryptographic process specified by key data to generate intermediate data from the fusion-processed encrypted data,
The main encryption processing means may be characterized in that the second encryption processing specified by the key data is performed to generate output data from the fusion-processed encrypted data.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, merged with the data to be encrypted in the subsequent encryption process, and the chained data is updated each time the encryption process is performed. Therefore, each output data depends on all the data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and even if the device scale and processing time etc. do not increase so much. Regardless, decryption becomes difficult.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and applies the effect of the preceding data to the subsequent data. Storage means for storing the chain data used for applying and updating the chain data each time the encryption processing is performed; fusion means for fusing the chain data stored by the storage means with the key data to generate fusion key data; Partial key generation means for generating a partial key from the fusion key data; first main encryption processing means for performing a first main encryption process specified by the partial key to generate output data from the data to be encrypted; Second main encryption processing means for performing intermediate processing from output data by performing a specified second main encryption processing, wherein the partial key generation means performs the first
The partial keys of the main cryptographic processing means and the second main cryptographic processing means are respectively generated and subjected to the respective main cryptographic processing, and the storage means stores the intermediate data generated by the second main cryptographic processing means as new chain data. It is characterized in that the chain data to be updated is updated and subjected to the next encryption processing.

Thus, the intermediate data generated in the process of performing the encryption process is stored as chain data, merged with the key data in the subsequent encryption process, and the chain data is updated each time the encryption process is performed. However, each output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each chained data, and although the device size and processing time etc. do not increase much, Decryption becomes difficult. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
A cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted. Storage means for storing the chain data to be used and updating the chain data each time the encryption processing is performed, and a first main encryption for performing a first main encryption processing specified by the key data and generating intermediate data from the data to be encrypted Processing means for performing a second main encryption process specified by the key data to generate encrypted data from the encrypted data;
A main cryptographic processing means; and a fusing means for fusing the chain data stored in the storage means to the cryptographic processing data to generate output data, wherein the storage means converts the intermediate data generated by the first main cryptographic processing means into a new chain data. It is characterized in that the chain data stored by itself is updated as data and the updated chain data is subjected to the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, merged with the encrypted data at the time of the subsequent encryption process, and the chained data is updated each time the encryption process is performed. Therefore, each output data depends on all data before itself,
The statistical characteristics of the plaintext are disturbed by each chain of data,
Decryption becomes difficult even though the device scale and processing time are not significantly increased. In addition, the cryptanalyst
Even if you could get a ciphertext / plaintext pair,
It is practically impossible to obtain the chain data used for the encryption process, and since the algorithm for generating the chain data and the initial value of the chain data are not disclosed, it is more difficult to decipher by "known plaintext attack" It is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted. Storage means for storing chain data to be used and updating the chain data each time encryption processing is performed, and first main encryption processing for performing first main encryption processing specified by key data and generating encrypted data from the chain data Means for fusing encryption-processed data with data-to-be-encrypted to generate intermediate data, and second main encryption processing for performing second encryption processing specified by the key data and generating output data from the intermediate data Means for updating the chained data stored therein as intermediate data as new chained data for use in the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to the encryption process at the time of the subsequent encryption process to generate the encrypted data and fuse it with the data to be encrypted. Since the chain data is updated each time the encryption process is performed, each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the scale of the device is reduced. Decryption becomes difficult even though the processing time and the like are not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is practically impossible to obtain the chain data used in the cryptographic process, and furthermore, generates the chain data. Since the initial value of the algorithm and chain data is not disclosed, "known plaintext attack"
Is more difficult to decrypt, and brute force is also more difficult.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted. Storage means for storing chain data to be used and updating the chain data each time encryption processing is performed, and first main encryption processing for performing first main encryption processing specified by key data and generating encrypted data from the chain data Means, second main encryption processing means for performing a second main encryption process specified by the key data to generate intermediate data from the data to be encrypted, and generating output data by fusing the encrypted data with the intermediate data The storage means updates the chained data stored therein as intermediate data as new chained data and supplies the chained data to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to the encryption process at the time of the subsequent encryption process to generate the encrypted data, which is fused with the intermediate data. Since the chain data is updated each time processing is performed, each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the scale of the device and processing Decryption becomes difficult even though time is not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus, the processing time, and the like.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted. Storage means for storing chain data to be used and updating the chain data each time encryption processing is performed, and first main encryption processing means for performing first main encryption processing specified by key data and generating intermediate data from the chain data When,
Fusing means for fusing the intermediate data with the data to be encrypted to generate fused data, and second main cryptographic processing means for performing a second main cryptographic process specified by the key data and generating output data from the fused data. The storage means is characterized in that the storage means updates the chained data stored therein as new chained data and supplies the chained data to the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to the encryption process at the time of the subsequent encryption process to generate the intermediate data and fuse it with the data to be encrypted. Each time the encryption process is performed, the chain data is updated, so each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the scale of the device and the Decryption becomes difficult even though the processing time is not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted. Storage means for storing chain data to be used and updating the chain data each time encryption processing is performed, and first main encryption processing means for performing first main encryption processing specified by key data and generating intermediate data from the chain data When,
Second main cryptographic processing means for performing second main cryptographic processing specified by key data to generate cryptographically processed data from data to be encrypted, and fusing means for fusing intermediate data to cryptographically processed data to generate output data Wherein the storage means updates the chain data stored therein as the new chain data with the intermediate data and supplies the chain data to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to the encryption process at the time of the subsequent encryption process to generate the intermediate data, fused with the encrypted data, and Since the chain data is updated each time processing is performed, each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the scale of the equipment and processing Decryption becomes difficult even though time is not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

The cryptographic processing apparatus according to the present invention is a cryptographic processing apparatus that performs cryptographic processing based on input data to generate output data, and uses chained data used to exert the influence of previous data on subsequent data. Storing means for updating the chain data each time the encryption processing is performed, converting means for performing predetermined predetermined conversion on the chain data stored in the storage means to generate conversion data, Fusing means for fusing with the input data to generate fused data;
Main cryptographic processing means for performing main cryptographic processing based on the fusion data to generate output data and outputting intermediate data generated in the process of generating output data, wherein the storage means includes intermediate data, input data And updating the chain data stored therein as the new chain data with the converted data or the output data, and subjecting the chain data to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data to generate key data or encrypted data. Since it is merged with input data such as processing data and the chain data is updated each time encryption processing is performed, each output data depends on all data before itself, and the statistical characteristics of plain text are The data is disturbed by each chain data, and the decryption becomes difficult even though the device scale and the processing time are not increased so much.
In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
Further, the predetermined conversion performed by the conversion means may be bit replacement or bit conversion. As a result, a simple predetermined conversion such as bit replacement or bit conversion is kept private, so that it becomes difficult to decipher the code even though the device scale and the processing time are not significantly increased.

The input data includes key data and data to be encrypted, the fusion means fuses the converted data with key data to generate fusion key data, and the main encryption processing means generates fusion key data. The main unit performs the main encryption process specified by the above to generate output data from the data to be encrypted, and the storage unit updates the chained data stored therein as new chained data with the intermediate data, the data to be encrypted, or the output data. Then, it may be characterized in that it is subjected to the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data, which is merged with the key data. Since the chain data is updated each time processing is performed, each output data depends on all data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the scale of the equipment and processing Decryption becomes difficult even though time is not significantly increased.

Further, the encryption processing device further prepares a block of encrypted data to be processed next in order while dividing the data to be encrypted into blocks each having a predetermined number of bits. Means for generating output data having the same length as the fraction data based on the chained data from the fraction data smaller than the block generated when the block preparation means divides the data to be encrypted into blocks. Wherein the cryptographic processing device performs cryptographic processing in block units.

Therefore, even if the encryption processing is performed, the data length does not change, so that the data can be easily handled. As a result, output data having the same length as the fraction data can be generated from the fraction data, so that all input data and all output data have the same length. Further, the fraction data processing means includes data matching means for generating fraction chain data having the same length as the fraction data from the chain data, and combining the fraction chain data with the fraction data so as to have the same length as the fraction data. And a fraction data fusion unit for generating output data.

Thus, since the fraction chain data having the same length as the fraction data can be generated from the chain data, the fraction chain data can be fused with the fraction data. Therefore, even if the encryption processing is performed, the data length does not change, and the data is easy to handle. Further, the fraction data processing means includes data matching means for generating matching data having the same length as the fraction data from the converted data, and output data having the same length as the fraction data by fusing the matching data into the fraction data. And a fraction data fusion means for generating the fraction data.

As a result, the encryption processing performed on the fractional data is comparable to the encryption processing performed on each block. Therefore, security can be improved even though the data length does not change. Further, the cryptographic processing device further includes key data storage means for storing key data and updating the key data each time encryption processing is performed, and the fusion means stores the key data in the key data storage means. The key data storage unit stores the initial value of the key data and updates the key data stored therein as new key data by using the key data storage unit when processing the first data. You can also. As a result, the key data can be updated, so that decryption becomes more difficult than when the key data is not updated.

Therefore, the safety can be further improved without greatly increasing the apparatus scale, processing time, and the like. The input data includes key data and data to be encrypted, and the fusing unit fuses the converted data with the data to be encrypted to generate fused data to be processed.
The main cryptographic processing means performs main cryptographic processing specified by key data to generate output data from the fused encrypted processing data, and the storage means stores the intermediate data, the encrypted processed data, the fused encrypted processed data or the output data. It is also possible to update the chained data stored therein as new chained data and to use the updated chained data for the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data, which is merged with the data to be encrypted. Since each time the cryptographic process is performed, the chain data is updated, each output data depends on all the data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the size of the device is reduced. Decryption becomes difficult even though the processing time and the like are not significantly increased.

[0397] The encryption processing device according to the present invention is an encryption processing device that performs an encryption process specified by key data to generate output data from data to be encrypted, and applies the effect of the previous data to the subsequent data. Storage means for storing the chain data used for the effect and updating the chain data each time the encryption processing is performed; and generating predetermined conversion data by performing a predetermined conversion on the chain data stored by the storage means. Conversion means, and main encryption processing means for performing encryption processing specified by the key data, generating encrypted data from the data to be encrypted, and outputting intermediate data generated in the process of generating the encrypted data; Fusing means for fusing the converted data to the cryptographic processing data to generate output data, wherein the storage means stores the intermediate data, the cryptographic processing data,
The present invention is characterized in that the chained data stored in itself is updated with the encrypted data or output data as new chained data, and the updated chained data is subjected to the next encryption processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data, which is fused with the encrypted data. Each time the cryptographic process is performed, the chain data is updated, so each output data depends on all the data before itself, and the statistical characteristics of the plaintext are disturbed by each chain data, and the device size and Decryption becomes difficult even though the processing time is not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, in order to apply the influence of previous data to subsequent data. Storage means for storing the chain data to be used and updating the chain data each time the encryption processing is performed; conversion means for performing a predetermined conversion on the chain data stored by the storage means to generate conversion data; Main encryption processing means for performing encryption processing specified by the key data and generating encrypted data from the converted data; and fusing means for generating the output data by fusing the encrypted data with the data to be encrypted. The storage means updates the chain data stored by itself as new chain data with the output data and supplies the chain data to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, a predetermined conversion is performed in the subsequent encryption process to generate converted data, and the encryption process is performed to generate the converted data. Since it is merged with the processing data and the chain data is updated each time the encryption process is performed, each output data depends on all data before itself, and the statistical characteristics of plain text depend on each chain data. Decryption makes decryption difficult even though the device scale, processing time, etc. are not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus and the processing time.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, in order to apply the influence of previous data to subsequent data. Storage means for storing the chain data to be used and updating the chain data each time the encryption processing is performed; conversion means for performing a predetermined conversion on the chain data stored by the storage means to generate conversion data; Main encryption processing means for performing encryption processing specified by the key data and generating encrypted data from the converted data; and fusing means for generating the output data by fusing the encrypted data with the data to be encrypted. The storage means updates the chain data stored therein as the new chain data with the data to be encrypted, and provides the chain data to the next encryption process.

[0402] As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data. Since it is merged with the processing data and the chain data is updated each time the encryption process is performed, each output data depends on all data before itself, and the statistical characteristics of plain text depend on each chain data. Decryption makes decryption difficult even though the device scale, processing time, etc. are not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, safety can be improved without greatly increasing the scale of the apparatus, processing time, and the like.
The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, in order to apply the influence of previous data to subsequent data. Storage means for storing the chain data to be used and updating the chain data each time the encryption processing is performed; conversion means for performing a predetermined conversion on the chain data stored by the storage means to generate conversion data; Main cryptographic processing means for performing main cryptographic processing specified by the key data to generate intermediate data from the converted data, and fusing means for fusing the intermediate data to the data to be encrypted and generating output data. The storage means updates the chained data stored therein as the new chained data with the intermediate data for use in the next encryption process.

[0404] Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data. Since it is merged with the processing data and the chain data is updated each time the encryption process is performed, each output data depends on all data before itself, and the statistical characteristics of plain text depend on each chain data. Decryption makes decryption difficult even though the device scale, processing time, etc. are not significantly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

Therefore, safety can be improved without greatly increasing the scale of the apparatus, processing time, and the like.
The cryptographic processing method according to the present invention is a cryptographic processing method for generating output data by performing cryptographic processing based on input data, wherein chained data used by the storage means to exert the influence of the previous data on the subsequent data. A fusion step of fusing the chain data stored in the storage means with the input data to generate fusion data, and performing a main encryption process based on the fusion data to generate output data and generate output data A main encryption processing step of outputting intermediate data generated in the process until the intermediate encryption processing step, and updating the chained data stored in the storage means as the new chained data with the intermediate data output in the main encryption processing step to perform the next encryption processing And a storage step for providing

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption process. The output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each output data. Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

[0407] Therefore, the safety can be improved without significantly increasing the scale of the apparatus and the processing time.
The cryptographic processing method according to the present invention is a cryptographic processing method for generating output data by performing cryptographic processing based on input data, wherein chained data used by the storage means to exert the influence of the previous data on the subsequent data. A fusion step of fusing the chained data stored in the storage means with all or a part of the input data to generate fusion data; and performing a first main encryption process based on the fusion data to generate the intermediate data. , A second main encryption processing step of performing a second main encryption processing based on the fused data to generate output data, and an intermediate data generated in the first main encryption processing step. A storage step of updating the chain data stored in the storage unit as new chain data and subjecting the chain data to the next encryption process.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption process. The output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each output data. Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

[0409] The encryption processing method according to the present invention is an encryption processing method for generating output data by performing encryption processing based on input data, in which the storage means applies the influence of the previous data to the subsequent data. Memorizes the chain data to be used,
A conversion step of applying predetermined conversion to the chain data stored in the storage means to generate conversion data; a fusion step of generating the fusion data by fusing the conversion data with the input data; and Performing a main encryption process based on the main encryption process step of generating output data and outputting intermediate data generated in the process of generating the output data; and outputting the intermediate data, input data, converted data, or output data to a new A storage step of updating the chained data stored in the storage means as the chained data and subjecting the chained data to the next encryption processing.

[0410] Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data to generate key data or encrypted data. Since it is merged with input data such as processing data and the chain data is updated each time encryption processing is performed, each output data depends on all data before itself, and the statistical characteristics of plain text are The data is disturbed by each chain data, and the decryption becomes difficult even though the device scale and the processing time are not increased so much.
In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force.

[0411] Therefore, the safety can be improved without significantly increasing the apparatus scale, processing time, and the like.
The computer-readable storage medium storing the cryptographic processing method according to the present invention is a computer-readable storage medium storing a cryptographic processing method of generating cryptographic processing based on input data to generate output data. A fusing step of storing chain data used by the means to apply the influence of the previous data to the subsequent data, fusing the chain data stored in the storage means with the input data, and generating fused data; A main encryption processing step of performing output of intermediate data generated in a process of generating output data by performing main encryption processing based on the intermediate data, and outputting the intermediate data output in the main encryption processing step to a new A storage step of updating the chain data stored in the storage means as the chain data and subjecting the chain data to the next encryption process. To.

[0412] Thus, the intermediate data generated in the process of performing the encryption processing is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption processing, thereby performing encryption processing. The output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each output data. Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

[0413] The computer-readable storage medium storing the encryption processing method according to the present invention is a computer-readable storage medium storing the encryption processing method of performing encryption processing based on input data to generate output data. The storage means stores in the storage means chained data used to cause the influence of the previous data to affect the subsequent data, and the chained data stored in the storage means is integrated with all or part of the input data. A fusion step of generating fusion data;
A first main encryption processing step of generating intermediate data by performing a first main encryption process based on the fusion data, and a second main encryption processing step of generating an output data by performing a second main encryption process based on the fusion data And a storage step of updating the chained data stored in the storage unit with the intermediate data generated by the first main encryption processing step as new chained data and providing the chained data to the next encryption processing.

[0414] Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is merged with key data or input data such as data to be encrypted at the time of the subsequent encryption process. The output data depends on all the data before it, and the statistical characteristics of the plaintext are disturbed by each output data. Decryption becomes difficult even though the number is not greatly increased. In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the initial values of the algorithm and the chain data are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

[0415] The computer-readable storage medium storing the encryption processing method according to the present invention is a computer-readable storage medium storing the encryption processing method of performing encryption processing based on input data to generate output data. The storage means stores in the storage means chain data used to cause the influence of the previous data to affect the subsequent data, and performs a predetermined conversion on the chain data stored in the storage means. A conversion step for generating conversion data;
A fusion step of fusing the converted data with the input data to generate fusion data, and outputting the intermediate data generated in a process of performing a main encryption process based on the fusion data to generate output data and generating output data And a storage step of updating the chain data stored in the storage unit with the intermediate data, the input data, the converted data, or the output data as new chain data and subjecting the chain data to the next encryption process. And

[0416] Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is subjected to a predetermined conversion at the time of the subsequent encryption process to generate converted data to generate key data or encrypted data. Since it is merged with input data such as processing data and the chain data is updated each time encryption processing is performed, each output data depends on all data before itself, and the statistical characteristics of plain text are The data is disturbed by each chain data, and the decryption becomes difficult even though the device scale and the processing time are not increased so much.
In addition, even if a cryptanalyst can obtain a pair of a ciphertext and a plaintext, it is virtually impossible to obtain the chain data used for the cryptographic processing, and furthermore, it generates the chain data. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, it is more difficult to decipher the data by “known plaintext attack”, and it is also difficult to decipher by brute force. Therefore, safety can be improved without significantly increasing the apparatus scale, processing time, and the like.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a cryptographic communication system according to a first embodiment of the present invention.

FIG. 2 is a diagram illustrating a detailed configuration of the data encryption device 10 according to the first embodiment of the present invention.

FIG. 3 is a diagram showing a detailed configuration of first to eighth encryption units 105a to 105h.

FIG. 4 is a diagram showing a detailed configuration of a part for calculating a function “f”.

FIG. 5 is a diagram showing a substitution table of selection functions S1 to S8.

FIG. 6 is a diagram illustrating a detailed configuration of a fraction data processing unit 106 according to the first embodiment of the present invention.

FIG. 7 is a diagram showing a detailed configuration of the data decoding device 20 according to the first embodiment of the present invention.

FIG. 8 is a diagram showing a detailed configuration of a fraction data processing unit 206 according to the first embodiment of the present invention.

FIG. 9 is a data encryption device 10 according to the first embodiment of the present invention.
It is a figure showing the flow of the encryption processing in.

FIG. 10 is a data decoding device 2 according to the first embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 11 is a diagram showing a detailed configuration of a data encryption device 10 according to a second embodiment of the present invention.

FIG. 12 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 2 of the present invention.

FIG. 13 is a data encryption device 1 according to a second embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 14 is a data decoding device 2 according to the second embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 15 is a diagram showing a detailed configuration of a data encryption device 10 according to Embodiment 3 of the present invention.

FIG. 16 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 3 of the present invention.

FIG. 17 is a data encryption device 1 according to a third embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 18 is a data decoding device 2 according to the third embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 19 is a diagram showing a detailed configuration of a data encryption device 10 according to Embodiment 4 of the present invention.

FIG. 20 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 4 of the present invention.

FIG. 21 is a data encryption device 1 according to a fourth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 22 is a data decoding device 2 according to a fourth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 23 is a diagram showing a detailed configuration of the data encryption device 10 according to the fifth embodiment of the present invention.

FIG. 24 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 5 of the present invention.

FIG. 25 is a data encryption device 1 according to a fifth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 26 is a data decoding device 2 according to the fifth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 27 is a diagram illustrating a detailed configuration of the data encryption device 10 according to the sixth embodiment of the present invention.

FIG. 28 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 6 of the present invention.

FIG. 29 is a data encryption device 1 according to the sixth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 30 is a data decoding device 2 according to the sixth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 31 is a diagram showing a detailed configuration of a data encryption device 10 according to a seventh embodiment of the present invention.

FIG. 32 is a diagram illustrating a detailed configuration of the data decoding device 20 according to the seventh embodiment of the present invention.

FIG. 33 is a data encryption device 1 according to a seventh embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 34 is a data decoding device 2 according to the seventh embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 35 is a diagram showing a detailed configuration of the data encryption device 10 according to the eighth embodiment of the present invention.

FIG. 36 is a diagram illustrating a detailed configuration of the data decoding device 20 according to the eighth embodiment of the present invention.

FIG. 37 is a data encryption device 1 according to an eighth embodiment of the present invention.
FIG. 9 is a diagram showing a flow of an encryption process at 0.

FIG. 38 is a diagram showing a detailed configuration of a data encryption device 10 according to Embodiment 9 of the present invention.

FIG. 39 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 9 of the present invention.

FIG. 40 is a diagram showing a detailed configuration of the data encryption device 10 according to the tenth embodiment of the present invention.

FIG. 41 is a diagram showing a detailed configuration of a data decoding device 20 according to Embodiment 10 of the present invention.

FIG. 42 is a diagram showing a flow of an encryption process in the data encryption device 10 according to the tenth embodiment of the present invention.

FIG. 43 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the tenth embodiment of the present invention.

FIG. 44 is a diagram showing a detailed configuration of the data encryption device 10 according to the eleventh embodiment of the present invention.

FIG. 45 is a diagram illustrating a detailed configuration of a data decoding device 20 according to Embodiment 11 of the present invention.

FIG. 46 is a diagram showing a flow of an encryption process in the data encryption device 10 according to the eleventh embodiment of the present invention.

FIG. 47 is a diagram showing a flow of an encryption process in the data decryption device 20 according to the eleventh embodiment of the present invention.

FIG. 48 is a diagram showing a detailed configuration of a fraction data processing unit 106 according to Embodiment 12 of the present invention.

FIG. 49 is a diagram showing a flow of fraction data processing in the data encryption device 10 according to the twelfth embodiment of the present invention.

FIG. 50 is a diagram showing a configuration of an encryption device 30 that realizes the CBC mode.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Data encryption apparatus 11 Transmission part 101 Block division part 102 Block storage part 103 Key data fusion part 104 Partial key generation part 105a-105h Encryption part 106 Fractional data processing part 106a Data matching part 106b Fractional data fusion part 106c Ciphertext block Storage unit 107 Block combination unit 108 Block fusion unit 109 Block conversion unit 110 Key data storage unit 111 Block selection unit 20 Data decryption device 21 Receiving unit 201 Block division unit 202 Block storage unit 203 Key data fusion unit 204 Partial key generation unit 205a To 205h Decryption unit 205i to 205p Encryption unit 206 Fractional data processing unit 206a Data matching unit 206b Fractional data fusion unit 207 Block combining unit 208 Block fusion unit 209 Block conversion unit 210 Key data Data storage unit 211 block selection unit 30 encryption device 301 exclusive OR unit 302 data encryption unit 303 register

 ────────────────────────────────────────────────── ─── Continued on the front page (72) Inventor Seikatsu Maruyama 1006 Kazuma Kadoma, Osaka Prefecture Matsushita Electric Industrial Co., Ltd.

Claims (43)

[Claims] A cryptographic processing apparatus for performing cryptographic processing based on input data to generate output data, wherein the cryptographic processing apparatus stores chained data used to exert the influence of previous data on subsequent data, and performs cryptographic processing. Storage means for updating the chained data each time the processing is performed; fusing means for fusing the chained data stored in the storage means with the input data to generate fused data; applying a main encryption process based on the fused data to output Main encryption processing means for generating data and outputting intermediate data generated in the process of generating output data, wherein the storage means uses the intermediate data output by the main encryption processing means as new chained data, A cryptographic processing apparatus for updating chained data stored therein and for performing the next cryptographic processing. 2. The main cryptographic processing means performs a plurality of stages of partial processing, and the plurality of stages of partial processing includes a plurality of stages of partial processing.
Performing partial processing on the data that has been subjected to partial processing at the second stage, and then performing the same for the number of stages at the second stage. The data that has been subjected to the partial processing at the final stage becomes output data. The data obtained by performing the partial processing in (1) becomes intermediate data, and the storage unit stores one of the intermediate data output from the main encryption processing unit as new chain data. Item 2. The encryption processing device according to Item 1. 3. The input data includes key data and data to be encrypted, and the fusing unit generates fused key data by fusing chain data stored in the storage unit with the key data. The cryptographic processing unit further generates partial keys corresponding to the number of stages of the main cryptographic processing unit from the fusion key data, sends the partial keys to each stage of the main cryptographic processing unit, and causes each of the stages to perform the respective partial processing. 3. The cryptographic processing apparatus according to claim 2, wherein the main cryptographic processing means performs partial processing of a plurality of stages specified by partial keys corresponding to the number of stages, and generates output data from the data to be encrypted. . 4. The encryption processing device further prepares one block of encrypted data to be processed next in order while dividing the encrypted data into blocks each having a predetermined number of bits. Block preparing means, and, based on the chained data, output data having the same length as the fraction data, based on the fractional data generated when the block preparation means divides the data to be encrypted into blocks. The cryptographic processing apparatus according to claim 3, further comprising a fraction data processing unit, wherein the cryptographic processing apparatus performs cryptographic processing in block units. 5. The fraction data processing means includes: data matching means for generating, from the concatenated data, fraction concatenated data having the same length as the fraction data; and integrating the fraction concatenated data into the fraction data. 5. The cryptographic processing apparatus according to claim 4, further comprising: a fraction data fusing unit that generates output data having the same length as. 6. The fraction data processing means stores a block subjected to encryption processing by the main encryption processing means, and when the fraction data occurs, replaces the stored block with new encrypted data. The main cryptographic processing means generates output data from the block passed from the block storage means, and passes the generated data to the fractional data processing means as a fractional data processing block. The fraction data processing means further comprises: data matching means for generating matched data having the same length as the fraction data from the fraction data processing block; and combining the matched data with the fraction data to obtain the same as the fraction data. 5. The cryptographic processing apparatus according to claim 4, further comprising a fraction data fusion unit for generating length output data. 7. The cryptographic processing apparatus according to claim 6, wherein the fusion in the fusion means and the fractional data fusion means is calculation of an exclusive OR for each corresponding bit. 8. The storage means stores in advance an initial value of the chained data and uses it when processing the first block. The key data and the initial value of the chained data are used for encrypting a certain data to be encrypted. The device used by the encrypting device and the device used by the device that receives and decrypts the output of the encrypting device are the same, and are not disclosed, and the encrypting device and the decrypting device However, when the same key data and the same initial value of the chained data are used, the encryption processing performed by the decrypting device is always the inverse conversion of the encryption processing performed by the encrypting device. The cryptographic processing device according to claim 7, wherein 9. The cryptographic processing apparatus further comprises key data storage means for storing key data and updating the key data each time encryption processing is performed, and the fusing means comprises a chain stored in the storage means. Fusing the data with the key data stored in the key data storage means, the key data storage means stores the initial value of the key data and uses it when processing the first data, and uses the fused key data as new key data. 4. The cryptographic processing apparatus according to claim 3, wherein the key data stored therein is updated so as to be used for the next cryptographic processing. 10. The storage unit selects one of the intermediate data, the input data, the fusion data, and the output data output by the main encryption processing unit based on the chain data stored therein. 3. The encryption processing device according to claim 2, wherein the chained data stored therein is updated as new chained data, and the updated chained data is subjected to the next encryption processing. 11. The input data includes key data and data to be encrypted, and the fusing unit fuses the chained data stored in the storage unit with the data to be encrypted to generate the fused encrypted data. The cryptographic processing device according to claim 1, wherein the main cryptographic processing unit performs main cryptographic processing specified by the key data, and generates output data from the fusion-processed cryptographically processed data. 12. An encryption processing device for performing an encryption process specified by key data to generate output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. Storage means for updating the chain data each time encryption processing is performed; and performing main encryption processing specified by key data to generate encryption processing data from the data to be encrypted to generate encryption processing data. The main encryption processing means for outputting intermediate data generated in the process up to the step of performing, and fusing means for fusing the chained data stored in the storage means to the cryptographic processing data to generate output data, the storage means comprising: Cryptographic processing characterized by updating the chain data stored therein by using the intermediate data output by the main cryptographic processing means as new chain data and providing the chain data for the next cryptographic process Location. 13. An encryption processing device for performing an encryption process based on input data to generate output data, wherein the encryption device stores chained data that is used to exert the influence of previous data on subsequent data. Storage means for updating the chained data each time the processing is performed; fusing means for fusing the chained data stored in the storage means to all or a part of the input data to generate fused data; A first main encryption processing means for performing intermediate encryption processing to generate intermediate data; and a second main encryption processing means for performing second main encryption processing based on the fused data to generate output data. An encryption processing device that updates the chained data stored therein by using the intermediate data generated by the first main encryption processing unit as new chained data, and causes the chained data to be subjected to the next encryption processing. 14. The input data includes key data and data to be encrypted, and the fusing means generates fused key data by fusing chain data stored in the storage means with the key data. The cryptographic processing apparatus further includes a partial key generation unit that generates the partial keys of the first main cryptographic processing unit and the second main cryptographic processing unit from the fusion key data, and provides the partial key to each main cryptographic process. The first main cryptographic processing means performs a first main cryptographic processing specified by the partial key to generate intermediate data from the data to be encrypted, and the second main cryptographic processing means performs the first main cryptographic processing specified by the partial key. 14. The cryptographic processing apparatus according to claim 13, wherein output data is generated from the data to be encrypted by performing two main cryptographic processing. 15. The encryption processing device further prepares one block of encrypted data to be processed next in order while dividing the encrypted data into blocks each having a predetermined number of bits. Block preparing means, and, based on the chained data, output data having the same length as the fraction data, based on the fractional data generated when the block preparation means divides the data to be encrypted into blocks. The cryptographic processing apparatus according to claim 14, further comprising a fraction data processing unit, wherein the cryptographic processing apparatus performs cryptographic processing in block units. 16. The fraction data processing means includes: data matching means for generating, from the concatenated data, fraction concatenated data having the same length as the fraction data; and merging the fraction concatenated data into the fraction data. 16. The cryptographic processing apparatus according to claim 15, further comprising a fraction data fusion unit that generates output data having the same length as that of. 17. The fraction data processing means stores a block that has been subjected to encryption processing by the second main encryption processing means, and when the fraction data occurs, stores the stored block in a new encrypted data. As the processing data, the second
The second main cryptographic processing unit generates output data from the block passed from the block storage unit, and transfers the output data to the fraction data processing unit as a fraction data processing block. The fraction data processing means further comprises: data matching means for generating matched data having the same length as the fraction data from the fraction data processing block; and combining the matched data with the fraction data to obtain the same as the fraction data. 16. The cryptographic processing apparatus according to claim 15, further comprising: fraction data fusion means for generating length output data. 18. The cryptographic processing apparatus further comprises key data storage means for storing key data and updating the key data each time encryption processing is performed, and the fusing means comprises a chain stored in the storage means. Fusing the data with the key data stored in the key data storage means, the key data storage means stores the initial value of the key data and uses it when processing the first data, and uses the fused key data as new key data. 15. The cryptographic processing apparatus according to claim 14, wherein the key data stored therein is updated to be used for the next cryptographic processing. 19. The input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the data to be encrypted to generate the data to be processed. The first main cryptographic processing means performs a first main cryptographic processing specified by key data to generate intermediate data from the fused encrypted processing data, and the second main cryptographic processing means generates a key 14. The cryptographic processing device according to claim 13, wherein a second main cryptographic process specified by the data is performed to generate output data from the data to be processed to be fused. 20. A cryptographic processing apparatus for performing an encryption process specified by key data and generating output data from data to be encrypted, wherein the chained data is used to exert the influence of the previous data on the subsequent data. Storage means for storing the chain data and updating the chain data each time encryption processing is performed; fusion means for fusing the chain data stored in the storage means with the key data to generate fusion key data; Partial key generation means for generating a partial key; first main encryption processing means for performing first main encryption processing specified by the partial key to generate output data from data to be encrypted; and identification by the partial key. A second main cryptographic processor for performing a second main cryptographic process to generate intermediate data from the output data, wherein the partial key generating unit performs the first main cryptographic processing unit and the second main cryptographic process from the fusion key data. The storage means generates partial keys of the processing means and supplies the generated partial keys to the respective main encryption processes. The storage means updates the chain data stored therein by using the intermediate data generated by the second main encryption processing means as new chain data. And a cryptographic processing apparatus for performing the following cryptographic processing. 21. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. And a storage means for updating the chain data each time encryption processing is performed, and a first main encryption processing for performing first main encryption processing specified by key data and generating intermediate data from data to be encrypted Means, a second main encryption process specified by the key data, and second encryption processing means for generating encrypted data from the data to be encrypted, and chained data stored in the storage means are converted into encrypted data. Fusing means for generating output data by fusing, and the storage means updates the chain data stored therein by using the intermediate data generated by the first main encryption processing means as new chain data. , A cryptographic processing apparatus, characterized in that to used for the next cryptographic processing. 22. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. And a first main cryptographic processing means for performing a first main cryptographic processing specified by key data and generating cryptographically processed data from the chained data, and a storage means for updating the chain data each time the cryptographic processing is performed. Fusing means for fusing the encrypted data with the data to be encrypted to generate intermediate data; and a second main cipher for performing second cryptographic processing specified by the key data to generate output data from the intermediate data. A cryptographic processing apparatus comprising: processing means for updating the chained data stored therein by using the intermediate data as new chained data and providing the chained data to the next cryptographic processing 23. A cryptographic processing device for performing an encryption process specified by key data and generating output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. And a first main cryptographic processing means for performing a first main cryptographic processing specified by key data and generating cryptographically processed data from the chained data, and a storage means for updating the chain data each time the cryptographic processing is performed. And a second main encryption processing means for performing a second main encryption process specified by the key data to generate intermediate data from the data to be encrypted, and generating the output data by fusing the encrypted data with the intermediate data. Storage means for updating the chained data stored therein by using the intermediate data as new chained data and providing the chained data to the next encryption processing. . 24. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. And a first main encryption processing unit that performs a first main encryption process specified by the key data and generates intermediate data from the chain data, Fusing means for fusing intermediate data to data to be encrypted to generate fused data; and performing second main cryptographic processing specified by the key data to generate output data from the fused data. A cryptographic processing apparatus, wherein the storage means updates the chained data stored therein by using the intermediate data as new chained data and causes the chained data to be subjected to the next encryption processing. 25. A cryptographic processing apparatus which performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. And a first main encryption processing unit that performs a first main encryption process specified by the key data and generates intermediate data from the chain data, A second main cryptographic processing means for performing a second main cryptographic process specified by the key data to generate cryptographically processed data from the data to be encrypted, and generating intermediate data into the cryptographically processed data to generate output data Storage means for updating the chained data stored therein by using the intermediate data as new chained data and providing the chained data to the next encryption processing. . 26. A cryptographic processing apparatus for performing cryptographic processing based on input data to generate output data, wherein the cryptographic processing apparatus stores chained data used to exert the influence of previous data on subsequent data. Storage means for updating the chain data each time the data processing is performed; conversion means for performing predetermined predetermined conversion on the chain data stored in the storage means to generate conversion data; and converting the conversion data into input data. Fusing means for generating fused data by fusing to the main cryptographic processing, performing main cryptographic processing based on the fused data to generate output data, and outputting intermediate data generated in the process of generating the output data The storage means updates the chain data stored by itself as new chain data with the intermediate data, input data, converted data or output data, and performs the next encryption processing. Cryptographic processing apparatus for causing subjected to. 27. The cryptographic processing apparatus according to claim 26, wherein the predetermined conversion performed by said conversion means is bit replacement or bit conversion. 28. The input data includes key data and data to be encrypted, the fusion unit fuses the converted data with key data to generate fusion key data, and the main encryption processing unit Performing the main encryption process specified by the fusion key data to generate output data from the data to be encrypted, and the storage unit stores the intermediate data, the data to be encrypted, or the output data as new chained data, 28. The cryptographic processing apparatus according to claim 27, wherein the stored chain data is updated and subjected to the next cryptographic processing. 29. The encryption processing device further prepares one block of encrypted data to be processed next in order while dividing the encrypted data into blocks each having a predetermined number of bits. Block preparing means, and, based on the chained data, output data having the same length as the fraction data, based on the fractional data generated when the block preparation means divides the data to be encrypted into blocks. The cryptographic processing apparatus according to claim 28, further comprising a fraction data processing unit, wherein the cryptographic processing apparatus performs cryptographic processing on a block-by-block basis. 30. The fraction data processing means includes: data matching means for generating, from the concatenated data, fraction concatenated data having the same length as the fraction data; and merging the fraction concatenated data into the fraction data. 30. The cryptographic processing apparatus according to claim 29, further comprising: a fraction data fusing unit that generates output data having the same length as the output data. 31. The fraction data processing means, comprising: data matching means for generating, from the converted data, matched data having the same length as the fraction data; combining the matched data with the fraction data to produce the same data as the fraction data. 30. The cryptographic processing apparatus according to claim 29, further comprising: fraction data fusion means for generating length output data. 32. The cryptographic processing apparatus further comprises key data storage means for storing key data and updating the key data every time encryption processing is performed, wherein the fusion means stores the key data in the key data. The key data is merged with the key data stored in the storage means. The key data storage means stores the initial value of the key data and uses it when processing the first data, and stores the fusion key data as new key data by itself. The cryptographic processing device according to claim 28, wherein key data is updated. 33. The input data includes key data and data to be encrypted, wherein the fusion means fuses the converted data with data to be encrypted to generate fused data to be encrypted, The cryptographic processing means performs a main cryptographic process specified by the key data to generate output data from the fused encrypted data, and the storage means stores the intermediate data, the encrypted data, the fused encrypted data or the output. 28. The cryptographic processing device according to claim 27, wherein the data is stored as new chain data, and the chain data stored therein is updated and subjected to the next encryption process. 34. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. A storage unit that updates the chain data each time encryption processing is performed, and a conversion unit that generates conversion data by applying a predetermined conversion to the chain data stored by the storage unit. Main encryption processing means for performing encryption processing specified by the key data, generating encryption processing data from the data to be encrypted, and outputting intermediate data generated in the process of generating the encryption processing data; Fusing means for fusing data to cryptographically processed data to generate output data, wherein the storage means stores the intermediate data, the data to be encrypted, the cryptographically processed data or the output data. As new chain data, and updates the linkage data stored itself, the cryptographic processing apparatus, characterized in that to used for the next cryptographic processing. 35. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. A storage unit that updates the chain data each time encryption processing is performed, and a conversion unit that generates conversion data by applying a predetermined conversion to the chain data stored by the storage unit. A main cryptographic processing means for performing main cryptographic processing specified by the key data and generating cryptographic processing data from the converted data; and a fusing means for generating the output data by fusing the cryptographic processing data with the cryptographic processing data. A cryptographic processing apparatus, wherein the storage means updates the chained data stored therein by using the output data as new chained data and causes the chained data to be subjected to the next encryption processing. 36. A cryptographic processing apparatus that performs cryptographic processing specified by key data and generates output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. A storage unit that updates the chain data each time encryption processing is performed, and a conversion unit that generates conversion data by applying a predetermined conversion to the chain data stored by the storage unit. A main cryptographic processing means for performing main cryptographic processing specified by the key data and generating cryptographic processing data from the converted data; and a fusing means for generating the output data by fusing the cryptographic processing data with the cryptographic processing data. A cryptographic processing apparatus, characterized in that the storage means updates the chained data stored therein by using the data to be encrypted as new chained data, and provides the chained data for the next encryption process. 37. A cryptographic processing device for performing an encryption process specified by key data and generating output data from data to be encrypted, wherein the chained data is used to exert the influence of previous data on subsequent data. A storage unit that updates the chain data each time encryption processing is performed, and a conversion unit that generates conversion data by applying a predetermined conversion to the chain data stored by the storage unit. Main cryptographic processing means for performing main cryptographic processing specified by key data and generating intermediate data from the converted data, and fusing means for fusing the intermediate data to the data to be encrypted and generating output data. A cryptographic processing apparatus, characterized in that the storage means updates the chained data stored therein by using the intermediate data as new chained data and causes the chained data to be subjected to the next encryption processing. 38. A cryptographic processing method for generating output data by performing cryptographic processing based on input data, wherein the storage means stores chained data used to exert the influence of previous data on subsequent data. A fusing step of fusing the chained data stored in the storage means with the input data to generate fusing data; and performing a main encryption process based on the fusing data to generate output data and generate the output data. A main encryption processing step of outputting intermediate data generated in the process up to and including the intermediate data output in the main encryption processing step as new chain data, and updating the chain data stored in the storage means. A storage step for performing encryption processing. 39. A cryptographic processing method for generating output data by performing cryptographic processing based on input data, wherein the storage means stores chained data used to exert the influence of previous data on subsequent data. A fusing step of fusing the chained data stored in the storage means to all or a part of the input data to generate fused data; and performing a first main encryption process based on the fused data to convert the intermediate data. A first main cryptographic processing step for generating, a second main cryptographic processing step for performing a second main cryptographic processing based on the fused data to generate output data, and a new intermediate data generated in the first main cryptographic processing step. A storage step of updating the chained data stored in the storage means as a simple chained data and providing the chained data to the next encryption processing. 40. A cryptographic processing method for generating output data by performing cryptographic processing based on input data, wherein the storage means stores chained data used to exert the influence of previous data on subsequent data. A conversion step of applying a predetermined conversion to the chain data stored in the storage means to generate conversion data; and fusing the conversion data to input data to generate fusion data. A main cryptographic processing step of performing a main cryptographic process based on the fusion data to generate output data, and outputting intermediate data generated in a process until the output data is generated; intermediate data, input data, and conversion A storage step of updating the chained data stored in the storage means with the data or output data as new chained data and providing the chained data to the next encryption process Cryptographic processing method according to claim. 41. A computer-readable storage medium storing an encryption processing method for generating an output data by performing an encryption process based on input data, wherein the storage means reduces the influence of the previous data to the subsequent data. A fusion step of fusing the chain data stored in the storage means with the input data to generate fusion data; and performing a main encryption process based on the fusion data and outputting the data. A main encryption processing step for generating data and outputting intermediate data generated in the process of generating output data; and storing the intermediate data output in the main encryption processing step as new chain data in a storage unit. And a storage step of updating the chained data and subjecting it to the next encryption processing. A storage medium that can be taken. 42. A computer-readable storage medium storing an encryption processing method for generating an output data by performing an encryption process based on input data, wherein the storage means reduces the influence of the preceding data to the subsequent data. Storing the chained data used in the storage means in the storage means, and fusing the chained data stored in the storage means to all or a part of the input data to generate the fusion data; A first main encryption processing step of generating intermediate data by performing a first main encryption processing, and a second main encryption processing step of generating an output data by performing a second main encryption processing based on the fused data; A storage step of updating the chained data stored in the storage unit as intermediate data generated by the encryption processing step as new chained data, and providing the chained data to the next encryption processing Computer-readable storage medium storing a cryptographic processing method comprising and. 43. A computer-readable storage medium storing an encryption processing method for generating an output data by performing an encryption process based on input data, wherein the storage means reduces the influence of the previous data on the subsequent data. A conversion step of generating conversion data by applying a predetermined conversion to the chain data stored in the storage means to generate conversion data; A fusing step of fusing with input data to generate fusing data; a main step of performing main encryption processing based on the fusing data to generate output data, and outputting intermediate data generated in a process until generating the output data. Encrypting the intermediate data, input data, converted data or output data as new chain data and updating the chain data stored in the storage means; And, following a computer-readable storage medium storing a cryptographic processing method, characterized in that it comprises a storage step of subjected to encryption processing.