KR100710455B1 - Apparatus for rijndael block cipher and encryption/decryption method thereof - Google Patents

Abstract

The present invention relates to a linedal block cipher apparatus and a method of encrypting and decrypting the same, including an arithmetic apparatus for efficiently performing a round operation for encrypting and decrypting a Rijndael block cipher.

The linedal block cryptographic apparatus according to the present invention can be used to encrypt and decrypt sensitive data that needs security in a short time by being mounted on a mobile terminal or a smart card such as a mobile phone or a PDA requiring a high speed and low area cryptographic processor. Round operation is performed by dividing bit input data into upper 64 bits and lower 64 bits.

Thus, the present invention can reduce the area of the device while reducing the time required to encrypt and decrypt the linedal block cipher.

Cipher Algorithm, Rijndael, Linedal, Round Arithmetic, Block Cipher

Description

Apparatus for rijndael block cipher and encryption / decryption method             

1 is a block diagram showing a linedal block encryption apparatus according to the present invention.

2 is a block diagram showing a round calculation unit.

3 is a block diagram showing a round key generation unit.

4 is a first timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

5 is a first timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

6 is a second timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

7 is a second timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

8 is a third timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

9 is a third timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

<Description of the symbols for the main parts of the drawings>

100: round operation unit 110: round key generation unit

120: shift / inverse shift_low converter 121: first multiplexer

130: replace / reverse replace conversion unit 140: first demultiplexer

150: mix / inverse mix column conversion unit 160: second demultiplexer

170: round key addition conversion unit 180: third demultiplexer

200: bus 300: round operation control unit

400: 64-bit data register 500: 128-bit data register

The present invention relates to a Rijndael block cipher apparatus and a method of encrypting and decrypting the same, and more particularly, a line capable of quickly encrypting and decrypting important data requiring security by being mounted on a mobile phone, PDA, smart card, etc. The present invention relates to a moon block cipher apparatus and an encryption and decryption method thereof.

The Rindal algorithm was developed by Belgian crypto developer Joan Daemen and Vincent Rijmen, and was introduced in October 2000 by the National Institute of Standards and Technology (NIST). Symmetric secret key encryption algorithm selected by the Advanced Encryption Standard (AES).

The linedal algorithm supports variable block lengths of the Substitution-Permutation Network (SPN) structure and can use 128-bit, 192-bit, and 256-bit keys for each block length.

The number of rounds of the linedal algorithm is determined by the key length, and when using 128-bit blocks, it is recommended to use 10, 12, and 14 rounds for 128, 192, and 256-bit keys, respectively.

Currently, the linedal algorithm is known to have no safety problem even when using a 128-bit key. Therefore, a study on the hardware implementation of the linedal algorithm using a 128-bit key is being conducted.

The linedal algorithm encrypts or decrypts data for linedal block encryption / decryption by repeating round operations, and in particular, the encryption process and the decryption process of the block cipher differ from each other because it supports variable block length of the SPN structure. Typically, the round operation for the encryption process of the linedal block cipher consists of four transformations: Substitution, Shift_Row, MixColumn, and Add Round key. The round operation for the process consists of four transformations: Inverse Shift_Row, Inverse Substitution, Add Round key, and Inverse MixColumn. According to the method of performing these conversions, there is a difference in the time required for round operation on the linedal block cipher and the hardware resources used, which is directly related to the performance of the linedal cipher processor. Therefore, it is important to reduce the amount of hardware resources required to implement round operations and the time required to perform round operations.

Accordingly, the present applicant has developed a linedal block cipher apparatus and an encryption and decryption method thereof including an arithmetic unit for efficiently performing a round operation for encrypting and decrypting a linedal block cipher in view of the above.

SUMMARY OF THE INVENTION An object of the present invention is to install a mobile terminal or a smart card such as a mobile phone or a PDA requiring a high speed, low area cryptographic processor, and a linedal block cryptographic device capable of encrypting and decrypting sensitive data in a short time. An encryption and decryption method is provided.

The present invention has an M-bit input data and an N-bit input key, and includes a round including conversion of Shift_Row, Substitution, MixColumn, and Add Round key. A line-dal block encryption apparatus for encrypting the M-bit input data by repeating a predetermined number of operations, wherein at least the substitution process, the MixColumn, and the Add Round key are converted into data. A round operation unit including a round operation execution unit processing a M / m bit in units of 2, 3, or 4 and a round key generation unit generating a round key to provide a round key to the round key addition process; A round operation control unit controlling a round operation performed by the round operation unit; And a data storage unit for storing M / m-bit intermediate data generated in the middle stage of each round and M-bit data generated in the end stage of each round by the round operation unit. Provide an encryption device.

In addition, the present invention has M-bit input data and N-bit input key, and also Inverse Shift_Row, Inverse Substitution, Add Round key, Inverse MixColumn A linedal block decoding apparatus for decoding the M-bit input data by repeating a round operation including a conversion process of a predetermined number of times, the at least one of Inverse Substitution, Add Round key, In the conversion process of the inverse mix column, a round operation execution unit for processing data in units of M / m bits (m is 2, 3, or 4) and a round key to provide a round key to the round key addition process. A round operation unit including a round key generation unit to generate; A round operation control unit controlling a round operation performed by the round operation unit; And a data storage unit for storing M / m-bit intermediate data generated in the middle stage of each round and M-bit data generated in the end stage of each round by the round operation unit. Provided is a decoding device.

In addition, the present invention has M-bit input data and N-bit input key, and includes a process of converting Shift_Row, Substitution, MixColumn, and Add Round key. Repeating the encryption round operation for a predetermined number of times to encrypt the M-bit input data, or inverse shift_row, inverse substitution, add round key, inverse mix column ( A linedal block encryption / decryption apparatus for decrypting input data of M bits by repeating a decryption round operation including a conversion process of an Inverse MixColumn by a predetermined number of times, in an encryption mode, at least the substitution and mix in an encryption mode. In the conversion process of the column (MixColumn) and the Add Round key, the data is processed in units of M / m bits (m is 2, 3, or 4), and in the decryption mode, at least the inverse value (Invers). e Substitution, Add Round key, Inverse MixColumn conversion process is a round operation execution unit and the round that processes data in units of M / m bits (m is 2, 3 or 4). A round operation unit including a round key generation unit for generating a round key to provide a round key to a key addition process; A round operation control unit controlling a round operation performed by the round operation unit; And a data storage unit for storing M / m-bit intermediate data generated in the middle stage of each round and M-bit data generated in the end stage of each round by the round operation unit. An encryption / decryption apparatus is provided.

In addition, the present invention is a linedal block encryption method for receiving M-bit input data and N-bit input key and performing round operation for a predetermined number of times, the method shifting M-bit data from the previous round. A Shift_Row conversion step of applying a Low_Row conversion and outputting only the M / m bit (m is 2, 3 or 4) data corresponding to the selection signal to the next step; A substitution conversion step of performing substitution conversion on the M / m bit data; A MixColumn transformation step of performing a MixColumn transformation on the M / m bit data; And a round operation step of performing a round key addition (Add Round key) step of adding a round key of the same size to the M / m bit data for all m M / m bit data as one round; And a round key generation step of generating a round key to provide a round key to the round key addition step.

In addition, the present invention is a linedal block decoding method of receiving M-bit input data and N-bit input key, and performing a round operation for a predetermined number of times, wherein the method also performs lofted M-bit data from the previous round. An Inverse Shift_Row conversion step of applying an Inverse Shift_Row conversion and outputting only M / m bit (m is 2, 3 or 4) data corresponding to the selection signal to the next step; An Inverse Substitution transformation step of performing an Inverse Substitution transformation on the also lofted-row transformed M / m bit data; An add round key step of adding a round key of the same size to the inversely-converted M / m bit data; And performing an inverse mixcolumn transformation step of performing inverse mixcolumn transformation on the M / m bit data plus the round key for all m M / m bit data. A round operation step; And a round key generation step of generating a round key to provide a round key to the round key addition step.

In the linedal block encryption / decryption apparatus according to the present invention, the size of the input data for linedal block encryption / decryption may be any one of 128 bits, 192 bits, and 256 bits. Since the operation is performed, hardware resources required for the operation can be saved. Here it is desirable to have a maximum number of input data that can be split to 4 or less, which means that the round operation is performed in four steps (e.g., in the case of encryption, Shift_Row; Substitution; MixColumn); and In the four steps of Add Round key). The encryption / decryption apparatus according to the present invention may determine the number of dividing data so that both the size of the data and the key to be processed and the constraints according to hardware and processing time are satisfied. However, in general, it is not preferable to divide the input data into more than four pieces because processing time may be increased and additional registers may be required.

In addition, while performing the round operation, a round key RK required for the round operation (ie, round key addition) is generated by using an input key which may be any one of 128 bits, 192 bits, and 256 bits. It is supposed to.

In the encryption / decryption method and apparatus according to the present invention, the input data is generally one of 128 bits, 192 bits, and 256 bits, and the input key is generally one of 128 bits, 192 bits, and 256 bits.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. For convenience of description, only the case where both the input data and the input key are 128 bits is described, but the same may be applied to the case where the size of the input data and the input key is different. In particular, in the following embodiments, the process of dividing and processing the 128-bit input data into two 64-bit data is described in detail.

1 and 2 are embodiments of a linedal block encryption / decryption apparatus for encrypting or decrypting 128-bit input data using a 128-bit input key according to the present invention.

Referring to FIG. 1, the round operation unit 100 receives a cipher or decryption operation start signal and a mode signal from the round operation control unit 300 through the linedal block encryption / decryption bus 200. When a round operation start signal (Round_start), a round number signal (Round_number), and a bit selection signal (sel) for selecting the 128 bit input data into upper 64 bits and lower 64 bits for each round operation are received, According to the value, the 128-bit input key is converted into the 128-bit round key RK for encryption or decryption and stored.

When the value of the mode signal indicates '0', the round operation unit 100 divides the 128-bit input data into upper 64-bits and lower 64-bits, and includes a conversion process of shift_low, replace, mix column, and round key addition. An operation is performed to encrypt the 128-bit input data.

When the value of the mode signal indicates '1', the round operation unit 100 divides the 128-bit input data into upper 64-bits and lower 64-bits, and also converts loft_low, reverse value, round key addition, and inverse mix column. A round operation is performed to decode the 128-bit input data.

The round operation control unit 300 receives a cipher or decryption operation start signal and a mode signal through the bus 200, and then the round operation start signal Round_start, the round number signal Round_number, and the 128 bits for every round operation. The bit select signal sel for selecting and dividing the input data into upper 64 bits and lower 64 bits is transmitted to the round operation unit 100 to control the round operation operation of the round operation unit 100.

The 64-bit data register 400 stores intermediate cipher or decrypted data of the upper 64-bit input data generated during every round operation performed by the round operation unit 100.

The 128-bit data register 500 stores the intermediate cipher or decrypted data of the lower 64-bit input data generated during every round operation performed by the round operation unit 100 as the lower 64-bit, and generates the result of every round operation. Upper 64-bit data and the lower 64-bit data are stored as upper and lower 64-bits, respectively, to provide 128-bit data as input data for the next round.

1, a plurality of data registers for storing intermediate encryption / decryption data of 128-bit input data generated during each round operation, encryption / decryption data at the end of each round, and final encryption or decryption data generated as a result of the last round operation. In this embodiment, the 64-bit data register 400 and the 128-bit data register 500 are used. However, in another embodiment, any one of 128-bit, 192-bit, and 256-bit input keys is used for 192-bit or 256-bit input data. In this case, the plurality of data registers are implemented in a different structure.

For example, when encrypting or decrypting 192 bit input data, the upper 64-bit input data generated during each round operation performed by the round operation unit 100 and the intermediate cipher or decrypted data of the next 64-bit input data are stored, respectively. Storing two 64-bit data registers (or one 128-bit data register) and intermediate cipher or decrypted data of lower 64-bit input data generated during every round operation performed by the round operation unit 100 as lower 64-bit data. In addition, the encryption or decryption data stored in each of the two 64-bit data registers generated as a result of each round operation may be implemented as a 192-bit data register that stores the upper 64-bit and the next 64-bit.

More generally, the size (R) of the register space required for the implementation of the present invention, R = M (m-1) / m + M = (2m-1) M / m, where M is the number of bits of the input data , m is the number of data that is divided and processed. Taking the above embodiment as an example, since 128 bits are divided and processed into two 64 bits, R = 128 * 1/2 + 128 = 192 bits. In addition, when 192 bits are divided into three and processed, it turns out that R = 192 * 2/3 + 192 = 320 bits. This saves M / m of register space compared to using the traditional pipeline method.

Referring to FIG. 2, the round key generation unit 110 of the round operation unit 100 receives a round operation start signal and a round number signal from the round operation control unit 300 and enters a mode signal entered through the bus 200. According to the value of the 128-bit input key (key) is converted into a 128-bit round key (RK) for encryption or decryption and stored in the internal 128-bit round key register.

The shift / reverse shift_low converter 120 of the round operation unit 100 receives a value of a mode signal input through the bus 200 when a round operation start signal and a bit selection signal are received from the round operation control unit 300. According to the byte shift conversion of the data of the previous round of 128 bits (128-bit input data in the first round), the internal first multiplexer 121 whose output is controlled in accordance with the value of the bit select signal. The 128-bit data shift-shifted through the output is sequentially divided into upper 64 bits (when bit selection signal = "1") and lower 64 bits (when bit selection signal = "0").

The substitution / reverse substitution converter 130 of the round operation unit 100 performs one byte for one byte of input of upper 64-bit data or lower 64-bit data output from the shift / reverse shift_row converter 120. Substitution or inverse substitution is performed using a substitution box (S-box) or an inverse substitution box (SI-box) that outputs the output of.

The first demultiplexer 140 of the round operation unit 100 encrypts the upper 64-bit data or the lower 64-bit data output from the replace / reverse substitute converter 130 according to the value of the mode signal. And one of the decoding output stage (1).

The mix / inverse mix column converter 150 of the round operator 100 may mix-column convert upper 64-bit data or lower 64-bit data input through the cryptographic output terminal 0 of the first demultiplexer 140. Round key plus Inverse mix column transform of the converted upper 64-bit data or lower 64-bit data.

The second demultiplexer 160 of the round operation unit 100 encrypts the upper 64-bit data or the lower 64-bit data output from the mix / inverse mix column converter 150 according to the value of the mode signal. ) And one of the decoding output stage (1).

The round key addition conversion unit 170 of the round operation unit 100 is a higher level input through the decryption output terminal 1 of the first demultiplexer 140 or the cryptographic output terminal 0 of the second demultiplexer 160. The 64-bit data or the lower 64-bit data is converted by the round key plus the 128-bit round key RK for encryption or decryption output from the round key generation unit 110.

The third demultiplexer 180 of the round operation unit 100 transmits the upper 64-bit data or the lower 64-bit data output from the round key addition converter 170 and the cipher output terminal 0 according to the value of the mode signal. Output to either of the decoding output stages 1.

Here, the encryption / decryption apparatus described above shares hardware resources used in the encryption mode and the decryption mode, thereby minimizing the area occupied by the hardware, and enabling the use of 64-bit processing modules while processing 128 bits of data. The processing time hardly increases (the operation processing timing will be described later).

3 shows an embodiment of a round key generator according to the present invention. Here, the 128-bit free key register 111 of the round key generating unit 110 converts the 128-bit input key (key) entered through the bus 200 into a 128-bit round key (RK) for encryption or decryption. A 128-bit round key RK generated after each round operation is stored as a prekey for generating a round key RK used in the next round operation.

The 128-bit key register 111a of the round key generation unit 110 stores the 128-bit round key RK for encryption or decryption for each round operation. In FIG. 3, the 128-bit round key RK stored in the 128-bit round key register 111a is backed up to the 128-bit free key register 111 after each round operation is completed, and the round key of the previous round in the next round operation ( prekey).

The constant storage unit 112 of the round key generation unit 110 stores a constant value Rcon that is determined according to the number of rounds that the round indicated by the round number signal coming from the round operation control unit 300 is. It is preferable to use a ROM as the constant storage unit 112.

The second multiplexer 113 of the round key generation unit 110 controls the output according to the value of the mode signal input through the bus 200, so that the 128-bit free key register 111 and the 128-bit round key are controlled. Any one of an encryption or decryption 32-bit key input from the register 111a is selected and output.

The shifter 114 of the round key generator 110 cyclically shifts a 32-bit key input through the second multiplexer 113 to one byte to the left.

The replace converter 115 of the round key generator 110 includes replace boxes that perform a replace operation, and replaces the 32-bit key cyclically shifted by the shifter 114.

The first XOR operator 116 of the round key generator 110 performs an XOR operation on the most significant byte value of the 32-bit key output from the replacement converter 115 and the constant value stored in the constant storage unit 112. To perform.

The round XOR operator 117 of the round key generator 110 may include a 32-bit value obtained by adding up the output value of the first XOR operator 116 and the remaining 24-bit value except the most significant byte value of the substitution converter 115; XOR operation using the previous round 128-bit round key stored in the 128-bit free key register 111 and the new round 128-bit round key RK stored in the 128-bit round key register 111a. Then, the encryption or decryption 128-bit round key RK stored in the 128-bit round key register 111a is newly generated for each round of the round operation.

The second XOR operator 118 of the round XOR operator 117 is a 32-bit value obtained by adding up the output value of the first XOR operator 116 and the remaining 24-bit value except the most significant one byte value of the substitution converter 115, and XOR operation of the most significant 32 bits (PK0) of the 128 bit round keys of the round generates the most significant 32 bit round key (RK0) of the 128 bit round keys for encryption or decryption of the new round.

The third XOR operator 118a of the round XOR operator 117 is the most significant 32-bit round key RK0 of 127th to 96th of the 128-bit round key of the new round and the most significant 32-bit of the 128-bit round key of the previous round. The next 95-64th 32-bit round key (PK1) is XORed to generate the 95-64th 32-bit round key (RK1) of the new round encryption 128-bit round key.

The third XOR operator 118a XORs the 127th to 96th highest 32bit round key (PK0) and the next 95th to 64th 32bit round key (PK1) of the 128bit round key of the previous round. The operation generates the 95th to 64th 32-bit round key RK1 among the 128-bit round keys for decryption of a new round.

The output of the third multiplexer 119 of the round XOR operator 117 is controlled according to the value of the mode signal input through the bus 200 to selectively determine the input signal of the third XOR operator 118a.

The fourth XOR operator 118b of the round XOR operator 117 is a 32-bit round key (RK1) from 95th to 64th of the 128-bit round key of the new round and 63-32 of the 128-bit round key of the previous round. XOR operation of the first 32-bit round key (PK2) generates the 32-bit round key (RK2) of the 63rd to 32nd of the 128-bit round key for encryption of the new round.

The fourth XOR operator 118b performs an XOR operation on the 95 th to 64 th 32 bit round keys PK1 and the next 63 th to 32 th 32 bit round keys PK2 of the 128 bit round key of the previous round. To generate the 32-bit round key (RK2) from the 63rd to 32nd of the 128-bit round key for decryption of the new round.

The output of the fourth multiplexer 119a of the round XOR operator 117 is controlled according to the value of the mode signal input through the bus 200 to selectively determine the input signal of the fourth XOR operator 118b.

The fifth XOR operator 118c of the round XOR operator 117 is a 32-bit round key (RK2) from the 63rd to 32nd of the 128-bit round key of the new round and the 31st to 0 of the 128-bit round key of the previous round. XOR operation of the 32-bit round key (PK3) up to the first to generate the 32-bit round key (RK3) from the 31st to 0th of the 128-bit round key for encryption of the new round.

The fifth XOR operator 118c performs an XOR operation on the 63rd to 32nd 32-bit round key (PK2) and the next 31st to 0th 32-bit round key (PK3) of the 128-bit round key of the previous round. To generate the 32-bit round key RK3 from the 31st to the 0th round of the 128-bit round key for decryption of the new round.

The fifth multiplexer 119b of the round XOR operator 117 controls the output according to the value of the mode signal input through the bus 200 to selectively determine the input signal of the fifth XOR operator 118c.

The linedal block encryption / decryption apparatus according to the present invention configured as described above operates as follows to perform an encryption and decryption process.

First, referring to FIGS. 1 and 2, the encryption and decryption operations of the linedal block cipher apparatus are as follows.

When the round operation starts, the round key generation process proceeds as the first 128-bit input key enters the round key generator 100 through the bus 200, and the 128-bit input data is shifted / Also, the loft_row converter 120 enters. Here, the 128-bit input data is input from the bus 200 to the shift / reverse shift_row converter 120 via the 128-bit data register 500 (see FIGS. 1 and 2). In this way, the input data is provided from the bus 200 to the round operator 100 (that is, the shift / inverse shift_low converter 120). The advantage is that the functions of the registers can be performed simultaneously. However, depending on the designer's intention, the configuration of this part can be made differently.

For the 128-bit input data input as described above, the shift / inverse shift_low conversion unit 120 converts a different number of byte shift / inverse shifts as defined in the linedal block encryption algorithm according to an encryption / decoding process. Do this.

If the round operation control unit 300 sends a signal (sel = '1') for selecting the upper 64 bits, the shift / inverse shift_low conversion unit 120 receives the upper level through the first multiplexer 121. When the 64-bit is output, and the round operation controller 300 sends a signal (sel = '0') for selecting the lower 64-bit, the lower 64-bit is output through the first multiplexer 121.

After the byte shift / reverse shift_low conversion is performed as described above, the upper or lower 64-bit data enters the replace / reverse replace unit 130 that performs the replace / reverse replace operation and replaces the replace box or reverse replace. Substitution or inverse substitution is performed by a box. At this time, the substitution box and the reverse substitution box serve as a substitution converter for outputting one byte of output for one byte of input as defined in the specification of the linedal algorithm. In addition, since the substitution / inverse substitution converter 130 proposed in the present invention only needs to process 64-bit data at a time, only eight replacement boxes or eight reverse substitution boxes are required.

In the state where the substitution / inverse substitution conversion is performed as described above, when the mode signal (mode = '0') for selecting an encryption process is sent from the bus 200, the upper or lower 64-bit data is converted into a first demultiplexer. Entering the input of the mix / inverse mix column conversion unit 150 through the cryptographic output terminal (0) of 140, and sends a mode signal (mode = '1') to select a decoding process from the bus 200 The upper or lower 64-bit data enters the input of the round key addition converter 170 through the decoding output stage 1 of the first demultiplexer 140.

The 64-bit data that has undergone the mix / inverse mix column conversion sends a mode signal (mode = '0') to select an encryption process from the bus 200 through the encryption output terminal 0 of the second demultiplexer 160. The decoded output stage 1 of the second demultiplexer 160 is inputted to the input of the round key addition converter 170 and sends a mode signal (mode = '1') for selecting a decoding process from the bus 200. Outputs the result data of round operation through.

In addition, the 64-bit data that has undergone the round-key plus conversion sends a cipher output terminal 0 of the third demultiplexer 180 when the bus 200 sends a mode signal (mode = '0') to select an encryption process. After the round operation results in the output, the bus 200 sends a mode signal for selecting a decoding process (mode = '1') through the decoding output stage 1 of the third demultiplexer 180. The input of the mix column converter 150 is performed.

The above process is performed for each of the upper 64-bit and lower 64-bit data (described later in the processing timing), and this becomes one round, and this process is repeated by a predetermined round.

As described above, since the present invention intends to reduce the use of hardware resources by sharing the components commonly used in the encryption process and the decryption process, each transform unit has both functions of encryption conversion and decryption conversion.

Meanwhile, referring to FIG. 3, the operation of generating the encryption or decryption round key required for the encryption and decryption operation of the linedal block encryption apparatus according to the present invention will be described as follows.

When the round operation start signal and the round number signal having a constant clock cycle from the round operation control unit 300 enter the round operation unit 100, the round operation starts from this time.

When the round operation is started, the round key generation unit 110 starts to generate a new round key RK by using the 128-bit round key of the previous round stored in the 128-bit free key register 111. .

When the mode signal (mode = '0') for selecting an encryption process is sent from the bus 200, the least significant 32 bits (PK3) of the 128-bit round keys of the previous round of the 128-bit free key register 111 are first transmitted. Enters the input of shifter 114 via second multiplexer 113.

On the other hand, when the bus 200 sends a mode signal (mode = '1') for selecting a decoding process, the fifth XOR operator 118c first performs the lower 64 bits (PK2, PK3) of the round keys of the previous round. ) XOR operation of 32 bits each other to temporarily store the lowest 32 bits (RK3) of the new round key, and the value (RK3) enters the input of the shifter 114 through the second multiplexer 113.

The 32-bit key entered into the shifter 114 is cyclically shifted one byte to the left, and then entered and replaced by a replacement converter 115 consisting of four replacement boxes.

The most significant 8-bit key among the 32-bit keys that have undergone the substitution conversion as described above is a constant determined according to the number of rounds indicated by the round number signal coming from the round operation control unit 300 by the first XOR operator 116. A value Rcon and an XOR operation are added, and the resultant 8 bits of the first XOR operator 116 and the remaining 24 bits which are the result of the substitution operation of the substitution converter 115 are added together to form the second XOR operator of the round XOR operator 117. Enter the input of (118).

In particular, the hardware area reduction effect can be obtained by limiting the XOR operation of the constant value related to the round number during the round key generation process to only the upper 8 bits of the 32-bit data passed through the substitution converter 115. On the other hand, in this part, the line-dall algorithm specification makes 32-bit padding constant value related to round number and 8-bit constant value to 24 bits of '0', and then passes the substitution converter 115. And XOR operation.

Subsequently, the second XOR operator 118 combines the sum of 8 bits of the resultant value of the first XOR operator 116 and the remaining 24 bits of the result of the substitution converter 115 and the most significant 32 bits of the previous round key ( The result of XOR operation of PK0) is stored as the most significant 32-bit round key (RK0) of the new round.

After the highest 32-bit round key (RK0) necessary for encryption or decryption of the new round is generated as described above, the third XOR operator 118a next performs the encryption with the highest 32-bit round key (RK0) of the new round. Performs an XOR operation on the upper 95th through 64th 32-bit round keys (PK1) of the previous round to generate the next 32-bit round key (RK1) of the new round.In the decryption process, the most significant 32-bits of the previous round ( PK0) and the next higher 32 bits of the previous round (PK1) are XORed to generate the next 32-bit round key (RK1) of the new round.

In this case, the third multiplexer 119 determines an input value of the third XOR operator 118a according to a mode signal indicating an encryption process or a decryption process coming through the bus 200.

After the next 32-bit round key (RK1) of the newest round 32-bit round key (RK0) is generated as described above, the next encryption or decryption 32-bit round key (RK2) and the lowest 32-bit round key ( RK3 is generated by the fourth XOR operator 118b and the fifth XOR operator 118c, respectively, operating in the same manner as the third XOR operator 118a, and the fourth multiplexer 119a is a fourth XOR operator (118a). The input value of 118b is determined, and the fifth multiplexer 119b determines the input value of the fifth XOR operator 118c.

In particular, the time required to generate a 128-bit round key of a new round by dividing the 32 bits from the most significant bit to the least significant bit is a total of 4 clock periods of the round operation start signal coming from the round operation control unit 300 in the case of an encryption process. In the case of the decoding process, it corresponds to a total of 2 clock periods.

In fact, when the first clock of the encryption round operation start signal becomes 1, the most significant 32-bit round key RK0 of a new round is generated by the second XOR operator 118, and the second, third, and fourth clocks are set to one. Each time, a new round of 32-bit round keys RK1, RK2, and RK3 are generated by the third XOR operator 118a, the fourth XOR operator 118b, and the fifth XOR operator 118c. In addition, when the first clock of the decryption round operation start signal is 1, the second XOR operator 118 generates the most significant 32-bit round key RK0 of a new round, and when the second clock is 1, the third XOR. A new round of 32-bit round keys RK1, RK2, and RK3 are generated simultaneously by the operator 118a, the fourth XOR operator 118b, and the fifth XOR operator 118c.

When a round operation start signal having a constant clock period from the round operation control unit 300 enters the round operation unit 100, the round key generation unit 110 generates an encryption round key in two clock periods.

At this time, the process from the second XOR operator 118 to generate the most significant 32-bit round key (RK0) from 127th to 96th of the 128-bit round key of the new round is the first clock of the round operation start signal. When it becomes '1', it progresses.

Subsequently, when the second clock of the round operation start signal becomes '1', the third XOR operator 118a performs the previous round with the highest 32-bit round key RK0 from 127th to 96th of the 128-bit round key of the new round. The next 32-bit round key (PK1) of the most significant of the 128-bit round keys of XOR is generated to generate the 95-64th 32-bit round key (RK1) of the new 128-bit round key for encryption.

PK1)과 이전 라운드의 63번째부터 32번째까지의 32비트 라운드 키(PK2)를 XOR연산하여 새로운 라운드의 암호화용 128비트 라운드 키 중 63번째부터 32번째까지의 32비트 라운드 키(RK2)를 생성한다.At the same time, the fourth XOR operator 118b is configured such that the third XOR operator 118a is selected from the 127th to 96th highest 32-bit round keys RK0 and 128-bit round keys of the previous round. Result of XOR operation of 95-64th 32-bit round key (PK1) after the most significant 32-bits (RKO

PK1) and the XOR operation of the 63rd through 32nd 32-bit round key (PK2) of the previous round to generate the 63rd through 32nd 32-bit round key (RK2) of the new round of 128-bit round keys. do.

PK1)과 이전 라운드의 63번째부터 32번째까지의 32비트 라운드 키(PK2)를 XOR연산한 결과값(RKO

PK1

PK2)과 이전 라운드의 31번째부터 0번째까지의 32비트 라운드 키(PK3)를 XOR연산하여 새로운 라운드의 암호화용 128비트 라운드 키 중 31번째부터 0번째까지의 32비트 라운드 키(RK3)를 생성한다.At the same time, the fifth XOR operator 118c is the most significant 32-bit round key (127th through 96th) of the new round 128-bit round key in which the fourth XOR operator 118b is XOR-operated by the third XOR operator 118a. RK0) and the result of XOR operation of the 95th to 64th 32-bit round key (PK1) after the most significant 32 bits of the 128-bit round key of the previous round (RKO)

PK1) and the result of XOR operation of 32-bit round key (PK2) from 63rd to 32nd of previous round (RKO)

PK1

PK2) and the XOR operation of the 31st to 0th 32-bit round key (PK3) of the previous round to generate the 31st to 0th 32-bit round key (RK3) of the new round of 128-bit round keys. do.

When the round operation start signal having a constant clock period from the round operation control unit 300 enters the round operation unit 100, the round key generation unit 110 generates an encryption round key in one clock period.

At this time, the process from the second XOR operator 118 to generate the most significant 32-bit round key (RK0) from the 127th to the 96th of the 128-bit round key of the new round, the clock is input at the same time the round operation start signal is input; It proceeds with '0'.

When the first clock of the round operation start signal is '1', the third XOR operator 118a performs the 127th to 96th highest 32-bit round key RK0 and the previous round of the 128-bit round key of the new round. The next 32-bit round key PK1 of the 128-bit round key is XORed to generate the 95-64th 32-bit round key RK1 of the new 128-bit round key for encryption.

PK1)과 이전 라운드의 63번째부터 32번째까지의 32비트 라운드 키(PK2)를 XOR연산하여 새로운 라운드의 암호화용 128비트 라운드 키 중 63번째부터 32번째까지의 32비트 라운드 키(RK2)를 생성한다.At the same time, the fourth XOR operator 118b is configured such that the third XOR operator 118a is selected from the 127th to 96th highest 32-bit round keys RK0 and 128-bit round keys of the previous round. Result of XOR operation of 95-64th 32-bit round key (PK1) after the most significant 32-bits (RKO

PK1) and the XOR operation of the 63rd through 32nd 32-bit round key (PK2) of the previous round to generate the 63rd through 32nd 32-bit round key (RK2) of the new round of 128-bit round keys. do.

PK1)과 이전 라운드의 63번째부터 32번째까지의 32비트 라운드 키(PK2)를 XOR연산한 결과값(RKO

PK1

PK2)과 이전 라운드의 31번째부터 0번째까지의 32비트 라운드 키(PK3)를 XOR연산하여 새로운 라운드의 암호화용 128비트 라운드 키 중 31번째부터 0번째까지의 32비트 라운드 키(RK3)를 생성한다.At the same time, the fifth XOR operator 118c is the most significant 32-bit round key (127th through 96th) of the new round 128-bit round key in which the fourth XOR operator 118b is XOR-operated by the third XOR operator 118a. RK0) and the result of XOR operation of the 95th to 64th 32-bit round key (PK1) after the most significant 32 bits of the 128-bit round key of the previous round (RKO)

PK1) and the result of XOR operation of 32-bit round key (PK2) from 63rd to 32nd of previous round (RKO)

PK1

PK2) and the XOR operation of the 31st to 0th 32-bit round key (PK3) of the previous round to generate the 31st to 0th 32-bit round key (RK3) of the new round of 128-bit round keys. do.

When a round operation start signal having a constant clock period from the round operation control unit 300 enters the round operation unit 100, the round key generation unit 110 generates a decryption round key in one clock period.

At this time, the process from the second XOR operator 118 to generate the most significant 32-bit round key (RK0) from the 127th to the 96th of the 128-bit round key of the new round, the clock is input at the same time the round operation start signal is input; It proceeds with '0'.

When the first clock of the round operation start signal is '1', the third XOR operator 118a performs XOR operation on the most significant 32 bits (PK0) of the previous round and the next higher 32 bits (PK1) of the previous round to perform a new round. A next 32-bit round key RK1 is generated, and subsequently the next 32-bit round key RK2 and the lowest 32-bit round key RK3 operate in the same manner as the third XOR operator 118a, respectively. The fourth XOR operator 118b and the fifth XOR operator 118c are generated. These processes are performed simultaneously in the first clock period.

The operation of the linedal block cipher apparatus that operates as described above and performs an encryption and decryption process is classified in detail according to the number of clocks of the round operation start signal entering the round operation unit 100 from the round operation control unit 300. Is as follows.

4 is a first timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

Referring to FIG. 4, when a round operation start signal and a round number signal having a constant clock cycle are input from the round operation control unit 300 to the round operation unit 100 (S400), the first clock of the round operation start signal is '1'. At this moment, the byte shift conversion and replacement operation of the upper 64-bit data among the 128-bit round operation input data are sequentially performed (S401). These two processes are performed in one clock. The result of performing these processes is stored in the 64-bit data register 400. In addition, when the round operation start signal is received, the 128 bit round key generation process is started using the 128 bit round input key at the first clock of the round operation start signal becomes '1' (S401a).

As soon as the second clock of the round operation start signal is '1', the mix column conversion is started using the 64-bit data stored in the 64-bit data register 400 and the result value is stored in the 64-bit data register 400. At the same time (S402), the byte shift conversion and replacement operation of the lower 64-bit data of the round operation input data are sequentially performed (S402), and these processes are also performed in one clock. In addition, the result data of the byte shift conversion and replacement operation of the lower 64-bit data is stored in the lower 64-bit position of the 128-bit data register 500 that stores the round operation result.

As soon as the third clock of the round operation start signal is '1', the 64-bit data stored in the 64-bit data register 400 is rounded to be added to the upper 64 bits of the round key generated by the round key generator 110. The key is added to the input of the conversion unit 170 and the result value is stored in the upper 64-bit position of the 128-bit data register 500 (S403), the lower 64-bit data of the 128-bit data register 500 is mixed After the column conversion process, the result is stored in the lower 64-bit position of the 128-bit data register 500 (S403).

When the fourth clock of the round operation start signal is '1', the lower 64-bit data of the 128-bit data register 500 is added to the lower 64-bit of the round key generated by the round key generator 110 to add the round key. The input of the addition converter 170 and the result value is stored in the lower 64-bit position of the 128-bit data register 500 (S404).

Accordingly, in the linedal block encryption apparatus performing the encryption process as described above, the 128-bit data of the 128-bit data register 500 becomes the 128-bit round arithmetic input data of the next round, and is newly generated by the round key generator 110. The round key RK generated and stored in the 128-bit round key register 111a is also stored in the 128-bit free key register 111 and used as the next round 128-bit round input key. This completes one round of cryptographic operations and takes 4 clocks in total.

When the encryption method shown in FIG. 4 is performed by the linedal block encryption apparatus according to the present invention, the round key generation unit 110 ends the round key generation process in a total of four clock periods of the round operation start signal. That is, according to FIG. 4, the round key addition conversion process S403, which is a process of adding the upper 64-bit data and the round key, is performed after the third clock after starting the round operation. After the second clock after the start of the round operation, only the upper 64-bit round key of the new round key is generated. At this point, only the upper 64-bit round key is used, so there is no problem in the encryption operation of the round operation. In addition, since the 3rd clock after the start of the round operation and the 4th clock starts, the coincidence of all 128-bit round keys is generated. ) Is not a problem.

In addition, in the above-described linedal block cipher apparatus that performs the encryption process, the 64-bit data register 400 is used as an intermediate data storage space generated during the encryption process, so that the result of byte shift conversion of upper 64-bit data is lower 64-bit byte. It does not affect the shift conversion, and because the upper 64-bit data and lower 64-bit data are converted at the same time, the upper 64-bit data and the lower 64-bit data do not perform the same conversion during the same clock period. You can cut the number in half. In particular, there is no need to use additional storage space by continuously updating the data generated for each clock to one storage space. That is, in this case, the structure is applied to the pipeline structure, but does not require any additional hardware. The structure is equally applicable to the encryption and decryption methods of the linedal block cipher, which will be described later.

5 is a first timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

Referring to FIG. 5, when a round operation start signal and a round number signal having a constant clock cycle from the round operation control unit 300 enter the round operation unit 100 (S500), the first clock of the round operation start signal is '1'. At this moment, the byte of the upper 64-bit data among the 128-bit round operation input data is also subjected to the loft conversion and the reverse substitution operation (S501). These two processes are performed in one clock. In this case, the result data is stored in the 64-bit data register 400. In addition, when the round operation start signal is received, the 128 bit round key generation process is started using the 128 bit round input key at the first clock of the round operation start signal becomes '1' (S501a).

As soon as the second clock of the round operation start signal is '1', the round key to which 64-bit data stored in the 64-bit data register 400 and the upper 64 bits of the round key generated by the round key generator 110 are added. The addition conversion starts and the result data is stored in the 64-bit data register 400 (S502). At the same time, the byte shift and reverse substitution operations of the lower 64-bit data of the round input data are sequentially performed and the result data is 128 bits. The data is stored in the lower 64-bit position of the register 500 (S502).

As soon as the third clock of the round operation start signal is '1', the 64-bit data stored in the 64-bit data register 400 enters the input of the mix / inverse mix column converter 150 and the result data of the inverse mix column conversion. Is stored in the upper 64-bit position of the 128-bit data register 500 (S503), and at the same time, the lower 64-bit data having completed the reverse substitution operation is added to the round key added with the round key generated by the round key generation unit 110. After conversion, the result data is stored in the lower 64-bit position of the 128-bit data register (S503).

When the fourth clock of the round operation start signal is '1', the lower 64-bit data of which the round key addition conversion is completed is input to the mix / inverse mix column converter 150 to perform inverse mix column conversion, and the result data is 128 The lower 64-bit position of the bit data register 500 is stored (S504).

In this case, the 128-bit data of the 128-bit data register 500 is used as the 128-bit round operation input data of the next decryption round operation, and the 128-bit round key RK that is the result of the round key generation is the 128-bit free key register ( And used as the 128-bit round input key for the next round operation. This completes a round of decryption operations and takes a total of 4 clocks.

When the decryption method illustrated in FIG. 5 is performed by the linedal block encryption apparatus according to the present invention, the round key generation unit 110 completes the round key generation process in a total of two clock periods of the round operation start signal. That is, according to Figure 5, since the round key addition conversion process (S502) of adding the upper 64-bit round key and the upper 64-bit data is performed at the second clock after starting the round operation, the 128-bit round key is already at the second clock. All of them are created and there is no problem in performing the round operation.

6 is a second timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

Referring to FIG. 6, when a round operation start signal and a round number signal having a constant clock cycle are input from the round operation control unit 300 to the round operation unit 100 (S600), the first clock of the round operation start signal is '1'. At this moment, the byte shift operation and the replacement operation of the upper 64-bit data are sequentially performed, and the result data is stored in the 64-bit data register 400 (S601). In addition, the round key generation process is performed at the same time (S601a).

When the second clock of the round operation start signal is '1', the 64-bit data stored in the 64-bit data register 400 converts the mix column, and then the upper 64-bit round key among the result data of the round key generator 110. And round key plus conversion and the result data is stored in the 64-bit data register 400 (S602). At the same time, the byte shift conversion and the substitution conversion of lower 64-bit data are performed in order, so that the 128-bit data register 500 is performed. It is stored in the lower 64-bit position of (S602).

When the third clock of the round operation start signal is '1', 64-bit data stored in the 64-bit data register 400 is stored in the upper 64-bit position of the 128-bit data register 500, and the 128-bit data register The lower 64-bit data of 500 is mixed-column converted and then the lower 64-bit round key and round key plus conversion among the round keys generated by the round key generator 110 are performed, and the result data is the 128-bit data register ( 500 is stored in the lower 64-bit position (S603).

In this case, the 128-bit data of the 128-bit data register 500 is used as the 128-bit round operation input data of the next round operation, and the round key RK generated by the round key generator 110 is a 128-bit free key register. Stored in 111 and used as the next round 128-bit round input key. This completes a round of cryptographic operations and takes a total of 3 clocks.

When the encryption method shown in FIG. 6 is performed in the linedal block encryption apparatus according to the present invention, the round key generation unit 110 ends the round key generation process in a total of two clock periods of the round operation start signal. That is, according to Figure 6, since the round key addition conversion process (S602) of adding the upper 64-bit round key and the upper 64-bit data is performed at the second clock after starting the round operation, the 128-bit round key is already at the second clock. All of them are created and there is no problem in performing the round operation.

7 is a second timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

Referring to FIG. 7, when the round operation start signal and the round number signal having a constant clock cycle are input from the round operation control unit 300 to the round operation unit 100 (S700), the first clock of the round operation start signal is '1'. In this case, the upper 64-bit data of the round input data is subjected to byte inverse transformation and inverse substitution conversion, and the result data is stored in the 64-bit data register 400 (S701). In addition, the round key generation process starts at the same time as these conversions (S701a).

When the second clock of the round operation start signal is '1', the 64-bit data of the 64-bit data register 400 and the upper 64-bit round key of the round key generated by the round key generator 110 are added to the round key. The result data is converted into the input data of the mix / inverse mix column converter 150, and the result data of the inverse mix column transform is stored in the 64-bit data register 400 (S702). At the same time as these round key addition and inverse mix column transformations, the bytes of the lower 64-bit data of the round input data are also inversely shifted and reversed-inverted, and the resulting data is placed in the lower 64-bit position of the 128-bit data register 500. It is stored (S702).

When the third clock of the round operation start signal is '1', 64-bit data stored in the 64-bit data register 400 is stored in the upper 64-bit position of the 128-bit data register 500, and the 128-bit data register The lower 64-bit data of 500 and the lower 64-bit round key of the round keys of the round key generator 110 are converted by round key addition, and the result data obtained by inverse-mixing the result data is converted into the 128-bit data register ( 500 is stored in the lower 64-bit position (S703).

In this case, the 128-bit data of the 128-bit data register 500 is used as the 128-bit round input data of the next round operation, and the round key RK generated by the round key generator 110 is the 128-bit free key. It is stored in register 111 and used as the 128-bit round input key for the next round operation. This completes a round of decryption operations and takes a total of 3 clocks.

When the decryption method illustrated in FIG. 7 is performed by the linedal block encryption apparatus according to the present invention, the round key generation unit 110 completes the round key generation process in a total of two clock periods of the round operation start signal. That is, according to Figure 7, since the round key addition conversion process (S702) for adding the upper 64-bit round key and the upper 64-bit data is performed at the second clock after starting the round operation, the 128-bit round key is already at the second clock. All of them are created and there is no problem in performing the round operation.

8 is a third timing diagram illustrating a method of encrypting a linedal block cipher according to the present invention.

Referring to FIG. 8, when a round operation start signal and a round number signal having a constant clock cycle are input from the round operation control unit 300 to the round operation unit 100 (S800), the first clock of the round operation start signal is '1'. In this case, byte shift conversion, replacement conversion, mix column conversion, and round key addition conversion for the upper 64-bit data of the round input data are sequentially performed, and the result data is stored in the 64-bit data register 400 (S801). At the same time, the round key generation process S801a is performed, and the upper 64-bit round key of the generated round keys is used for the round key plus conversion described above. These processes are performed in one clock.

When the second clock of the round operation start signal becomes '1', byte shift conversion, replacement conversion, mix column conversion, and round key addition conversion are performed on the lower 64-bit data of the round input data in sequence, and the result data is the 128-bit data. The lower 64-bit position of the register 500 is stored (S802). The lower 64-bit round key of the round keys generated during the round key generation is used for the round key plus conversion described above. At this time, the 64-bit data stored in the 64-bit data register 400 is stored in the upper 64-bit position of the 128-bit data register 500, and the 128-bit round key RK newly generated by the round key generator 110 is It is stored in the 128-bit round key register 111a and backed up to the 128-bit free key register 111. This completes a round of cryptographic operations and takes a total of 2 clocks.

When the encryption method shown in FIG. 8 is performed in the linedal block encryption apparatus according to the present invention, the round key generation unit 110 ends the round key generation process in one clock period of the round operation start signal. That is, according to FIG. 8, since the round key addition conversion process S801 of adding the upper 64-bit round key and the upper 64-bit data is performed at the first clock after starting the round operation, the 128-bit round key is already present at the first clock. All of them are created and there is no problem in performing the round operation.

In this case, the round key generation unit 110 shown in FIG. 3 generates RK1 using RK0, generates RK2 using RK1, does not generate RK3 using RK2, and round operation start signal RK0. Is generated while the clock is '0' and RK1 is generated by XOR operation of RK0 and PK1 when the first clock of the round operation start signal becomes '1', and at the same time, RK0, PK1, and PK2 RK2 is generated by XOR operation, and at the same time, RK3 is generated by XORing RK0, PK1, PK2, and PK3.

9 is a third timing diagram illustrating a method of decrypting a linedal block cipher according to the present invention.

Referring to FIG. 9, when a round operation start signal and a round number signal having a constant clock cycle are input from the round operation control unit 300 to the round operation unit 100 (S900), the first clock of the round operation start signal is' 1. If a byte is converted to the upper 64-bit data of the round input data, inverse shift conversion, inverse substitution conversion, round key addition conversion, and inverse mix column conversion are sequentially performed, and the result data is stored in the 64-bit data register 400 (S901). ). These processes are performed in one clock. At the same time, the decryption round key generation process is performed (S901a), and the upper 64-bit round key of the round keys generated by the round key generation unit 110 is used in the above-described round key addition conversion process.

When the second clock of the round operation start signal becomes '1', byte inverse shifting, inverse substitution, round key addition conversion, and inverse mix column conversion for the lower 64-bit data are performed in sequence, and the result data is a 128-bit data register ( 500 is stored in the lower 64-bit position (S902). These processes are performed in one clock. In addition, the lower 64-bit round key is used in the round key addition conversion of the round key generated one clock ahead of the round key generation unit 110. At this time, the 64-bit data stored in the 64-bit data register 400 is stored in the upper 64-bit position of the 128-bit data register 500, and the newly generated 128-bit round key (RK) in the round key generator 110 Is stored in the 128-bit round key register 111a and backed up to the 128-bit free key register 111. This completes a round of decryption operations and takes a total of 2 clocks.

When the decryption method illustrated in FIG. 9 is performed by the linedal block encryption apparatus according to the present invention, the round key generation unit 110 completes the round key generation process in one clock period of the round operation start signal. That is, according to FIG. 9, the round key addition conversion process S901 that adds the upper 64-bit round key and the upper 64-bit data is performed at the first clock of the round operation start signal after starting the round operation, but is already 128 at the first clock. Since all bit round keys are generated, there is no problem in performing the round operation.

In this case, the round key generation unit 110 shown in FIG. 3 generates RK0 while the clock operation is '0' while the round operation start signal is input, and at the moment when the first clock becomes '1', RK1 is generated by XOR operation of PK1, and at the same time, RK2 is generated by XOR operation of PK1 and PK2, and at the same time, RK3 is generated by XORing PK2 and PK3.

As described above, the linedal block encryption apparatus according to the encryption method shown in FIG. 8 and the decryption method shown in FIG. 9 includes a smart card and a user subscriber identity module (USIM) having a small area, low power consumption, and low operating frequency characteristics. It is a suitable model for card, SIM card and so on.

As described above, the linedal block cipher apparatus and the encryption and decryption method thereof according to the present invention can be used to quickly mount sensitive data requiring security by mounting them on a mobile terminal or a smart card such as a mobile phone or a PDA requiring a high speed and low area cryptographic processor. Since encryption and decryption can be performed in time, and for example, a 128-bit input data is divided into upper 64-bits and lower 64-bits to perform a round operation, the following effects are obtained.                     

First, by repeatedly using the round computing device in the encryption device according to the present invention, it is possible to encrypt and decrypt real-time data with a small area and a high speed.

Second, since the encryption device according to the present invention encrypts / decrypts block cipher data in real time using a round operation device applying the linedal algorithm, the encryption device provides higher security than a calculation device using the conventional Data Encryption Standard (DES) algorithm. .

Third, the line operation encryption / decryption round operation device of the encryption device according to the present invention has the advantage of encrypting / decrypting block cipher data in real time in a short time by the addition of a simple controller for repeating a predetermined number of round operations. have.

Fourth, the round computing device of the cryptographic device according to the present invention can encrypt / decrypt data within a short time with a small area close to half compared to the conventional 128-bit round computing device.

Fifth, the round computing device of the cryptographic device according to the present invention can be implemented by selecting an appropriate method according to the application field, and when applied to a system that is independent of the amount of hardware resources used, for example, a 64-bit round processing is performed. Rather than applying 128-bit round processing, the data encryption and decryption speed can be doubled.

What has been described above is only one embodiment for implementing the linedal block encryption apparatus and its encryption and decryption method according to the present invention, and the present invention is not limited to the above-described embodiment, and the scope of the claims Without departing from the gist of the present invention, any person having ordinary skill in the art to which the present invention pertains will have the technical spirit of the present invention to the extent that various modifications can be made.

Claims (12)

 It has a 128-bit input data and a 128-bit input key, and performs a round operation including conversion of Shift_Row, Substitution, MixColumn, and Add Round key. A linedal block encryption apparatus for encrypting the 128-bit input data repeatedly by a number of times, At least in the conversion process of Substitution, MixColumn, and Add Round key, a round operation execution unit for processing data in 64-bit units and a round key for providing the round key addition process are provided. A round operator comprising a round key generator to generate a round key; A round operation control unit controlling a round operation performed by the round operation unit; And And a data storage unit for storing 64-bit intermediate data generated at the intermediate stage of each round and 128-bit data generated at the end of each round by the round operation unit. The method of claim 1, The data storage unit includes one or more registers, characterized in that the total sum of the size is equal to or larger than 192 bits. It has 128 bits of input data and 128 bits of input key and converts Inverse Shift_Row, Inverse Substitution, Add Round key, and Inverse MixColumn. A linedal block decoding apparatus for decoding input data of 128 bits by repeating a round operation including a predetermined number of times, At least the inverse substitution, add round key, and inverse mixcolumn conversion process includes a round operation execution unit that processes data in 64-bit units and a round key in the round key addition process. A round operator comprising a round key generator for generating a round key to provide a round key; A round operation control unit controlling a round operation performed by the round operation unit; And And a data storage unit for storing the 64-bit intermediate data generated at the intermediate stage of each round and the 128-bit data generated at the end of each round by the round operation unit. The method of claim 3, wherein And the data storage unit includes one or more registers, and the total sum of the sizes is equal to or larger than 192 bits. Encryption round operation with 128-bit input data and 128-bit input key, including conversion of Shift_Row, Substitution, MixColumn, and Add Round key. Repeat the predetermined number of times to encrypt the 128-bit input data, or convert Inverse Shift_Row, Inverse Substitution, Add Round key, and Inverse MixColumn. An apparatus for encrypting a linedal block for decoding the 128-bit input data by repeating a decoding round operation including a process for a predetermined number of times, In encryption mode, at least the conversion process of Substitution, MixColumn, and Add Round key processes data in 64-bit units, and in decryption mode, at least the Inverse Substitution. In the conversion process of Add Round key, Inverse MixColumn, a round operation execution unit that processes data in 64-bit units and a round key is provided to provide a round key to the round key addition process. A round operator comprising a round key generator; A round operation control unit controlling a round operation performed by the round operation unit; And And a data storage unit for storing the 64-bit intermediate data generated at the intermediate stage of each round and the 128-bit data generated at the end of each round by the round operation unit. . The method of claim 5, wherein the round operation execution unit, Shift / inverse shift_row operation means for performing the shift_row operation and the inverse shift_row operation; Substitution / Inverse Substitution means for performing the Substitution operation and the Inverse Substitution operation; MixColumn / Inverse MixColumn operating means for performing the MixColumn operation and the Inverse MixColumn operation; And And a round key addition means for performing the round key addition operation. The method of claim 6, wherein the round operation execution unit, Between the substitution / subversal calculation means, the mix / inverse mix column calculation means and the round key addition calculation means so as to perform an encryption round operation or a decryption round operation according to an input of a mode signal indicating an encryption or decryption mode, respectively. And a plurality of demultiplexing means for controlling the flow direction of data in the apparatus. The method according to any one of claims 5 to 7, And the data storage unit includes one or more registers, and the total sum of the sizes is equal to or larger than 192 bits. In the method of receiving a 128-bit input data and the 128-bit input key, and performing a round operation for a predetermined number of times, the method of encrypting the line dahl block, A shift_row conversion step of performing shift_row conversion on 128-bit data from the previous round and outputting only 64-bit data corresponding to the selection signal to the next step; A substitution conversion step of performing substitution conversion on the 64-bit data; A MixColumn transformation step of performing a MixColumn transformation on the 64-bit data; And a round operation step of performing a round key addition step of adding a round key having the same size to the 64-bit data on both 64-bit data as one round; And And a round key generation step of generating a round key to provide a round key to the round key addition step. The method of claim 9, The shift_row conversion step, substitution conversion step, mixcolumn conversion step, and add round key step may process data of 64-bit size, respectively. And a plurality of 64-bit data can be processed by occupying a plurality of steps among the four steps at the same time. In the method of decoding a linedal block receiving a 128-bit input data and a 128-bit input key, and performing a round operation a predetermined number of times, the method, An inverse shift_row conversion step of performing inverse shift_row conversion on the 128-bit data from the previous round and outputting only 64-bit data corresponding to the selection signal to the next step; An Inverse Substitution transformation step of performing an Inverse Substitution transformation on the 64-bit data which is also transformed by Low_; An add round key step of adding a round key of the same size to the inversely-converted 64-bit data; And performing an inverse mixcolumn transformation step of performing an inverse mixcolumn transformation on 64-bit data plus the round key on both 64-bit data as one round. step; And And a round key generation step of generating a round key to provide a round key to the round key addition step. The method of claim 11, wherein The Inverse Shift_Row conversion step, Inverse Substitution conversion step, Add Round key step, and Inverse MixColumn conversion step respectively process 64-bit data. And a plurality of 64-bit data can be processed by occupying a plurality of steps among the four steps at the same time according to a predetermined timing.

Images