RU160170U1 - ADAPTIVE Cryptographic Resistance Stream Encryption - Google Patents

Abstract

A stream encryption device with adaptive cryptographic strength, comprising a key generator on the transmitting and receiving sides and encrypting and decrypting blocks, characterized in that a primitive polynomial selection block is introduced on the transmitting and receiving sides, respectively, which selects a primitive polynomial from a finite set based on a control unit, the input of which is connected to the output of the control unit, and the output is connected to the input of the expansion unit of the Galois field, which is designed to expand many polynomials, the output to which is connected to the input of the irreducibility check block, which is designed to check polynomials for irreducibility, the output of which is connected to the input of the linear recurrence shift register synthesis block (LRS), which synthesizes a linear recurrence shift register designed to generate an encryption gamut, the output of which is connected to the encryption a unit that performs the summation of plain text coming from the information input of a device with an encryption gamut, the second input of which is connected to the information the progress of the device, and the output is with the communication channel.

Description

The proposed utility model relates to the field of information encryption and can be used in information transfer systems to provide adaptive encrypted communication using a key transmitted over a closed communication channel [1].

A known encryption device (Alferov A.P., Zubov A.Yu., Kuzmin A.S. Basics of cryptography [Text]. Study guide, 2nd ed., Rev. And add. - M .: Helios ARV, 2002, 129, 130.), where direct encryption is carried out in a cipher block, to which open information is supplied to one input, and the gamma of the cipher to the other input.

The disadvantage of this device is low adaptation to the degree of secrecy of the transmitted information, as well as a relatively low cryptographic strength.

The closest in its technical essence is an encryption device (Pat. 2329544 Russian Federation IPC ⁷ H04L 9/00.

Adaptive stream encryption method and device for its implementation [Text] / Bardaev EA; Applicant and patent holder E. Bardaev - No. 2006117121/12; declared 05/19/2006; publ. 07/20/2008). In the prototype device, the exchangeable primitive polynomials of degree n and the exchangeable value of the Galois field extension GF (2q) n, respectively, are generated and introduced in accordance with the key in accordance with the key, in accordance with which the key generator is reconfigured.

In the known device, the goal is achieved by encrypting data on the transmitting side by bitwise summing modulo 2 with the gamma of the cipher and decrypting data on the receiving side, according to the invention, on the transmitting and receiving sides, respectively, replaceable primitive polynomials of degree n are generated and entered in accordance with the key and the corresponding expansion of the Galois field GF (2q) n, in accordance with which the reconfiguration of the linear recurrence shift register synthesis unit (LRS) is carried out, vayuschih range cipher.

The disadvantage of this device is the relatively low cryptographic strength, since primitive polynomials are used, which although they are irreducible, they are the smallest polynomial in the field GF (2q) and the number of such polynomials is limited [7]. Thus, the development of a given number of primitive polynomials is not possible. To solve this problem, device [3] introduces an extension of the primitive polynomial in the field GF (2q), but in this case a mixed set is obtained containing both irreducible and reducible polynomials. Under these conditions, the device can synthesize LRS on a reducible polynomial. This, in turn, leads to the fact that the cryptographic strength of the cipher gamut sharply (at times) decreases.

The purpose of the proposed utility model is to increase cryptographic strength through the use of replaceable irreducible primitive polynomials and a replaceable value of the Galois field extension GF (2q) n, in accordance with which the key generator is retuned.

Depending on the required degree of cryptographic protection, open information is encrypted on the transmitting side by bitwise summing modulo 2 with the gamma of the cipher and the data on the receiving side is decrypted. On the transmitting and receiving sides, respectively, replaceable irreducible polynomials of degree n are generated and introduced in accordance with the key, which are selected from primitive polynomials and the corresponding Galois field extensions GF (2q) n, and on the basis of which reprogramming the LRS generating the cipher gamma is performed.

In the proposed utility model, the cryptographic strength is increased on average based on the formula (NM) n · GF (2q) n bits, where N is the number of primitive polynomials in a ring of degree n from which a replaceable primitive gamma-generating polynomial is sampled, M is the number of reducible primitive polynomials in ring of degree n, and GF (2q) n is the selected value of the extension of the Galois field over which the chosen primitive polynomial of degree n is considered. So, for example, if a replaceable primitive polynomial of degree n = 207 is selected, then when constructing a linear recurrence shift register for a polynomial of this degree, the power of the key system of such a device without taking into account nonlinear complexity nodes will be equal to the number of options for initial filling of LRS - 2 ²⁰⁷ -1. In the proposed utility model, by choosing the value of the expansion of the Galois field, for example, 2 ^{5 the} number of options for the initial filling of the LRS will increase to (2 ⁵ ) ²⁰⁷ -1 = 2 ¹⁰³⁵ -1, and taking into account the selection of the gamma-forming irreducible primitive polynomial from the ring of polynomials of degree n = 207 the power of the key system, and hence the cryptographic strength, will additionally increase by 2 ^(NM) times.

The technical result is achieved by the fact that in a known encryption device containing a key generator on the transmitting and receiving sides and encryption and decryption blocks is additionally introduced on the transmitting and receiving sides, respectively, a series-connected irreducibility check unit, the input of which is connected to the output of the Galois field expansion unit, checking the selected specific polynomial of a given degree, the other input of which is connected to the second output of the control unit, and the output is connected to the input of the block LRRS synthesis, which performs the synthesis of recurrent shift registers, the second input of which is connected to the third output of the control unit, while on the transmitting side the output of the LRRS synthesis block is connected to the encryption block, the other input of which is the information input of the device, and the output of the LRRS synthesis block is connected on the receiving side with the input of the decryption unit, the second input of which is connected to the output of the communication channel, and the output is the information output of the device.

The figure 1 presents a structural diagram of a stream encryption device with adaptive cryptographic strength.

A stream encryption device with adaptive cryptographic strength comprises, on the transmitting side, a control unit 1, the input of which is connected to the output of the key information source, a unit for selecting primitive polynomials 2, a Galois field extension unit 3, the other input of which is connected to the second output of the control unit 1, a check unit irreducibility 4, the second input of which is connected to the third output of the control unit, the LRS synthesis unit 5, the second input of which is the information input of the device, the encryption unit 6 and communication channel 7, and on the receiving side, the device contains a control unit 13 connected in series, the input of which is connected to the output of the key information source, a unit for selecting primitive polynomials 12, a Galois field expansion unit 11, the other input of which is connected to the second output of the control unit, irreducibility 10, the second input of which is connected to the third output of the control unit, the LRS synthesis unit, the second input of which is connected to the fourth output of the control unit 13, a decryption unit 8, the second input of which is connected to swing link 7 and the output is a data output device. Blocks 1, 2, 3, 7, 8, 9 can be made in the form of read-only memory, blocks 5 and 9 in the form of standard generators [4, 6], in which recurrent shift registers are implemented on programmable logic integrated circuits (FPGAs).

The work of a stream encryption device with adaptive cryptographic strength are as follows. The control unit 1 and 11 (see Fig. 1), depending on the content of the key information, sets the specific values of the following control input parameters: for the operation algorithm of the unit for selecting primitive polynomials 2 and 10 - determining the choice of polynomials of a given degree and their number; for the operation algorithm of the Galois field extension block 3 and 11 and the irreducibility check block 4 and 10 - determining the selection of a particular polynomial of a given degree; for the operation algorithm of the LRRS synthesis block 5 and 9, which determine the reprogramming of FPGAs (implementing recurrent shift registers of the key generator) in accordance with the selected polynomial of degree n and the value of the Galois field extension GF (2q) n, as well as the initial filling of the recurrence shift registers.

The control signal from control unit 1 is fed to the input of the primitive polynomial selection block 2, which, according to the algorithm [5], selects a given number of primitive polynomials of the corresponding degree, which are then fed to the input of the Galois field expansion unit 3, where, by the control signal from control unit 1, generating a set of polynomials, the parameters of which, as well as the expansion value of the Galois field GF (2q) n, are fed to the input of the irreducibility check unit 4, in accordance with these parameters, according to the signal from the control I am carried out in the block of synthesis of LRS 5, the synthesis of linear recurrent shift registers of the key generator is carried out by reprogramming the FPGAs, and then their initial filling. In the encoder 6, the binary information sequence arriving at its input is added modulo two with the gamut of the cipher and fed to the input of the communication channel 7. On the receiving side, when entering key information, the control unit 13 generates the corresponding control signals, according to which the unit for selecting primitive polynomials 12 according to the algorithm [5], it selects a given number of primitive polynomials of the corresponding degree, which then go to the input of the Galois field expansion unit 11, where according to the control signal y from the control unit 13, many polynomials are generated, the parameters of which, as well as the expansion value of the Galois field GF (2q) n, are input to the irreducibility check unit 4, in accordance with these parameters, according to the signal from the control unit, it is carried out in the LRS 5 synthesis unit synthesis of linear recurrence shift registers of the key generator by reprogramming the FPGAs, and then their initial filling. In the decoder 8, the binary encrypted sequence arriving at its input from the output of the communication channel 7 is added modulo two with the gamut of the cipher, and the binary information sequence arrives at the consumer from the decoder output.

Thus, thanks to the introduction of additional blocks, cryptographic strength is significantly increased, and the adaptive control of cryptographic strength is also provided, which allows to achieve the desired result.

Information sources

1. 1. Ivanov M.A. Cryptographic methods of information protection in computer systems and networks [Text]. - M: KUDITS-IMAGE, 2001, p. 34.

2. Zubov A.Yu., Kuzmin A.S. The basics of cryptography [Text]. Study Guide, 2nd ed., Rev. and add. - M .: Helios ARV, 2002, p. 129, 130, prototype.

3. Patent 2329544 Russian Federation IPC ⁷ H04L 9/00. Adaptive stream encryption method and device for its implementation [Text] / Bardaev EA; Applicant and patent holder E. Bardaev - No. 2006117121/12; declared 05/19/2006; publ. 07/20/2008, Bull. No. _).-_ S.: Ill. prototype.

4. Lidl R., Niederreiter G. Finite Fields [Text]. T. 2. - M .: Mir, 1988.

5. Bardaev E.A., Lovtsov D.A. Situational security management IGO ACS SDO [Text]. NTI RAS (Ser. 2. Information processes and systems), 1999. No. 11. - S. 10-21.

6. Ivanov M.A., Chugunkov I.V. Theory, application and quality assessment of pseudorandom sequence generators [Text]. - M .: KUDITS-IMAGE, 2003 .-- 240 p.

7. Serdyukov P.N., Belchikov A.V., Dronov A.E. and others. Protected radio systems for digital transmission of information [Text]. - M .: ACT, 2006. -403 p.

Claims (1)

A stream encryption device with adaptive cryptographic strength, comprising a key generator on the transmitting and receiving sides and encrypting and decrypting blocks, characterized in that a primitive polynomial selection block is introduced on the transmitting and receiving sides, respectively, which selects a primitive polynomial from a finite set based on a control unit, the input of which is connected to the output of the control unit, and the output is connected to the input of the expansion unit of the Galois field, which is designed to expand many polynomials, the output to which is connected to the input of the irreducibility check block, which is designed to check polynomials for irreducibility, the output of which is connected to the input of the linear recurrence shift register synthesis block (LRS), which synthesizes a linear recurrence shift register designed to generate an encryption gamut, the output of which is connected to the encryption a unit that performs the summation of plain text coming from the information input of a device with an encryption gamut, the second input of which is connected to the information the progress of the device, and the output is with the communication channel.

Images