US2021297243A1PendingUtilityA1

Permutation cipher encryption for processor-accelerator memory mapped input/output communication

59
Assignee: INTEL CORPPriority: Jun 8, 2021Filed: Jun 8, 2021Published: Sep 23, 2021
Est. expiryJun 8, 2041(~14.9 yrs left)· nominal 20-yr term from priority
Inventors:Santosh GhoshLuis KidaReshma Lal
H04L 9/0637H04L 9/0631H04L 9/0618H04L 9/088
59
PatentIndex Score
0
Cited by
0
References
0
Claims

Abstract

Technologies for secure data transfer of MMIO data between a processor and an accelerator. A MIMO security engine includes a first permutation cipher pipeline to defuse a count and a key into a permutation state; a first exclusive-OR (XOR) to generate ciphertext data from 64-bits of the new permutation state; and plaintext data; a concatenator to concatenate the plaintext data and additional authenticated data (AAD) to produce a concatenation result; a second XOR to generate an XOR result from the concatenation result and the latest permutation state; and a second permutation pipeline to generate an authentication tag of the XOR result and the key.

Claims

exact text as granted — not AI-modified
1 . An apparatus comprising:
 a first permutation pipeline to defuse a count and a key into a permutation state;   a first exclusive-OR (XOR) to generate ciphertext data from 64-bits of the permutation state and plaintext data;   a concatenator to concatenate the plaintext data and additional authenticated data (AAD) to produce a concatenation result;   a second XOR to generate an XOR result from the concatenation result and the permutation state; and   a second permutation pipeline to generate an authentication tag of the XOR result and the key.   
     
     
         2 . The apparatus of  claim 1 , wherein the apparatus generates the ciphertext data and the authentication tag in one clock cycle with no buffering of plaintext data. 
     
     
         3 . The apparatus of  claim 1 , wherein the plaintext data, the ciphertext data, and the authentication tag comprise 64 bits. 
     
     
         4 . The apparatus of  claim 3 , wherein the AAD comprises 128 bits and the concatenation result comprises 192 bits. 
     
     
         5 . The apparatus of  claim 1 , wherein the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers, Xoodoo permutation ciphers, Subterranean permutation ciphers, or Keccak permutation ciphers. 
     
     
         6 . The apparatus of  claim 5 , wherein when the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers or Xoodoo permutation ciphers, and a size of the permutation state processed by the second XOR is 384 bits. 
     
     
         7 . The apparatus of  claim 5 , wherein when the first permutation pipeline and the second permutation pipeline comprise Subterranean permutation ciphers, and a size of the permutation processed by the second XOR is 257 bits. 
     
     
         8 . The apparatus of  claim 5 , wherein when the first permutation pipeline and the second permutation pipeline comprise Keccak permutation ciphers, and a size of the permutation state processed by the second XOR is 1,600 bits. 
     
     
         9 . An apparatus comprising:
 a first permutation pipeline to defuse a count and a key into a permutation state;   a first exclusive-OR (XOR) to generate plaintext data from 64-bits of the permutation state and ciphertext data;   a concatenator to concatenate the plaintext data and additional authenticated data (AAD) to produce a concatenation result;   a second XOR to generate an XOR result from the concatenation result and the permutation state; and   a second permutation pipeline to generate an authentication tag of the XOR result and the key.   
     
     
         10 . The apparatus of  claim 9 , wherein the apparatus generates the ciphertext data and the authentication tag in one clock cycle with no buffering of plaintext data. 
     
     
         11 . The apparatus of  claim 9 , wherein the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers, Xoodoo permutation ciphers, Subterranean permutation ciphers, or Keccak permutation ciphers. 
     
     
         12 . The apparatus of  claim 11 , wherein when the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers or Xoodoo permutation ciphers, and a size of the permutation state processed by the second XOR is 384 bits. 
     
     
         13 . The apparatus of  claim 11 , wherein when the first permutation pipeline and the second permutation pipeline comprise Subterranean permutation ciphers, and a size of the permutation state processed by the second XOR is 257 bits. 
     
     
         14 . The apparatus of  claim 11 , wherein when the first permutation pipeline and the second permutation pipeline comprise Keccak permutation ciphers, and a size of the encrypted count processed by the second XOR is 1,600 bits. 
     
     
         15 . A method comprising:
 defusing a count and a key by a first permutation pipeline into a permutation state;   generating ciphertext data by a first exclusive-OR (XOR) from 64-bits of the permutation state and plaintext data;   concatenating the plaintext data and additional authenticated data (AAD) to produce a concatenation result;   generating an XOR result by a second XOR from the concatenation result and the permutation state; and   generating an authentication tag by a second permutation pipeline from the XOR result and the key.   
     
     
         16 . The method of  claim 15 , comprising generating the ciphertext data and the authentication tag in one clock cycle with no buffering of plaintext data. 
     
     
         17 . The method of  claim 15 , wherein the plaintext data, the ciphertext data, and the authentication tag comprise 64 bits. 
     
     
         18 . The method of  claim 17 , wherein the AAD comprises 128 bits and the concatenation result comprises 192 bits. 
     
     
         19 . The method of  claim 15 , wherein the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers, Xoodoo permutation ciphers, Subterranean permutation ciphers, or Keccak permutation ciphers. 
     
     
         20 . The method of  claim 19 , wherein when the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers or Xoodoo permutation ciphers, and a size of the permutation state processed by the second XOR is 384 bits. 
     
     
         21 . The method of  claim 19 , wherein when the first permutation pipeline and the second permutation pipeline comprise Subterranean permutation ciphers, and a size of the permutation state processed by the second XOR is 257 bits. 
     
     
         22 . The method of  claim 19 , wherein when the first permutation pipeline and the second permutation pipeline comprise Keccak permutation ciphers, and a size of the permutation state processed by the second XOR is 1,600 bits. 
     
     
         23 . A method comprising:
 defusing a count and a key by a first permutation cipher pipeline into a permutation state;   generating plaintext data by a first exclusive-OR (XOR) from 64-bits of the permutation state and ciphertext data;   concatenating the plaintext data and additional authenticated data (AAD) to produce a concatenation result;   generating an XOR result by a second XOR from the concatenation result and the permutation state; and   generating an authentication tag by a second permutation pipeline from the XOR result and the key.   
     
     
         24 . The method of  claim 23 , comprising generating the ciphertext data and the authentication tag in one clock cycle with no buffering of plaintext data. 
     
     
         25 . The method of  claim 23 , wherein the first permutation pipeline and the second permutation pipeline comprise GIMLI permutation ciphers, Xoodoo permutation ciphers, Subterranean permutation ciphers, or Keccak permutation ciphers.

Join the waitlist — get patent alerts

Track US2021297243A1 — get alerts on status changes and closely related new filings.

We store only your email — no account needed. See our privacy policy.