公开(公告)号：KR1020080044150A

公开(公告)日：2008-05-20

申请号：KR1020070081302

申请日：2007-08-13

Applicant: 한국전자통신연구원

Inventor： 한대완 ,  권대성 ,  염용진 ,  이주영

IPC: G06F7/00

CPC classification number: H04L9/0643 ,  H03K19/21 ,  H03M7/30

Abstract: An apparatus and a method for mapping out a compression function of a hash mode of operation for a block cipher are provided to be used in a light weight hash function in case that secrecy and integrity are concurrently necessary in a light weight environment like RFID. An apparatus for mapping out a compression function of a hash mode of operation for a block cipher(10) includes the first block ciphering unit, the second block ciphering unit, the first replacement unit, the third block ciphering unit, the fourth block ciphering unit and the second replacement unit. The first block ciphering unit performs block ciphering for an upper bit Hi-1 of Mi and an arbitrary n bit constant c by a key having a 2n length wherein the Mi is the i-th plain text message resulted from division of 2n bit plain text message by n bit. The second block ciphering unit performs block ciphering for Gi-1 by a key having a 2n length wherein the Gi-1 is one among remaining plain text messages resulted from division of Mi by n bit. The first replacement unit replaces a result value having n length, outputted by the first block ciphering unit, with an upper n/2 bit and a lower n/2 bit of the result value, outputted by the second block ciphering unit, and obtains two n bit values. The third block ciphering unit ciphers one n bit value, replaced by the first replacement unit, by a key having a 2n length. The fourth block ciphering unit performs block ciphering for the other n bit value, replaced by the first replacement unit, by a key having a 2n length. The second replacement unit replaces a result value, outputted by the third block ciphering unit, with a result value, outputted by the fourth block ciphering unit.

Abstract translation: 提供了一种用于映射块密码的散列操作模式的压缩函数的装置和方法，用于轻量级散列函数，以便在诸如RFID的轻量级环境中同时需要保密性和完整性的情况。 用于映射块密码（10）的散列模式的压缩函数的装置包括：第一块加密单元，第二块加密单元，第一替换单元，第三块加密单元，第四块加密单元 和第二个更换单元。 第一块加密单元通过具有2n长度的密钥对Mi的高位Hi-1和任意的n位常数c执行块加密，其中Mi是由2n位纯文本分割而产生的第i个纯文本消息 消息由n位。 第二块加密单元通过具有2n长度的密钥对Gi-1进行块加密，其中Gi-1是由Mi除以n位产生的剩余明文消息之一。 第一替换单元用第二块加密单元输出的第一块加密单元输出的具有n个长度的结果值替换由第二块加密单元输出的结果值的上n / 2位和下n / 2位，并获得两个 n位值。 第三块加密单元将由n个长度的密钥替换为由第一替换单元替换的一个n位值。 第四块加密单元通过具有2n长度的密钥对由第一替换单元替换的另一n位值执行块加密。 第二替换单元用第四块加密单元输出的结果值替换由第三块加密单元输出的结果值。

公开(公告)号：KR100412540B1

公开(公告)日：2003-12-31

申请号：KR1020010078267

申请日：2001-12-11

Applicant: 한국전자통신연구원

Inventor： 한재우 ,  김재헌 ,  윤이중 ,  한대완

IPC: H04L9/30

Abstract: PURPOSE: A security system with a certificate revocation function is provided to form a certificate revocation mechanism without an additional calculation process by using an elliptic curve cryptogram. CONSTITUTION: A secret key is calculated by selecting the first integer from a predetermined range and the secret key is set up as a user secret key(1,2). The second integer is obtained by using the secret key(3). The secret keys formed by the first and the second integers are transmitted to a security mediation portion and a user(4). The user discloses a public key(5). A cryptogram including the first and the second cryptograms is generated by using random numbers and the public key. The first cryptogram is transmitted to the security mediation portion to verify a user certificate. The security mediation portion verifies the first cryptogram. The first cryptogram is decoded if the security mediation portion verifies the first cryptogram.

Abstract translation: 目的：通过使用椭圆曲线密码，提供具有证书撤销功能的安全系统，以形成证书撤销机制，而无需额外的计算过程。 构成：通过选择预定范围内的第一个整数并将秘密密钥设置为用户秘密密钥（1,2）来计算秘密密钥。 第二个整数是通过使用密钥（3）获得的。 由第一和第二整数形成的密钥被发送到安全仲裁部分和用户（4）。 用户公开了公钥（5）。 包括第一和第二密码的密码通过使用随机数和公钥得到。 第一个密码被传输到安全仲裁部分以验证用户证书。 安全调解部分验证第一个密码。 如果安全中介部分验证第一密码，则第一密码被解码。

公开(公告)号：KR1020030039913A

公开(公告)日：2003-05-22

申请号：KR1020010071307

申请日：2001-11-16

Applicant: 한국전자통신연구원

Inventor： 한대완 ,  한재우

IPC: G06F7/00

Abstract: PURPOSE: A software implementation algorithm of a shift register is provided to reduce a waste of a memory and reduce the number of iterative statements required as a degree of primitive polynomial. CONSTITUTION: The number of variables is calculated, variables for storing the 'n' number of LFSR(Linear Feedback Shift Register) values and new value are calculated, and a temp to be stored is declared and a temporary variable is declared(30). The 'n' number of values given as an initial value is assigned to the variables for the storing the LFSR values and stored, and the left memory portion of the remaining variables are filled with '0'(31). The variables for storing the 'n' number of LFSR values are stored in a memory of a temporary variable sequentially using a memory shift calculation and an exclusive OR operation according to bits, combines the variables for storing the 'n' number of LFSR values, and stores the variables in a memory of a temporary variable sequentially(32). Temps for storing the 'n' number of LFSR values are calculated(33). A variable substitution is executed for updating new LFSR values(34). The above stages(32-34) are repeated until an output of a wanted bit is obtained(35).

Abstract translation: 目的：提供移位寄存器的软件实现算法，以减少存储器的浪费，并减少作为原始多项式程度所需的迭代语句的数量。 构成：计算变量的数量，计算存储“n”个LFSR（线性反馈移位寄存器）值和新值的变量，并声明要存储的临时值，并声明临时变量（30）。 作为初始值给出的“n”个数值被分配给用于存储LFSR值并存储的变量，并且剩余变量的左存储器部分被填充为“0”（31）。 用于存储“n”个LFSR值的变量通过使用存储器移位计算和根据位的异或运算来顺序地存储在临时变量的存储器中，组合用于存储“n”个LFSR值的变量， 并将变量顺序存储在临时变量的存储器中（32）。 计算用于存储“n”个LFSR值的温度（33）。 执行变量替换来更新新的LFSR值（34）。 重复上述阶段（32-34），直到获得想要的比特的输出（35）。

公开(公告)号：KR100427672B1

公开(公告)日：2004-04-28

申请号：KR1020010071307

申请日：2001-11-16

Applicant: 한국전자통신연구원

Inventor： 한대완 ,  한재우

IPC: G06F7/00

Abstract: PURPOSE: A software implementation algorithm of a shift register is provided to reduce a waste of a memory and reduce the number of iterative statements required as a degree of primitive polynomial. CONSTITUTION: The number of variables is calculated, variables for storing the 'n' number of LFSR(Linear Feedback Shift Register) values and new value are calculated, and a temp to be stored is declared and a temporary variable is declared(30). The 'n' number of values given as an initial value is assigned to the variables for the storing the LFSR values and stored, and the left memory portion of the remaining variables are filled with '0'(31). The variables for storing the 'n' number of LFSR values are stored in a memory of a temporary variable sequentially using a memory shift calculation and an exclusive OR operation according to bits, combines the variables for storing the 'n' number of LFSR values, and stores the variables in a memory of a temporary variable sequentially(32). Temps for storing the 'n' number of LFSR values are calculated(33). A variable substitution is executed for updating new LFSR values(34). The above stages(32-34) are repeated until an output of a wanted bit is obtained(35).

Abstract translation: 目的：提供移位寄存器的软件实现算法，以减少存储器的浪费并减少作为本原多项式的程度所需的迭代语句的数量。 构成：计算变量的数量，计算用于存储'n'个LFSR（线性反馈移位寄存器）值和新值的变量，并声明要存储的临时值并声明临时变量（30）。 将作为初始值给出的'n'个值分配给用于存储LFSR值并存储的变量，其余变量的左侧存储器部分用'0'（31）填充。 用于存储'n'个LFSR值的变量被存储在临时变量的存储器中，顺序地使用存储器移位计算和根据位的异或运算，组合用于存储'n'个LFSR值的变量， 并将变量顺序地存储在临时变量的存储器中（32）。 计算用于存储'n'个LFSR值的临时数（33）。 执行变量替换以更新新的LFSR值（34）。 重复上述阶段（32-34），直到获得有用位的输出（35）。

公开(公告)号：KR100885994B1

公开(公告)日：2009-03-03

申请号：KR1020070059534

申请日：2007-06-18

Applicant: 한국전자통신연구원 ,  한국정보보호진흥원

Inventor： 권대성 ,  문덕재 ,  한대완 ,  이주영 ,  염용진 ,  지성택 ,  전길수 ,  박해룡

IPC: H04L9/18 ,  H04L9/26 ,  G06F15/16 ,  H04K1/00

Abstract: 본 발명은 하드웨어 구현에 적합한 새로운 단일궤도 T-함수를 이용한 스트림 암호 알고리즘을 개시한다. 본 발명의 장치는 32 비트 워드 4개로 이루어진 128 비트 내부 상태를 이용하여 16비트 4워드의 함수값을 생성하는 T함수부;와 상기 T함수부의 출력을 입력받아 연산하는 16비트 덧셈기의 함수 출력 16 비트와, 서메이션 제너레이터(Summation Generator)를 동작시켜 나온 16 비트 출력을 XOR 연산하여 한 클럭 당 16 비트 출력 키 수열을 생성하는 비선형 필터로 구성된다. 본 발명은 기존에 하드웨어 구현에 주로 사용된 기본 논리인 LFSR을 대체할 수 있는 새로운 기본 논리인 단일궤도 T-함수를 사용하므로 스트림 암호 알고리즘의 주요 특성인 주기성을 보장하고, 주요 분석 방법인 상관관계 공격에 내성을 제공한다. 특히, 최근 강력한 분석 방법으로 제안된 대수적 공격에 강한 내성을 제공한다. 또한, 비트 슬라이스(Bit Slice) 기법을 이용하여 저전력 환경에 적합하도록 하드웨어 구현을 할 수 있다.
T함수, 스트림 암호, 비선형 필터, LFSR, 서메이션 제너레이터

公开(公告)号：KR1020030047564A

公开(公告)日：2003-06-18

申请号：KR1020010078267

申请日：2001-12-11

Applicant: 한국전자통신연구원

Inventor： 한재우 ,  김재헌 ,  윤이중 ,  한대완

IPC: H04L9/30

CPC classification number: H04L9/3268 ,  H04L9/3066

Abstract: PURPOSE: A security system with a certificate revocation function is provided to form a certificate revocation mechanism without an additional calculation process by using an elliptic curve cryptogram. CONSTITUTION: A secret key is calculated by selecting the first integer from a predetermined range and the secret key is set up as a user secret key(1,2). The second integer is obtained by using the secret key(3). The secret keys formed by the first and the second integers are transmitted to a security mediation portion and a user(4). The user discloses a public key(5). A cryptogram including the first and the second cryptograms is generated by using random numbers and the public key. The first cryptogram is transmitted to the security mediation portion to verify a user certificate. The security mediation portion verifies the first cryptogram. The first cryptogram is decoded if the security mediation portion verifies the first cryptogram.

Abstract translation: 目的：提供具有证书吊销功能的安全系统，以形成证书吊销机制，而无需使用椭圆曲线密码的附加计算过程。 构成：通过从预定范围中选择第一个整数并将秘密密钥设置为用户密钥（1,2）来计算秘密密钥。 通过使用秘密密钥（3）获得第二整数。 由第一和第二整数形成的秘密密钥被发送到安全中介部分和用户（4）。 用户公开了公钥（5）。 通过使用随机数和公钥来生成包括第一和第二密码的密码。 第一个密码将被发送到安全中介部分以验证用户证书。 安全调解部分验证第一个密码。 如果安全中介部分验证第一个密码，第一个密码将被解码。

公开(公告)号：KR1020080042663A

公开(公告)日：2008-05-15

申请号：KR1020070059534

申请日：2007-06-18

Applicant: 한국전자통신연구원 ,  한국정보보호진흥원

Inventor： 권대성 ,  문덕재 ,  한대완 ,  이주영 ,  염용진 ,  지성택 ,  전길수 ,  박해룡

IPC: H04L9/18 ,  H04L9/26 ,  G06F15/16 ,  H04K1/00

Abstract: An apparatus and a method for non-linear filtered t-function based stream ciphering are provided to realize a hardware suitable for a low power environment by using a bit slice method. An apparatus for non-linear filtered t-function based stream ciphering includes a t-function unit(10) and a non-linear filter(20). The t-function unit creates function values of 16 bits by 4 words by using an internal state of 128 bits constituted of 32 bits by 4 words. The non-linear filter creates output key sequences of 16 bits for one clock by XOR-calculating function outputs of 16 bits of 16-bit adders(22,24-3) for executing calculation by receiving an output of the T-function unit, and a 16-bit output acquired by operating a summation generator(24).

Abstract translation: 提供一种用于基于非线性滤波的基于t函数的流加密的装置和方法，通过使用位片方法来实现适用于低功率环境的硬件。 一种用于基于非线性滤波t功能的流加密的装置，包括t功能单元（10）和非线性滤波器（20）。 t功能单元通过使用由32位乘以4个字构成的128位的内部状态来创建16位×4字的功能值。 非线性滤波器通过接收T功能单元的输出来执行计算的16位加法器（22,24-3）的XOR计算功能输出，产生一个时钟的16位输出键序列， 以及通过操作求和发生器（24）获取的16位输出。