A private stream aggregation (PSA) system contributes a user's data to a data aggregator without compromising the user's privacy. The system can begin by determining (302) a private key for a local user in a set of users, wherein the sum of the private keys associated with the set of users and the data aggregator is equal to zero. The system also selects a set of data values associated with the local user. Then, the system encrypts individual data values in the set based in part on the private key to produce a set of encrypted data values, thereby allowing the data aggregator to decrypt an aggregate value across the set of users without decrypting individual data values associated with the set of users, and without interacting with the set of users while decrypting the aggregate value. The system also sends (308) the set of encrypted data values to the data aggregator.

/pdf/privacy-preserving-aggregation-of-time-series-data-1k7s5wcqyk.pdf

Privacy-preserving aggregation of Time-series data

A data storage and retrieval device and method is disclosed. The device includes at least one magnetic storage medium configured to store target data and at least one re-configurable logic device comprising an FPGA coupled to the at least one magnetic storage medium and configured to read a continuous stream of target data therefrom, having been configured with a template or as otherwise desired to fit the type of search and data being searched. The re-configurable logic device is configured to receive at least one search inquiry in the form of a data key and to determine a match between the data key and the target data as it is being read from the at least one magnetic storage medium. This device and method can perform a variety of searches on the target data including without limitation exact and approximate match searches, sequence match searches, image match searches and data reduction searches. This device and method may be provided as part of a stand-alone computer system, embodied in a network attached storage device, or can otherwise be provided as part of a computer LAN or WAN. In addition to performing search and data reduction operations, this device may also be used to perform a variety of other processing operations including encryption, decryption, compression, decompression, and combinations thereof.

Intelligent data storage and processing using fpga devices

An integrated circuit for data encryption/decryption and secure key management is disclosed. The integrated circuit may be used in conjunction with other integrated circuits, processors, and software to construct a wide variety of secure data processing, storage, and communication systems. A preferred embodiment of the integrated circuit includes a symmetric block cipher that may be scaled to strike a favorable balance among processing throughput and power consumption. The modular architecture also supports multiple encryption modes and key management functions such as one-way cryptographic hash and random number generator functions that leverage the scalable symmetric block cipher. The integrated circuit may also include a key management processor that can be programmed to support a wide variety of asymmetric key cryptography functions for secure key exchange with remote key storage devices and enterprise key management servers. Internal data and key buffers enable the device to re-key encrypted data without exposing data. The key management functions allow the device to function as a cryptographic domain bridge in a federated security architecture.

Method and apparatus for hardware-accelerated encryption/decryption

An encryption technique is disclosed for encrypting a plurality of data blocks of a data segment where the encryption selectively switches between a blockwise independent randomized (BIR) encryption mode and a cipher block chaining (CBC) encryption mode based on a configurable feedback stride. A corresponding decryption technique is also disclosed.

Method and System for High Throughput Blockwise Independent Encryption/Decryption

A method of inhibiting the disclosure of confidential information through power analysis attacks on processors in cryptographic systems. The method masks a cryptographic operation using a generator G. A secret value, which may be combined with the generator G to form a secret generator is generated. The secret value is divided into a plurality of parts. A random value is generated for association with the plurality of parts. Each of the plurality of parts is combined with the random value to derive a plurality of new values such that the new values when combined are equivalent to the secret value. Each of the new values is used in the cryptographic operation, thereby using the secret generator in place of the generator G in the cryptographic operation. The introduction of randomness facilitates the introduction of noise into algorithms used by cryptographic systems so as to mask the secret value and provide protection against power analysis attacks.

Method for strengthening the implementation of ECDSA against power analysis

The encryption device includes random number generator means for generating a random number; and a first selector for selecting one of q fixed values in response to the random number, a second selector for selecting one set of q sets of fixed tables in response to the random number. XOR means XORs an input with an XOR of a key with the fixed value. Nonlinear transform means nonlinearly transforms an input in accordance with the selected set of fixed table. Another encryption device includes a plurality of encrypting units coupled in parallel, and a selector for selecting one of the plurality of encrypting units in response to the random number. The masking with the fixed values improves of the processing speed and reduces the required RAM area.

Encryption secured against DPA

PROBLEM TO BE SOLVED: To achieve enhanced operating speed and reduction of a required RAM area by carrying out masking using a fixed value SOLUTION: The enciphering device (300) is provided with a random number generating means to generate random numbers, a first selector (329) to select one out of q fixed values according to the random number, and a selector (329) to select one set out of q sets of fixed tables according the random number The exclusive OR means (333) takes the exclusive OR of the fixed value and a key and the exclusive OR of input A nonlinear transformation means (334) carries out nonlinear transformation according to a set to fixed table Another enciphering device (500) is provided with a plurality of enciphering sections (511, 513) connected in parallel and a selector (502) to select one out of the plurality of enciphering sections according to the random number

Encipherment safe against dpa(differential power analysis)

One or a plurality of prime numbers pi which are generated and a generated random number are used to calculate a larger prime number candidate, and a judgment is made as to whether or not the prime number candidate is a prime number by using a provable prime number judging method, and when the judgment is made that the candidate is a prime number, the prime number p is outputted. As for at least three polynomials F(p) which are factors of ps−1 (s: arbitrary natural number) by a prime number p, a measure against prime factorization is taken. Moreover, when the prime number p is used for a secret key of RSA cryptosystem, a strong prime number p against the iterated-encryption attack on RSA cryptosystem is generated.

Prime number generation apparatus B-smoothness judgement apparatus and computer memory product

Intermediate data ai, bi, ci, and di are prepared by an intermediate data preparing equipment 4 from a cryptographic key through a nonlinear type function operation and the like, an extended key preparing equipment 5 selects a [Xr], b [Yr], c [Zr], and d [Wr] corresponding to the number of stages r from the intermediate data, and rearranges the data as well as conducts that of bit operation to prepare extended keys, whereby an extended key preparing apparatus by which an extended key required in the case where common key cryptosystem is applied can be safely prepared at a high speed, a process for preparing such an extended key, and a recording medium used therefor are provided.

Extended key preparing apparatus, extended key preparing method, recording medium and computer program

The encryption device (300) includes random number generator means for generating a random number; and a first selector (329) for selecting one of q fixed values in response to the random number, a second selector (339) for selecting one set of q sets of fixed tables in response to the random number. XOR means (333) XORs an input with an XOR of a key with the fixed value. Nonlinear transform means (334) nonlinearly transforms an input in accordance with the selected set of fixed table. Another encryption device (500) includes a plurality of encrypting units (511, 513) coupled in parallel, and a selector (502) for selecting one of the plurality of encrypting units in response to the random number. The masking with the fixed values improves of the processing speed and reduces the required RAM area.

Ito Koichi

Papers

Encryption secured against DPA

Encipherment safe against dpa(differential power analysis)

Prime number generation apparatus B-smoothness judgement apparatus and computer memory product

Extended key preparing apparatus, extended key preparing method, recording medium and computer program

Encryption secured against Differential Power Analysis (DPA)