TW522699B - Device and method to increase the operation-reliability and smoothness of a noise-source - Google Patents

Device and method to increase the operation-reliability and smoothness of a noise-source Download PDF

Info

Publication number
TW522699B
TW522699B TW090106344A TW90106344A TW522699B TW 522699 B TW522699 B TW 522699B TW 090106344 A TW090106344 A TW 090106344A TW 90106344 A TW90106344 A TW 90106344A TW 522699 B TW522699 B TW 522699B
Authority
TW
Taiwan
Prior art keywords
noise source
patent application
scope
output
entropy
Prior art date
Application number
TW090106344A
Other languages
English (en)
Inventor
Norbert Janssen
Original Assignee
Infineon Technologies Ag
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Infineon Technologies Ag filed Critical Infineon Technologies Ag
Application granted granted Critical
Publication of TW522699B publication Critical patent/TW522699B/zh

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F7/00—Methods or arrangements for processing data by operating upon the order or content of the data handled
    • G06F7/58—Random or pseudo-random number generators
    • G06F7/588—Random number generators, i.e. based on natural stochastic processes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
    • H04L9/0656—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
    • H04L9/0662—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher with particular pseudorandom sequence generator

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Optimization (AREA)
  • Computational Mathematics (AREA)
  • Mathematical Analysis (AREA)
  • Pure & Applied Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Storage Device Security (AREA)
  • Soundproofing, Sound Blocking, And Sound Damping (AREA)
  • Apparatus For Radiation Diagnosis (AREA)
  • Analysing Materials By The Use Of Radiation (AREA)

Description

522699 五、發明説明（1 ) 本發明涉及雜訊源之操作可靠性及均勻性提高時所用 之裝置和方法。 密碼方法在許多情況中需要一些隨機數。這些隨機數 通常是由白色雜訊源（source)之輸出信號被數位化而產 生。 對此種可靠性所造成之可能侵犯目前可在實際之雜訊 源中估計。 若由於入侵者之實際攻擊而使實際雜訊源之品質降低 ’則整個系統之可靠性是會有危險的。 此外’習知之實際雜訊源在製程技術中一系列之變動 時會受到強烈之性能變動。 本發明之目的是在一指定之時段中一方面使入侵者之 實際攻擊不會發生在實際之雜訊源中，且另一方面是使 雜訊源之性能調整至定値而不會使雜訊資料之品質劣 化。 先前技藝中未揭示此種問題之解法。 本發明中此目的以下述方式達成：一種熵（entropy)記 憶體連接至雜訊源輸出端之後，或使雜訊源之輸出値暫 時儲存。 一種回授式移位暫存器特別適合作爲熵記憶體。 爲了使雜訊源更不易被入侵，則較佳是使一種暫代函 數連接於該熵記憶體之後。雜訊源之輸出値較佳是暫存 於熵記憶體之後藉由數學上之暫代函數而被轉換。 密碼之混雜函數特別適合用作暫代函數。 522699 五、發明説明（3 ) 0% < Entropy[%] ^ 100% 若一種資料集（set)之熵例如具有之値是80%，則此資 料集可被壓縮100% — 80% = 20%。已壓縮20%之這些資料 已不再具有〃備用（Redundance)〃値，因此具有100%之 熵。特別是可藉由壓縮而使熵增大。LFSR(linear feedback shfit register)(不能由此取出資料）具有此種 性質。LFSR因此是一種熵記憶體。 若在塡滿此熵記憶體1 2之後該實際雜訊源1 0之雜訊 品質例如由於入侵而不再是最佳化時，則熵記憶體1 2 在位元連續地取出而被掏空時，則所取出之位元流之熵 只有在一種可調整之位元數目之後才會明顯地減小。此 種可調整之位元數目是由熵記憶體之電容所決定。如第 1圖所示，在實際雜訊源1 0之後加入一個熵記憶體1 2 ’其輸入是雜訊源之輸出。例如，一種回授式移位暫存 器可用作熵記憶體。 爲了絕對不能推論上雜訊源之輸出資料，則最好在熵 記憶體1 2之後加入一種數學上之暫代函數1 4，其輸入 是熵記憶體1 2之輸出，其輸出是有效資料。 暫代函數是一種數學函數，其可單純地在一個方向中 計算，但很不容易反相（i n v e r t e d)。例如可使用一種密碼 之混雜函數作爲暫代函數。相對於混雜函數而言，LFSR 不是一種暫代函數，這是因爲LFSR可很容易地反相。 在上述之實施例中，在熵記憶體1 2之輸出端加入該 暫代函數1 4之後原則上不可再由外部進行存取。本發 522699 五、發明説明（4 ) 明中以此種方式可確保··實際雜訊源之入侵者不能獲得 此實際雜訊源之內部狀態。由於此一原因，則此種暫代 函數1 4以軟體來製成時不是有利的，因爲這樣仍能使 此熵記憶體1 2之輸出資料被存取。 實際雜訊源會受到很大之性能變動（例如，由於製程 技術上之變動所造成）而與外部而來入侵無關。本發明 之另一目的是使雜訊源之功率或性能調整至一種定値而 不會使雜訊資料之品質劣化。連接於實際雜訊源之後之 熵記憶體1 2可用作此目的。 如第2圖所示，以定値之與雜訊源無關之時脈來驅動 此熵記憶體1 2使雜訊源可達成一種均勻之性能，其中 此時脈之頻率等於額定値。雜訊源1 〇之性能必須大於 此額定値，由熵記憶體1 2所取出之位元流所具有之熵 因此較雜訊源之熵還大或相等。 當然第1、2圖所描述之措施亦可組合，使熵記憶體 1 2不但以一種與雜訊源無關之時脈頻率來驅動’且一種 暫代函數1 4亦連接於此熵記憶體之後。 符號說明 10…雜訊源 12…熵記憶體 14…暫代函數

Claims (1)

  1. 522695 ί 六、申請專利範圍 第90 1 06344號「提高雜訊源之操作可靠性及均勻性所用 之裝置和方法」專利案 （9 1年1 1月修正） Λ申請專利範圍： 1. 一種提高雜訊源之操作可靠性及均勻性所用之裝置 ’其特徵爲：一種熵記憶體（1 2 )連接於雜訊源（1 0 ) 之輸出之後。 2·如申請專利範圍第1項之裝置，其中設有一種回授 式移位暫存器作爲熵記憶體（1 2 )。 3·如申請專利範圍第1或第2項之裝置，其中一種固 定接線之暫代函數（1 4 )直接連接於該熵記憶體（1 2 ) 之後。
    4. 如申請專利範圍第3項之裝置，其中設有一種密碼 之混雜函數作爲暫代函數（14)。 5. 如申請專利範圍第1或第2項之裝置，其中該熵記 憶體（1 2 )以定値之頻率讀出，此種定値之頻率小於 雜訊源之性能。 6. —種提高雜訊源之操作可靠性及均勻性所用之方法 ，其特徵爲暫存此雜訊源之輸出値。 7. 如申請專利範圍第6項之方法，其中使用一種回授 式移位暫存器以暫存此雜訊源之輸出値。 8. 如申請專利範圍第6或第7項之方法，其中此雜訊 源之輸出値在暫存之後直接藉由一種固定接線式之 數學暫代函數來計算。
    91· il] 3 補充 六、申請專利範圍 9. 如申請專利範圍第8項之方法，其中一種密碼之混 雜函數用作暫代函數。 10. 如申請專利範圍第6或第7項之方法，其中雜訊源 之暫存之輸出値之進一步處理是以定値之時脈來進 行，此種定値之時脈小於雜訊源之性能。 11. 如申請專利範圍第6或7項之方法，其中不可存取 雜訊源本身之輸出値。
TW090106344A 2000-03-23 2001-03-19 Device and method to increase the operation-reliability and smoothness of a noise-source TW522699B (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
EP00106327A EP1137221B1 (de) 2000-03-23 2000-03-23 Vorrichtung und Verfahren zur Erhöhung der Betriebssicherheit und Gleichmässigkeit einer Rauschquelle

Publications (1)

Publication Number Publication Date
TW522699B true TW522699B (en) 2003-03-01

Family

ID=8168212

Family Applications (1)

Application Number Title Priority Date Filing Date
TW090106344A TW522699B (en) 2000-03-23 2001-03-19 Device and method to increase the operation-reliability and smoothness of a noise-source

Country Status (8)

Country Link
US (1) US20030063743A1 (zh)
EP (1) EP1137221B1 (zh)
JP (1) JP2003528355A (zh)
CN (1) CN1419761A (zh)
AT (1) ATE339820T1 (zh)
DE (1) DE50013465D1 (zh)
TW (1) TW522699B (zh)
WO (1) WO2001071969A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7200758B2 (en) * 2002-10-09 2007-04-03 Intel Corporation Encapsulation of a TCPA trusted platform module functionality within a server management coprocessor subsystem
JP2006301878A (ja) * 2005-04-19 2006-11-02 Toshiba Corp 乱数発生装置
CN108959968B (zh) * 2018-07-23 2020-11-17 北京车和家信息技术有限公司 随机数序列生成方法及装置、车辆和存储介质

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4791594A (en) * 1986-03-28 1988-12-13 Technology Inc. 64 Random-access psuedo random number generator
US5250824A (en) * 1990-08-29 1993-10-05 California Institute Of Technology Ultra low-noise charge coupled device
US5414771A (en) * 1993-07-13 1995-05-09 Mrj, Inc. System and method for the creation of random sequences and for the cryptographic protection of communications
US5570307A (en) * 1995-01-06 1996-10-29 Vlsi Technology, Inc. Digital randomizer for on-chip generation and storage of random self-programming data block
US5696828A (en) * 1995-09-22 1997-12-09 United Technologies Automotive, Inc. Random number generating system and process based on chaos
US5778069A (en) * 1996-04-10 1998-07-07 Microsoft Corporation Non-biased pseudo random number generator
US5963104A (en) * 1996-04-15 1999-10-05 Vlsi Technology, Inc. Standard cell ring oscillator of a non-deterministic randomizer circuit
US5781458A (en) * 1997-03-05 1998-07-14 Transcrypt International, Inc. Method and apparatus for generating truly random numbers
DE69938045T2 (de) * 1998-06-03 2009-01-15 Cryptography Research Inc., San Francisco Verwendung von unvorhersagbarer Information zur Leckminimierung von Chipkarten und anderen Kryptosystemen
US6430170B1 (en) * 1999-05-27 2002-08-06 Qualcomm Inc. Method and apparatus for generating random numbers from a communication signal
US6253223B1 (en) * 1999-06-08 2001-06-26 General Instrument Corporation Robust random number generator
US6804354B1 (en) * 1999-12-02 2004-10-12 Honeywell International Inc. Cryptographic isolator using multiplication
US6369727B1 (en) * 1999-12-17 2002-04-09 Rng Research Analog-to-digital conversion method of random number generation
US6687721B1 (en) * 2000-03-31 2004-02-03 Intel Corporation Random number generator with entropy accumulation
US6792438B1 (en) * 2000-03-31 2004-09-14 Intel Corporation Secure hardware random number generator
US6480072B1 (en) * 2000-04-18 2002-11-12 Advanced Micro Devices, Inc. Method and apparatus for generating random numbers
US6968460B1 (en) * 2001-05-10 2005-11-22 Advanced Micro Devices, Inc. Cryptographic randomness register for computer system security
US7007050B2 (en) * 2001-05-17 2006-02-28 Nokia Corporation Method and apparatus for improved pseudo-random number generation
DE602004005959T2 (de) * 2004-02-04 2007-12-20 Infineon Technologies Ag Vorrichtung zum Erzeugen einer Zufalls-Bitfolge

Also Published As

Publication number Publication date
WO2001071969A1 (de) 2001-09-27
JP2003528355A (ja) 2003-09-24
EP1137221A1 (de) 2001-09-26
CN1419761A (zh) 2003-05-21
EP1137221B1 (de) 2006-09-13
US20030063743A1 (en) 2003-04-03
ATE339820T1 (de) 2006-10-15
DE50013465D1 (de) 2006-10-26

Similar Documents

Publication Publication Date Title
US20220066741A1 (en) Cryptography using a cryptographic state
KR101370223B1 (ko) 로우 레이턴시 블록 암호
US5892829A (en) Method and apparatus for generating secure hash functions
US20070237326A1 (en) Computer System and Computer Program Executing Encryption or Decryption
AU2009208117A1 (en) Data encryption system and method
KR20020008849A (ko) 견고한 난수 발생기
WO2006009616A2 (en) Memory encryption architecture
US11349668B2 (en) Encryption device and decryption device
US20040076293A1 (en) Random number generator using compression
TW522699B (en) Device and method to increase the operation-reliability and smoothness of a noise-source
Bai et al. Protect white‐box AES to resist table composition attacks
EP3832945A1 (en) System and method for protecting memory encryption against template attacks
Boesgaard et al. Badger–a fast and provably secure MAC
Masoodi et al. SOBER family of stream ciphers: a review
Xie et al. Multimedia data encryption via random rotation in partitioned bit streams
US11177936B2 (en) Message authenticator generation apparatus
Abd El-Sadek et al. Speech encryption applying a modified Blowfish algorithm
US20080298584A1 (en) Variable length private key generator and method thereof
US9288041B2 (en) Apparatus and method for performing compression operation in hash algorithm
JP3606418B2 (ja) 乱数生成装置
TW201238253A (en) Frequency synthesizer and frequency synthesizing method for converting frequency's spurious tones into noise
EP1039370B1 (en) Modulo address generator and a method for implementing modulo addressing
Kundi et al. An efficient single unit T‐box/T− 1‐box implementation for 128‐bit AES on FPGA
US20240089086A1 (en) Redundancy aes masking basis for attack mitigation using lookup tables
Zhou et al. Secure Lempel-Ziv-Welch (LZW) algorithm with random dictionary insertion and permutation

Legal Events

Date Code Title Description
GD4A Issue of patent certificate for granted invention patent
MM4A Annulment or lapse of patent due to non-payment of fees