JP3442011B2 - Encryption processing device and decryption processing device - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a cryptographic processing device, a cryptographic processing method, and a storage medium storing a cryptographic processing program for encrypting or decrypting encrypted data in block units based on a secret key. In particular, the present invention relates to a technique for improving safety without significantly increasing the scale of the device or the processing time.

[0002]

2. Description of the Related Art In recent years, with the widespread use of remittance by digital communication and communication of all kinds of information, a technique for improving security, which protects important transmitted information from being intercepted or tampered with by a third party The demand for is increasing. One of the effective technologies for improving security is cryptography.
There is a raphy).

In a system that communicates using encryption, the original communication text is called plaintext.
What the meaning content is converted into a form that is difficult for a third party to understand is called a cryptogram. Further, this conversion is called encryption, and conversely, the reverse conversion for restoring the ciphertext to the original plaintext is decrypted (de).
Cryption).

The conversion contents of encryption and decryption are specified by an algorithm and a key that is a parameter thereof. The algorithm identifies a family of transforms consisting of multiple transforms, and the key identifies one transform within that family. Usually, it is the algorithm that corresponds to the fixed parts of the device, and the key that is sometimes replaced in one device.

The ciphertext is supposed to be eavesdropped. If an eavesdropper, etc. tries to decrypt the plaintext without having the algorithm or key information,
It is called cryptanalysis.

A person who intends to decrypt the code (hereinafter referred to as "cryptanalyst") performs the decryption on the assumption that the ciphertext is known.

Basically, a decryption method that determines a secret plaintext or a key only from a ciphertext is described as "ciphertext alone attack (ciphert).
ext-only attack) ". In addition, a decryption method that determines a secret key from a pair of unspecified ciphertext and plaintext and determines a plaintext corresponding to an arbitrary ciphertext is described as “known-plaintext attack (known-plaintext attack).
attack) ”.

Pseudo-random number addition type encryption is one of the examples of encryption.

In this cipher, the same key is secretly shared by the sender and the receiver, and a random number generator having the same algorithm is used to seed the key with a predetermined number of bits (hereinafter, "block"). ) Is generated, and in the encryption by the sender side, the ciphertext is generated by performing an exclusive OR operation on the corresponding random number and the plaintext for each block, In the decryption by the receiver side, a plaintext is generated by performing an exclusive OR operation on the corresponding random number and the ciphertext in block units.

Here, the plain text of the block unit is "M", the cipher text of the block unit is "C", the random number is "R", and the exclusive OR operation for each corresponding bit is "(+)". Then, the encryption can be expressed by the following (formula 1), and the decryption can be expressed by the following (formula 2).

C = M (+) R (Equation 1) M = C (+) R (Equation 2) The problem with this cipher is that it is very vulnerable to "known plaintext attacks". .

For example, if a pair of plaintext and ciphertext of one block is known, the random number R is known from the following (Equation 3), so that all other plaintexts can be decrypted.

R = M (+) C (Equation 3) Therefore, the cryptanalyst can very easily decrypt the pseudo random number addition type cipher by the known plaintext attack.

DES (Data Encryption Standar) is an example of a cipher that cannot be easily decrypted by a known plaintext attack.
d) and FEAL (Fast Data Encipherment Algorithm)
There is. These are described in detail in "Introduction to Cryptography" (Eiji Okamoto: Kyoritsu Shuppan).

In these ciphers, one block is 64 bits, and data is strongly disturbed in block units. For example, the DES algorithm uses transpose
Ion) and substitution (substitution) are repeated 16 times.

In order to make DES strong against cryptanalysis and active fraud, ciphertext block chaining (Ciph
er Block Chaining) (hereinafter abbreviated as “CBC mode”)
That is) is devised. The CBC mode is described in detail in "Modern Cryptography" (written by Shinichi Ikeno and Kenji Koyama, published by The Institute of Electronics, Information and Communication Engineers), pp 66-67.

FIG. 50 is a diagram showing the structure of the encryption device 30 which realizes the CBC mode.

The encryption device 30 includes an exclusive OR unit 30.
1, a data encryption unit 302, and a register 303.

The register 303 stores the immediately preceding encrypted one block of ciphertext. When encrypting the first block, the initial value IV (Initia) of one block is
1Value) is set.

The exclusive OR unit 301 is a register 303.
The encrypted text of one block immediately before being stored and the plain text of one block to be encrypted next are subjected to exclusive OR operation for each corresponding bit, and passed to the data encryption unit 302. When encrypting the first block, the initial value IV and the plaintext of the first block are subjected to exclusive OR operation for each corresponding bit.

The data encryption unit 302 encrypts the 64-bit data passed from the exclusive OR unit 301 with the DES algorithm based on the 64-bit key data.

The encryption device 30 is in block units.
The initial value IV and the plaintext of the first 1 block are subjected to an exclusive OR operation for each corresponding bit, encrypted based on the 64-bit key data to generate a 1-block ciphertext, and this ciphertext is further generated. The text and the plaintext of the next block are subjected to exclusive OR operation for each corresponding bit and used as the input for the next encryption.

The plain text in block units is Mi, and the cipher text in block units is Ci (i is block number: i = 2, 3, ...
,), K for 64-bit key data, Ek for encryption using the key data K, and “(+)” for the operation of the exclusive OR for each corresponding bit, the CBC mode is It can be expressed by Equation 4) and Equation 5.

C1 = Ek (M1 (+) IV) (Equation 4) Ci = Ek (Mi (+) Ci-1) (i = 2, 3, ...) (Equation 5) In CBC mode, each Ci depends on all ciphertext data before Ci, so the statistical characteristics of plaintext are disturbed.

Therefore, it is strong against decryption and active fraud.

As for the above-mentioned problems such as CBC mode in DES, FEAL, and DES, since the algorithm is public and the key length is limited, all the keys in the "known plaintext attack" are By trying to encrypt with the exhaustion, you will always discover the correct key. The length of the DES key is 64 bits as described above, but since the parity bit has 8 bits, the effective length is 56 bits, and the number of possible keys is 2.
Is the 56th power of.

There is a theory that a key length of about 56 bits such as DES will entail enormous cost, but at the current technical level, it will be possible to perform brute force decryption.
However, if multiple encryption is performed using multiple independent keys,
Brute force decryption is not possible at the current level of technology.

However, in view of the fact that the processing power of the computer has improved so rapidly in the past ten years, no matter how many times the encryption is carried out,
It cannot be said that there will be no day when it will be possible to decipher by brute force.

Further, the more the multiple encryption is performed, the more the security is improved. However, if the conventional device is simply changed to the multiple encryption, the device scale, the processing time, etc. are greatly increased. Not desirable.

A conventional technique for improving the security of the CBC mode or the like without multiple encryption is disclosed in Japanese Patent Laid-Open No. 52-13.
Japanese Patent Publication No. 0504 (Cryptographic Processing Device), Japanese Patent Publication No. 8-12553
No. 7 (encryption device). The former updates the key data used in the next cryptographic processing based on the cryptographic processing result such as a ciphertext. The latter updates each intermediate key based on each intermediate key update information generated by previously generating and storing a plurality of intermediate keys from the encryption key and performing bit conversion using each intermediate key.

[0031]

However, it cannot be said that the above-mentioned conventional cryptographic processing apparatus and the like have sufficiently secured security, and further improvement in security is desired.

Therefore, the present invention has been made in view of the above problems, and a cryptographic processing apparatus, a cryptographic processing method, and a cryptographic processing method capable of improving security without significantly increasing the apparatus scale, processing time, and the like. An object is to provide a storage medium storing a cryptographic processing program.

[0033]

In order to achieve the above object, an encryption processing apparatus according to the present invention performs encryption processing in block units based on input data including key data and data to be encrypted. An encryption processing device that generates output data by applying the storage means for storing chain data used to exert influence of previous data on subsequent data, and updating the chain data each time encryption processing is performed; , Fusion means for generating chained key data by fusing the chain data stored in the storage means with the key data, and partial processing having a plurality of stages of partial processing and further partial processing of the data subjected to the partial processing in the first step in the second step The main encryption processing means for applying the number of steps to generate the encrypted processing data, and the partial key for the number of steps of the main encryption processing means from the fusion key data and feeding it to each step of the main encryption processing means. Each part The main encryption processing means performs a plurality of rounds of partial processing specified by the number of rounds of partial keys on the data to be encrypted and performs partial processing at each stage other than the final stage. The data obtained by performing the above process becomes each intermediate data, and the storage means updates one of the intermediate data obtained by the main encryption processing means as new chain data to update the chain data stored by itself. When subjected to the next encryption process, the encryption processing device further divides the data to be encrypted into blocks each having a predetermined number of bits, and sequentially encrypts one block to be processed next. Block preparation means for preparing the processed data, and fraction data less than the block unit generated when the block preparation means divides the encrypted data into block units, and the fraction data based on the chain data. Flip is characterized in that it comprises a fraction data processing means for generating output data length.

According to this structure, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is fused to the key data in the subsequent encryption process, and the relevant data is added each time the encryption process is performed. Since the chained data is updated, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, which greatly increases the device scale and processing time. Not easy to decipher. Also, even if a cryptanalyst can obtain a pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the encryption process. The initial values of the algorithm and chain data to be used are not disclosed, so
Cryptanalysis by "known plaintext attack" becomes more difficult,
It is also difficult to decipher by brute force.

Further, the cryptanalyst cannot know which intermediate data becomes new chained data.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus, the processing time, and the like.

Further, as a result, since the output data having the same length as the fraction data can be generated from the fraction data, the lengths of all the input data and all the output data are the same.

Therefore, since the data length does not change even if the encryption process is performed, the data is easy to handle.

[0039]

BEST MODE FOR CARRYING OUT THE INVENTION (Embodiment 1) In Embodiment 1 of the present invention, an encryption process or a decryption process specified by key data (the encryption process or the decryption process are both referred to as "encryption process"). The encryption device that generates the ciphertext data from the plaintext data and the decryption device that generates the plaintext data from the ciphertext data (the encryption device or the decryption device are both referred to as “output data from encrypted data”). A cryptographic processing device for generating), storing an intermediate block generated in the process of performing the cryptographic processing until one block of output data is generated each time the cryptographic processing is performed in block units, as a chain block, This is a cryptographic processing device that fuses stored chain blocks into key data when performing cryptographic processing of the next block.

<Structure> (Structure of Cryptographic Communication System) FIG. 1 is a diagram showing a structure of a cryptographic communication system according to the first embodiment of the present invention.

This encryption communication system comprises a transmitter 1 for encrypting and transmitting plaintext data and a receiver 2 for receiving and decrypting ciphertext data. A transmission line 3 for transmitting ciphertext data from the transmitter 1 to the receiver 2 is shown in the same figure.

As shown in FIG. 1, the transmitter 1 includes a data encryption device 10 and a transmitter 11.

The data encryption device 10 obtains the plaintext data by obtaining the plaintext data and encrypting it in accordance with a predetermined algorithm for each block consisting of a predetermined number of bits based on preset key data. Generate ciphertext data from. The key data used here is secretly shared in advance by the transmitter 1 and the receiver 2, and the predetermined algorithm is unique to the device, and is a family of conversions (famil).
y) is specified, and this key data is used to
Two transformations are identified. The plaintext data is digital information obtained by digitally encoding voice, image information, character code and the like. Here, one block including a predetermined number of bits will be described as 64 bits, for example.

The transmitting unit 11 sends the transmission data obtained by modulating and amplifying the ciphertext data to the transmission line 3.

As shown in FIG. 1, the receiver 2 includes a data decoding device 20 and a receiver 21.

The receiving unit 21 receives the transmission data via the transmission line 3 and passes the ciphertext data demodulated or the like to the data decryption apparatus 20.

The data decryption device 20 produces plaintext data from ciphertext data by decrypting each block according to a predetermined algorithm based on the key data.

(Structure of Data Encryption Device 10) FIG.
FIG. 3 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in the first embodiment of the present invention.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a key data fusion unit 1.
03, partial key generation unit 104, first to eighth encryption unit 105a
.About.105h, a fraction data processing unit 106, and a block combining unit 107.

The conventional encryption device 30 shown in FIG. 50 and FIG.
In the relationship with the data encryption device 10 according to the first embodiment of the present invention shown in FIG. 1, the exclusive OR unit 301 corresponds to the key data fusion unit 103, the data encryption unit 302 is the block division unit 101, and partial key generation. Section 104, first to eighth encryption section 1
05a to 105h, the fraction data processing unit 106, and the block combination unit 107, and the register 303 corresponds to the block storage unit 102.

The block division unit 101 divides the obtained plaintext data into units of one block of plaintext data consisting of 64 bits (hereinafter referred to as "plaintext block") and transfers them to the first encryption unit 105a in order. Finally, when fractional plaintext data of less than 64 bits is generated, the fractional plaintext data is passed to the fraction data processing unit 106. Here, as an example, 200-bit plaintext data is acquired, and the first plaintext block of 1 to 64 bits, the second plaintext block of 65 to 128 bits, the third plaintext block of 129 to 192 bits, and 193 to It is divided into 200-bit fractional plaintext data, the first to third plaintext blocks are sequentially passed to the first encryption unit 105a, and the fractional plaintext data is fractional data processing unit 106.
Shall be passed to.

The block storage unit 102 stores a chain block used for exerting the influence of the previous block on the subsequent block when processing each block divided by the block dividing unit 101. When processing the first block, the initial value IV of the chain block is stored in advance.

The key data fusion unit 103 fuses the chain block stored in the block storage unit 102 with the key data to generate fusion key data. Here, the preset 6
When the 4-bit key data is obtained and the first plaintext block is processed, the 64-bit chain block initial value IV and the 64-bit key data are subjected to exclusive OR operation for each corresponding bit. When processing the second to third plaintext blocks, the 64-bit chain block and the 64-bit key data generated at the time of processing the first to second plaintext blocks are exclusive for each corresponding bit. Performs OR operation.

The partial key generation unit 104 includes the key data fusion unit 1
From the fusion key data generated by 03, the number of partial keys corresponding to the number of encryption units is generated. Here, eight 48-bit partial keys are generated from the 64-bit fusion key data.

The first encryption unit 105a generates a first intermediate block from a plaintext block based on the first partial key.

The second to seventh encryption units 105b to 105g are
Second to seventh intermediate blocks are generated from the first to sixth intermediate blocks, respectively, based on the second to seventh partial keys.

The eighth encryption unit 105h generates one block of ciphertext data (hereinafter referred to as "ciphertext block") from the seventh intermediate block based on the eighth partial key.

The first to eighth encryption units 105a to 105h are
All have the same structure, and by the conversion specified by the 48-bit partial key, the upper 32 bits are converted by using the lower 32 bits of the input of 64 bits, and the conversion for exchanging the upper 32 bits and the lower 32 bits respectively. The conversion is performed in series, and a total of 8 conversions are performed. Here, the first to third
First to seventh intermediate blocks and first to third ciphertext blocks corresponding to the plaintext blocks are generated.

FIG. 3 shows the first to eighth encryption units 105a-10.
It is a figure which shows the detailed structure of 5h.

The 64-bit plaintext block is divided into upper 32 bits and lower 32 bits, and the upper portion of these is H.
0, the lower order is L0, and the input of the nth encryption unit is {H (n-
1), L (n-1)} and the output is (Hn, Ln), Hn and Ln are represented by the following (Equation 6) and (Equation 7).

Hn = L (n-1) (Equation 6) Ln = H (n-1) (+) f {L (n-1), Kn} (Equation 7) where “(+)” Means an operation of exclusive OR of corresponding bits, “Kn” is a 48-bit partial key input to the n-th encryption unit, and “f” is L (n− 1) and K
This is a function that outputs 32-bit data using n.

FIG. 4 is a diagram showing a detailed structure of a portion for calculating the function "f".

The 32-bit L (n-1) is expanded to 48 bits and rearranged by the expanded transpose E shown in (Table 1) below.

[0064] Numerical values in the table indicate new bit positions where the input bits are replaced. For example, the 32nd bit of the input is the 1st and 47th bits of the output, and the 1st bit of the input is the 2nd bit of the output. It is replaced by the eye and the 48th bit.

This 48-bit and 48-bit partial key K
The exclusive OR EXOR operation is performed for each bit corresponding to n, and the result is further divided into 8 sets of 6 bits and input to 8 selection functions S1 to S8.

The selection functions S1 to S8 (also referred to as S boxes) are functions that input 6 bits and output 4 bits, and the processing content thereof can be represented by a substitution table.

FIG. 5 is a diagram showing a substitution table of the selection functions S1 to S8.

There are 64 numbers 0 to 15 in one selection function, which are arranged in 4 rows and 16 columns.

The first and last bits of the input 6 bits specify the row of this substitution table, excluding the first and last 4 bits.
Bits identify columns.

For example, "011011" is added to the selection function S1.
Is input, the first bit "0" and the last bit "1" are specified as the second row, and the four bits "1101" excluding the first and last are specified as the 14th column. Then, since 2nd row and 14th column of the substitution table of the selection function S1 is "5", "0
101 ”is output.

A total of 32 bits (4 bits × 8 = 32 bits) output by the eight selection functions S1 to S8 are transposed P shown in (Table 2) below to obtain "f {L (n-1)". ,
Kn} ”is output. Numerical values in the table indicate new bit positions where the input bits are replaced. For example, the 16th bit of the input is replaced with the first bit of the output, and the 7th bit of the input is replaced with the second bit of the output.

The block storage unit 102 has a block update function, and updates the chain block storing the fourth intermediate block as a new chain block each time the fourth encryption unit 105d generates the fourth intermediate block. However, it is used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used when processing the first plaintext block, and the fourth intermediate block generated during this processing is updated as a new chain block. To do. Next, the chain block updated in the processing of the first plaintext block is used in processing the second plaintext block, and the fourth intermediate block generated in this processing is updated as a new chain block. Next, the chain block updated in the processing of the second plaintext block is used in processing the third plaintext block, and the fourth intermediate block generated in this processing is updated as a new chain block. Finally, the chain block updated when processing the third plaintext block is used when processing the fractional plaintext data.

The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101, and based on the chain block stored in the block storage unit 102, the fraction plaintext data to the fraction ciphertext having the same number of bits as the fraction plaintext data. The data matching unit 106a is for generating data.
And a fraction data fusion unit 106b.

FIG. 6 is a diagram showing a detailed configuration of the fraction data processing unit 106 shown in FIG. 2 in the first embodiment of the present invention.

The data matching unit 106a generates, from the chained blocks stored in the block storage unit 102, fractional chained data having the same number of bits as the fractional plaintext data. Here, since the fractional plaintext data is 8 bits, the fractional chained data composed of, for example, the upper 8 bits of the chained block stored in the block storage unit 102 is generated.

The fraction data merging unit 106b merges the fraction concatenation data with the fraction plaintext data. Here, the 8-bit fraction chained data and the 8-bit fraction plaintext data are subjected to an exclusive OR operation for each corresponding bit to generate 8-bit fraction ciphertext data.

The block combination unit 107 is the eighth encryption unit 1.
Each ciphertext block generated by 05h and the fraction ciphertext data generated by the fraction data processing unit 106 are combined to generate ciphertext data. Here, the first to third of each 64 bits
The ciphertext block and the 8-bit fraction ciphertext data are combined to generate 200-bit ciphertext data.

The block storage unit 102 updates the chain block to the fourth intermediate block generated by the fourth encryption unit 105d, but this is only an example, and any intermediate block generated during the process may be used. Because it may be
First to seventh generated by the first to seventh encryption units 105a to 105g
It may be updated to another one of the seven intermediate blocks.

(Structure of Data Decoding Device 20) FIG.
FIG. 3 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in the first embodiment of the present invention.

The data decryption apparatus 20 includes a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to eighth decryption unit 205a
.About.205h, a fraction data processing unit 206, and a block combining unit 207.

The relationship between the encryption device 30 shown in FIG. 50 and the data decryption device 20 shown in FIG.
1 corresponds to the key data fusion unit 203, and the data encryption unit 3
Reference numeral 02 corresponds to the block division unit 201, the partial key generation unit 204, the first to eighth decryption units 205a to 205h, the fraction data processing unit 206, and the block combination unit 207, and the register 3
03 corresponds to the block storage unit 202.

The block dividing unit 201 divides the obtained ciphertext data into blocks of 64 bits and passes them to the first decryption unit 205a, and when the fractional ciphertext data of less than 64 bits is finally generated, The fraction ciphertext data is passed to the fraction data processing unit 206. Here, as an example, 200-bit ciphertext data is obtained, and the first ciphertext block of 1 to 64 bits, the second ciphertext block of 65 to 128 bits, and the third ciphertext of 129 to 192 bits are acquired from the beginning. Blocks and 193 to 200-bit fraction ciphertext data are divided, and the first to third ciphertext blocks are passed to the first decryption unit 205a and the fraction ciphertext data to the fraction data processing unit 206.

The block storage unit 202 stores a chain block used to influence the previous block when processing each block divided by the block division unit 201. When processing the first block, the initial value IV of the chain block is stored in advance. The initial value IV is the same as that used in the data encryption device 10. Initial value IV used to encrypt certain plaintext data
And the initial value IV used for decrypting the ciphertext data corresponding to the plaintext data is the same.

The key data fusion unit 203 fuses the chain block stored in the block storage unit 202 with the key data to generate fusion key data. Note that this fusion is the same as the fusion performed by the key data fusion unit 103 of the data encryption device 10. Further, this key data is used for the data encryption device 10
It is the same as the one used in. The key data used to encrypt certain plaintext data and the key data used to decrypt the ciphertext data corresponding to that plaintext data are the same.
Here, when the preset 64-bit key data is obtained and the first ciphertext block is processed, the initial value IV of the 64-bit chain block and the 64-bit key data are set for each corresponding bit. Exclusive-or operation on
When processing the second to third ciphertext blocks, the 64-bit chain block and the 64-bit key data generated at the time of processing the first to second ciphertext blocks are exclusive for each corresponding bit. Performs OR operation.

The partial key generation unit 204 has the key data fusion unit 2
From the fusion key data generated by 03, the number of partial keys corresponding to the number of decryption units is generated. Here, eight 48-bit partial keys are generated from the 64-bit fusion key data. The function of generating this partial key is used in the data encryption device 1.
This is exactly the same as that performed by the partial key generation unit 104 of 0.

The first decryption unit 205a generates the seventh intermediate block from the ciphertext block based on the eighth partial key.

The second to seventh decoding units 205b to 205g are
The 6th to 1st intermediate blocks are generated from the 7th to 2nd intermediate blocks based on the 7th to 2nd partial keys, respectively.

The eighth decryption unit 205h generates a plaintext block from the first intermediate block based on the first partial key.

The first to eighth decoding units 205a to 205h are
All have the same structure, and by the conversion specified by the 48-bit partial key, the upper 32 bits are converted by using the lower 32 bits of the input of 64 bits, and the conversion for exchanging the upper 32 bits and the lower 32 bits respectively. The conversion is performed in series, and a total of 8 conversions are performed. Here, the first to third
From the ciphertext block, the 7th to 1st intermediate blocks and the 1st to 3rd plaintext blocks respectively corresponding thereto are generated. The conversions performed by the first to eighth decryption units 205a to 205h are reverse conversions of the conversions performed by the eighth to first encryption units 105h to 105a of the data encryption device 10, respectively.

The block storage unit 202 has a block updating function, and every time the fourth decoding unit 205d generates a fourth intermediate block, the chain block storing the fourth intermediate block as a new chain block is updated. However, it is used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used when processing the first ciphertext block, and the fourth intermediate block generated during this processing is used as a new chain block. Remember. Next, the chain block updated in processing the first ciphertext block is used in processing the second ciphertext block, and the fourth intermediate block generated in this processing is set as a new chain block. Remember. Next, the chain block stored during the processing of the second ciphertext block is the third
It is used when processing a ciphertext block, and the fourth intermediate block generated during this processing is stored as a new chain block. Finally, the chain block stored when processing the third ciphertext block is used when processing the fraction ciphertext data.

The fraction data processing unit 206 receives the fraction ciphertext data from the block dividing unit 201, and based on the chain block stored in the block storage unit 202, the fraction ciphertext data has the same number of bits as the fraction ciphertext data. Fractional plaintext data is generated, and the data matching unit 20
6a and a fraction data fusion unit 206b.

FIG. 8 is a diagram showing a detailed configuration of the fraction data processing unit 206 shown in FIG. 7 in the first embodiment of the present invention.

The data matching unit 206a generates, from the chain block stored in the block storage unit 202, fractional chained data having the same number of bits as the fractional ciphertext data. Here, since the fraction ciphertext data is 8 bits, the fraction chain data composed of, for example, the upper 8 bits of the chain block stored in the block storage unit 202 is generated.

The fraction data merging unit 206b merges the fraction chain data with the fraction ciphertext data. Here, the 8-bit fraction chain data and the 8-bit fraction ciphertext data are subjected to exclusive OR operation for each corresponding bit,
8-bit fractional plaintext data is generated.

The block combination unit 207 is the eighth decoding unit 2.
Each block of the plaintext data generated by 05h and the fractional plaintext data generated by the fractional data processing unit 206 are combined to generate plaintext data. Here, the 1st to 1st of each 64 bits
3 plaintext data and 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

The block storage unit 202 updates the chain block to the fourth intermediate block generated by the fourth decoding unit 205d, but this is only an example, and any intermediate block generated in the process of processing may be used. Because it may be
1st to 7th generated by 1st to 7th decoding units 205a to 205g
It may be updated to another one of the seven intermediate blocks. However, it is necessary to update to the same intermediate block as the block storage unit 102 of the data encryption device 10.

<Operation> (Operation of Data Encryption Device 10) FIG. 9 is a diagram showing a flow of encryption processing in the data encryption device 10 according to the first embodiment of the present invention.

Here, as an example, description will be given according to the DES algorithm, assuming that 200-bit plaintext data is acquired and the initial value IV is stored in advance in the block storage unit 102.

(1) The block division unit 101 determines whether or not the unprocessed plaintext data obtained is less than 64 bits (step S101). Here, in the first time, since the unprocessed portion of the obtained plaintext data is 200 bits, it is determined to be 64 bits or more (step S101: the first time).

(2) If the unprocessed portion of plaintext data is 64 bits or more, 64 bits are separated from the beginning of the unprocessed portion (step S102). Here, 1 to 64 bits counted from the beginning of 200 bits are separated as a first plaintext block (step S102: the first time).

(3) The key data fusion unit 103 fuses the chain block stored in the block storage unit 102 with the key data to generate fusion key data (step S103).
Here, the initial values IV and 6 of the 64-bit chain block
Exclusive bitwise operation is performed for each corresponding bit with the 4-bit key data to generate fusion key data and pass it to the partial key generation unit 104 (step S103: first time).

(4) The partial key generation unit 104 generates the number of partial keys corresponding to the number of encryption units from the fusion key data (step S104). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S104: the first time).

The procedure of generating the first to eighth partial keys of 8 × 48 bits from the key data of 64 bits including 8 bits of parity bits is as follows, for example.

The 64-bit key data including the parity bit is transposed by the transposition shown in (Table 3) and becomes 56 bits with the parity bit removed.

[0105] Numerical values in the table indicate new bit positions where the input bits are replaced. For example, the 57th bit of the input is replaced with the first bit of the output and the 49th bit of the input is replaced with the second bit of the output.

Of the 56 bits, the first 28 bits are C0 and the second 28 bits are D0. By shifting C0 and D0 to the left by the number of shifts shown in (Table 4), C1 to C8 and D1 Generate ~ D8.

(Table 4) --------------------------- Partial key number 1 2 3 4 5 6 7 8 Number of shifts 2 4 8 12 16 20 20 24 26 ------------------------------ For example, C0 = (c1 c2 c3 ... c26
c27 c28), C1 = (c3 c4 c5
... c28 c1 c2).

Next, each 56 bits are (Table 5)
The transposition shown in (4) gives 48 bits.

[0109] Numerical values in the table indicate new bit positions where the input bits are replaced. For example, the 14th bit of the input is replaced with the first bit of the output, and the 17th bit of the input is replaced with the second bit of the output.

(5) The first encryption unit 105a generates a first intermediate block from a plaintext block based on the first partial key (step S105). Here, the first intermediate block is generated from the first plaintext block (step S1).
05: 1st time).

(6) Second to fourth encryption units 105b to 105
d is the first to third subkeys based on the second to fourth partial keys, respectively.
Second to fourth intermediate blocks are generated from the intermediate blocks (step S106). Here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the first plaintext block (step S106: the first time).

(7) The block storage unit 102 updates the stored chain block using the fourth intermediate block as a new chain block (step S107). Here, the fourth intermediate block corresponding to the first plaintext block is updated (step S107: the first time).

(8) Fifth to seventh encryption units 105e to 105
g is 4th-6th based on the 5th-7th partial keys, respectively.
The fifth to seventh intermediate blocks are generated from the intermediate blocks (step S108). Here, the fifth to seventh intermediate blocks are generated from the fourth to sixth intermediate blocks corresponding to the first plaintext block (step S108: the first time).

(9) The eighth encryption unit 105h generates a ciphertext block from the seventh intermediate block based on the eighth partial key (step S109). Here, the first ciphertext block is generated from the seventh intermediate block corresponding to the first plaintext block (step S109: the first time).

(10) It is determined whether or not there is unprocessed plaintext data. If there is still unprocessed data, the next plaintext block or fractional plaintext data is processed, and step S10 is performed.
It returns to 1 (step S110). Here, there is still an unprocessed portion, so the process returns to step S101 (step S11).
0: 1st time).

(11) In step S101, 64 bits are separated from the 200-bit plaintext data at the first time, and the rest is 136 bits. Therefore, it is determined that the number of bits is 64 bits or more (step S101: second time).

(12) In step S102, 65 to 12 are counted from the beginning of the first 200 bits in this case.
Eight bits are separated as a second plaintext block (step S102: second time).

(13) In step S103, the 64-bit chain block and the 64-bit key data generated at the time of processing the first plaintext block are operated by exclusive OR for each corresponding bit. To generate the fusion key data and pass it to the partial key generation unit 104 (step S
103: second time).

(14) In step S104, here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S104: second time).

(15)-(19) In steps S105-S109, for the second plaintext block,
The same processing as the first plaintext block is performed to generate the first to seventh intermediate blocks and ciphertext blocks corresponding to the second plaintext block, and the chain block stored in the block storage unit 102 corresponds to the second plaintext block. To the fourth intermediate block (step S105 to step S109:
Second time).

(20) In step S110, since there is still unprocessed plaintext data, step S110
The process returns to 101 (step S110: second time).

(21) In step S101, 64 bits are separated from the plaintext data of 136 bits for the second time, and the rest is 72 bits. Therefore, it is determined that the number of bits is 64 bits or more (step S101: third time).

(22) In step S102, here, 129 to 1 counting from the beginning of the first 200 bits.
92 bits are separated as a third plaintext block (step S102: third time).

(23) In step S103, the chain block generated at the time of processing the second plaintext block and the 64-bit key data are subjected to an exclusive OR operation for each corresponding bit, The fusion key data is generated and passed to the partial key generation unit 104 (step S103: third time).

(24) In step S104, eight 48-bit partial keys are generated here from the 64-bit fusion key data (step S104: third time).

(25)-(29) In steps S105-S109, for the third plaintext block,
The same processing as the first plaintext block is performed to generate the first to seventh intermediate blocks and the ciphertext block corresponding to the third plaintext block, and the chain block stored in the block storage unit 102 corresponds to the third plaintext block. To the fourth intermediate block (step S105 to step S109:
Third time).

(30) In step S110, since there is still unprocessed plaintext data, step S110 is performed.
It returns to 101 (step S110: 3rd time).

(31) In step S101, 64 bits are separated from the 72-bit plaintext data for the third time, and the rest is 8 bits, so it is determined that the number is less than 64 bits (step S101: fourth time). ..

(32) If the unprocessed plaintext data is less than 64 bits, the unprocessed plaintext data is processed by the fraction data processing unit 10.
6 (step S111). Here, the first 20
193 to 200 bits counted from the beginning of 0 bit are passed to the fraction data processing unit 106 as fraction plaintext data.

(33) The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101, and based on the chain block stored in the block storage unit 102, the fraction plaintext data has the same number of bits as the fraction plaintext data. Fractional ciphertext data is generated (step S112).
Here, the upper 8 bits of the 64-bit chain block generated at the time of processing the third plaintext block stored in the block storage unit 102 and the 8-bit fractional plaintext data are set for each corresponding bit. An exclusive OR operation is performed to generate 8-bit fraction ciphertext data.

(34) If it is determined in step S110 that there is no unprocessed plaintext data, or in step S110.
After the generation of the fraction ciphertext data in 112, the block combining unit 107 combines the ciphertext blocks generated by the eighth encryption unit 105h and the fraction ciphertext data generated by the fraction data processing unit 106 to generate the ciphertext data. It is generated (step S113). Here, the ciphertext blocks and the fraction ciphertext data respectively corresponding to the first to third plaintext blocks are combined to generate 200-bit ciphertext data.

(Operation of Data Decoding Device 20) FIG.
FIG. 6 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the first embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

Here, as an example, it is assumed that 200-bit ciphertext data is obtained and the initial value IV is stored in advance in the block storage unit 202 as in the block storage unit 102 of the data encryption device 10. A description will be given according to the DES algorithm.

(1) The block division unit 201 determines whether or not the unprocessed portion of the obtained ciphertext data is 64 bits or more (step S201). Here, at the first time, since the unprocessed portion of the obtained ciphertext data is 200 bits, it is determined to be 64 bits or more (step S201: 1
Second time).

(2) If the unprocessed portion of the ciphertext data is 64 bits or more, 64 bits are separated from the beginning of the unprocessed portion (step S202). Here, 1 to 64 bits of the 200 bits counted from the beginning are separated as the first ciphertext block (step S202: the first time).

(3) The key data fusion unit 203 fuses the chain block stored in the block storage unit 202 with the key data to generate the fused key data (step S203).
Here, the initial values IV and 6 of the 64-bit chain block
Exclusive bitwise operation is performed for each corresponding bit with the 4-bit key data to generate fusion key data and pass it to the partial key generation unit 204 (step S203: first time).

(4) The partial key generation unit 204 generates the number of partial keys corresponding to the number of decryption units from the fusion key data (step S204). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data (step S204: the first time).

The procedure of generating the first to eighth partial keys of 8 × 48 bits from the 64-bit key data including 8 parity bits is the same as that of the partial key generation unit 104 of the data encryption device 10. is there.

(5) The first decryption unit 205a generates a seventh intermediate block from the ciphertext block based on the eighth partial key (step S205). Here, the seventh intermediate block is generated from the first ciphertext block (step S205: the first time).

(6) Second to fourth decoding sections 205b to 205
d is 7th-5th based on the 7th-5th partial keys, respectively.
Sixth to fourth intermediate blocks are generated from the intermediate blocks (step S206). Here, sixth to fourth intermediate blocks are generated from the seventh to fifth intermediate blocks corresponding to the first ciphertext block (step S206: the first time).

(7) The block storage unit 202 updates the stored chain block using the fourth intermediate block generated by the fourth decoding unit 205d as a new chain block (step S207). Here, the fourth intermediate block corresponding to the first ciphertext block is updated (step S2).
07: 1st time).

(8) Fifth to Seventh Decoding Units 205e to 205
g based on the 4th and 2nd partial keys, respectively,
Third to first intermediate blocks are generated from the intermediate blocks (step S208). Here, the 3rd-1st intermediate block is produced | generated from the 4th-2nd intermediate block corresponding to a 1st ciphertext block (step S208: 1st time).

(9) The eighth decryption unit 205h generates a plaintext block from the first intermediate block based on the first partial key (step S209). Here, a plaintext block is generated from the first intermediate block corresponding to the first ciphertext block (step S209: first time).

(10) It is judged whether or not there is an unprocessed portion of the ciphertext data. If there is still unprocessed data, the process returns to step S201 to process the next ciphertext block or fraction ciphertext data (step S210). Here, there is still an unprocessed portion, so the process returns to step S201 (step S210: the first time).

(11) In step S201, 64 bits are separated from the 200-bit ciphertext data at the first time, and the rest is 136 bits.
It is determined that the number of bits is equal to or more than that (step S201: second time).

(12) In step S202, here, 65 to 12 counting from the beginning of the first 200 bits.
8 bits are separated as a second ciphertext block (step S202: second time).

(13) In step S203, in this case, the 64 generated at the time of processing the first ciphertext block.
The chained block of bits and the 64-bit key data are subjected to an exclusive OR operation for each corresponding bit to generate fusion key data and pass it to the partial key generation unit 204 (step S203: second time).

(14) In step S204, eight 48-bit partial keys are generated here from the 64-bit fusion key data (step S204: second time).

(15) to (19) In steps S205 to S209, the second ciphertext block is processed in the same manner as the first ciphertext block, and the seventh to first intermediate blocks corresponding to the second ciphertext block are processed. And a plaintext block are generated, and the chain block stored in the block storage unit 202 is updated to the fourth intermediate block corresponding to the second ciphertext block (steps S205 to S).
209: second time).

(20) In step S210, since there is still unprocessed ciphertext data, the process returns to step S201 (step S210: second time).

(21) In step S201, here, 64 bits are separated from the 136-bit ciphertext data for the second time, and the rest is 72 bits, so it is determined to be 64 bits or more (step S201: third time).

(22) In step S202, here, 129 to 1 counting from the beginning of the first 200 bits.
92 bits are separated as a third ciphertext block (step S202: third time).

(23) In step S203, the chain block generated at the time of processing the second ciphertext block and the 64-bit key data are subjected to exclusive OR operation for each corresponding bit. , Generates the fusion key data and passes it to the partial key generation unit 204 (step S203: 3).
Second time).

(24) In step S204, eight 48-bit partial keys are generated from the 64-bit fusion key data here (step S204: third time).

(25) to (29) In steps S205 to S209, the same processing as the first ciphertext block is performed on the third ciphertext block, and the seventh to first intermediate blocks corresponding to the third ciphertext block are executed. And a plaintext block are generated, and the chain block stored in the block storage unit 202 is updated to the fourth intermediate block corresponding to the third ciphertext block (steps S205 to S).
209: third time).

(30) At step S210, since there is still unprocessed ciphertext data, the process returns to step S201 (step S210: third time).

(31) In step S201, here, 64 bits are separated from the 72-bit ciphertext data for the third time, and the rest is 8 bits, so it is determined that the number is less than 64 bits (step S201: fourth time). ).

(32) If the unprocessed part of the ciphertext data is less than 64 bits, the unprocessed part is processed by the fraction data processing unit 2
06 (step S211). Here, the first two
193 to 200 bits counted from the beginning of 00 bits are passed to the fraction data processing unit 206 as fraction ciphertext data.

(33) The fraction data processing unit 206 receives the fraction ciphertext data from the block dividing unit 201, and based on the chain block stored in the block storage unit 202, the fraction ciphertext data to the fraction ciphertext data are the same as the fraction ciphertext data. Fractional plaintext data of the number of bits is generated (step S21).
2). Here, the upper 8 bits of the 64-bit chain block generated at the time of processing the third ciphertext block stored in the block storage unit 202 and the 8-bit fraction ciphertext data are associated with corresponding bits. An exclusive OR operation is performed for each to generate 8-bit fractional plaintext data.

(34) If it is determined in step S210 that there is no unprocessed ciphertext data, or after generation of the fractional plaintext data in step S212, the block combining unit 207 causes the plaintext blocks and the fractional data to be processed. Fractional plaintext data generated by the unit 206 is combined to generate plaintext data (step S213). Here, the first to third
The plaintext block and the fractional plaintext data respectively corresponding to the ciphertext blocks are combined to generate 200-bit plaintext data.

The cryptographic processing apparatus according to the first embodiment stores the intermediate block generated in the process of performing the cryptographic processing in the previous block as a chain block, and merges it with the key data in the subsequent cryptographic processing. , The chain block is updated each time encryption processing is performed. (Embodiment 2) In Embodiment 2 of the present invention, the stored chain block is not fused to the key data, but to the encrypted data or the data after the encrypted data is encrypted. The point of fusion is different from that of the first embodiment.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 6 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 2 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 2 according to the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a partial key generation unit 10.
4, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combining unit 107, and a block merging unit 108.

The conventional encryption device 30 shown in FIG. 50 and FIG.
In the relationship with the data encryption device 10 according to the second embodiment of the present invention shown in FIG. 1, the exclusive OR unit 301 corresponds to the block fusion unit 108, the data encryption unit 302 is the block division unit 101, and the partial key generation. The unit 104, the first to eighth encryption units 105a to 105h, the fraction data processing unit 106, and the block combination unit 107 correspond to each other, and the register 303 corresponds to the block storage unit 102.

The block division unit 101 does not pass the divided blocks to the first encryption unit 105a, but the block fusion unit 1
It is different from the first embodiment only in that the data is passed to 08.

The block merging unit 108 merges the chained blocks stored in the block storage unit 102 with the plaintext block to generate a merged plaintext block. Here, when processing the first plaintext block, the 64-bit chain block initial value IV and the 64-bit first plaintext block are subjected to an exclusive OR operation for each corresponding bit to perform 64-bit operation. When the first fused plaintext block is generated and the second to third plaintext blocks are processed, the 64-bit chain block and the 64-bit second to third plaintext generated when the first to second plaintext blocks are processed. The block and the corresponding bit are subjected to an exclusive OR operation to generate a 64-bit second to third fused plaintext block.

The partial key generation unit 104 generates the number of partial keys corresponding to the number of encryption units from the key data. Here, the preset 64-bit key data is acquired, and 6
Eight 48-bit partial keys are generated from 4-bit key data.

The first encryption unit 105a generates the first intermediate block not from the plaintext block but from the merged plaintext block generated by the block merger 108.

The first to eighth encryption units 105a to 105h are
It has the same functions as those of the first embodiment. Here, first to seventh intermediate blocks and first to third ciphertext blocks respectively corresponding to the first to third fused plaintext blocks are generated.

(Structure of Data Decoding Device 20) FIG.
FIG. 3 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 2 of the present invention.

The same components as those of the data decoding apparatus 20 shown in FIG. 7 in the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

The data decryption apparatus 20 includes a block division unit 201, a block storage unit 202, and a partial key generation unit 20.
4, first to eighth decoding units 205a to 205h, a fraction data processing unit 206, a block combining unit 207, and a block merging unit 208.

The partial key generation unit 204 generates the number of partial keys corresponding to the number of decryption units from the key data. Here, the preset 64-bit key data is acquired, and 6
Eight 48-bit partial keys are generated from 4-bit key data. The function of generating the partial key is exactly the same as that performed by the partial key generation unit 104 of the data encryption device 10.

The eighth decryption unit 205h generates an encryption processing block from the first intermediate block based on the first partial key.

The first to eighth decoding units 205a to 205h are
It has the same functions as those of the first embodiment. Here, first to seventh intermediate blocks and first to third cryptographic processing blocks corresponding to the first to third ciphertext blocks are generated.

The block merging unit 208 merges the chain block stored in the block storage unit 202 with the cryptographic processing block to generate a plaintext block. Here, when processing the first ciphertext block, the initial value IV of the 64-bit chain block and the 64-bit first ciphertext block are subjected to exclusive OR operation for each corresponding bit. When the first plaintext block of bits is generated and the second to third ciphertext blocks are processed, the 64-bit chain block generated when processing the first and second ciphertext blocks and 6
An exclusive OR operation is performed for each of the corresponding bits of the 4-bit second to third cryptographic processing blocks, and the 64-bit second
Generate 3 plaintext blocks.

The block combination unit 207 combines each block of the plaintext data generated by the block fusion unit 208 and the fractional plaintext data generated by the fraction data processing unit 206 to generate plaintext data. Here, the 1st to 1st of each 64 bits
3 plaintext data and 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 13 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the second embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 9 in the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) and (2) The same as the first embodiment (step S101, step S102: the first time).

(3) The partial key generation unit 104 generates the number of partial keys corresponding to the number of encryption units from the key data (step S301). Here, the preset 64-bit key data is obtained, and the 64-bit key data
Eight bit partial keys are generated (step S301: 1).
Second time).

(4) The block merging unit 108 merges the chained blocks stored in the block storage unit 102 with the plaintext block to generate a merged plaintext block (step S).
302). Here, the initial value IV of the 64-bit chain block and the 64-bit first plaintext block are exclusive-ORed for each corresponding bit to generate a 64-bit first fused plaintext block (step S302: First time).

(5) The first encryption unit 105a generates a first intermediate block from the fused plaintext block based on the first partial key (step S303). Here, the first intermediate block is generated from the first merged plaintext block (step S303: the first time).

(6) to (12) The same as the first embodiment (step S106 to step S110: the first time, step S101, step S102: the second time).

(13) In step S301, here, eight 48-bit partial keys are generated from 64-bit key data. If the key data is not changed, the process is exactly the same as the first time, so each partial key may be stored (step S301: second time).

(14) In step S302, here, the 64-bit chain block generated at the time of processing the first plaintext block and the second 64-bit plaintext block are subjected to exclusive OR for each corresponding bit. Is calculated,
A 64-bit second fused plaintext block is generated (step S302: second time).

(15) In step S303, here, the first intermediate block is generated from the second fused plaintext block (step S303: second time).

(16)-(22) Same as the first embodiment (steps S106-S110: second time,
Steps S101 and S102: third time).

(23) In step S301, eight 48-bit partial keys are generated here from the 64-bit key data. If the key data is not changed, the process is exactly the same as that of the first time, so each partial key may be stored (step S301: third time).

(24) In step S302, here, the 64-bit chain block generated at the time of processing the second plaintext block and the 64-bit third plaintext block are subjected to exclusive OR for each corresponding bit. Is calculated,
A 64-bit third fused plaintext block is generated (step S302: third time).

(25) In step S303, the first intermediate block is generated from the third fused plaintext block in this case (step S303: third time).

(26)-(34) Same as the first embodiment (steps S106-S110: third time,
Step S101: Fourth time, Steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the second embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The same steps as those of the operation of the data decoding apparatus 20 shown in FIG. 10 according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) and (2) The same as in the first embodiment (steps S201 to S202: the first time).

(3) The partial key generation unit 204 generates the number of partial keys corresponding to the number of decryption units from the key data (step S401). Here, the preset 64-bit key data is obtained, and the 64-bit key data
Eight bit partial keys are generated (step S401: 1).
Second time).

(4) to (6) (5) of the first embodiment,
It is the same as (6) and (8) (step S205, step S206, step S208: the first time).

(7) The eighth decryption unit 205h generates an encryption processing block from the first intermediate block based on the first partial key (step S402). Here, the first ciphertext processing block is generated from the first intermediate block corresponding to the first ciphertext block (step S402: the first time).

(8) The block merging unit 208 merges the chain block stored in the block storage unit 202 with the cryptographic processing block to generate a plaintext block (step S4).
03). Here, the initial value IV of the 64-bit chain block and the 64-bit first cryptographic processing block are exclusive-ORed for each corresponding bit to obtain the 64-bit first
A plaintext block is generated (step S403: the first time).

(9) The same as (7) of the first embodiment (step S207: first time).

(10) to (12) The same as in the first embodiment (step S210: the first time, step S201 to step S201).
Step S202: second time).

(13) In step S401, eight 48-bit partial keys are generated here from the 64-bit key data. If the key data is not changed, the process is exactly the same as the first time, so each partial key may be stored (step S401: second time).

(14)-(16) (1 of the first embodiment
5), (16), and (18) (step S2)
05, step S206, step S208: second time).

(17) In step S402, the second ciphertext processing block is generated from the first intermediate block corresponding to the second ciphertext block here (step S40).
2: Second time).

(18) In step S403, in this case, 64 generated at the time of processing the first ciphertext block.
The bit chain block and the 64-bit second cryptographic processing block are subjected to exclusive OR operation for each corresponding bit to generate a 64-bit second plaintext block (step S403: second time).

(19) The same as (17) of the first embodiment (step S207: second time).

(20)-(22) Same as the first embodiment (step S210: second time, step S201-).
Step S202: third time).

(23) In step S401, eight 48-bit partial keys are generated here from the 64-bit key data. If the key data is not changed, the process is exactly the same as that of the first time, so each partial key may be stored (step S401: third time).

(24) to (26) (2 of the first embodiment
5), (26), and (28) (step S2)
05, step S206, step S208: third time).

(27) In step S402, a third cipher block is generated from the first intermediate block, which corresponds to the third ciphertext block here (step S40).
2: 3rd time).

(28) In step S403, in this case, 64 generated at the time of processing the second ciphertext block.
An exclusive OR operation is performed for each corresponding bit of the chained block of bits and the third encryption processing block of 64 bits to generate a third plaintext block of 64 bits (step S403: third time).

(29) The same as (27) of the first embodiment (step S207: third time).

(30) to (34) The same as the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the second embodiment stores the intermediate block generated in the process of performing the cryptographic processing on the preceding block as a chain block, and the plaintext block and the cryptographic processing during the subsequent cryptographic processing. The block is merged and the chain block is updated each time encryption processing is performed. (Embodiment 3) The data encryption apparatus 10 according to Embodiment 3 of the present invention is different from that of Embodiment 1 only in the input of the fifth encryption unit 105e. The input of the fifth encryption unit 105e in the first embodiment is the output of the fourth encryption unit 105d, but the input in the third embodiment is a plaintext block. Therefore, the chain block and the plaintext block are processed by different encryption units.

The data decryption apparatus 20 according to the third embodiment of the present invention is an inverse conversion of the data encryption apparatus 10,
The data of the first embodiment is that the output of the fourth decryption unit 205d becomes a plaintext block, and the fourth intermediate block generated by encrypting this plaintext block in the same manner as the data encryption device 10 is stored as a new chain block. Decoding device 20
Different from

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 3 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 2 according to the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

The configuration of this data encryption device 10 is the same as that of the first embodiment, except that the fifth encryption unit 105e generates the fifth intermediate block from the plaintext block instead of from the fourth intermediate block. Different from the form 1.

(Structure of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 3 of the present invention.

The same components as those of the data decoding apparatus 20 shown in FIG. 7 in the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

The data decryption apparatus 20 includes a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to fourth decryption unit 205a
˜205d, first to fourth encryption units 205i to 205l, a fraction data processing unit 206, and a block combining unit 207.

The fourth decryption unit 205d generates a plaintext block from the fifth intermediate block based on the fifth partial key. Here, the first to third plaintext blocks are generated from the fifth intermediate block respectively corresponding to the first to third ciphertext blocks. The conversions performed by the first to fourth decryption units 205a to 205d are performed by the eighth to eighth data encryption devices 10, respectively.
5 is the reverse conversion of the conversion performed by the encryption units 105h to 105e.

The first encryption unit 205i generates a first intermediate block from the plaintext block generated by the fourth decryption unit 205d based on the first partial key.

The second to fourth encryption units 205j to 205l are
The 2nd-4th intermediate blocks are generated from the 1st-3rd intermediate blocks based on the 2nd-4th partial keys, respectively.

The first to fourth encryption units 205i to 205l are
Each of the first to fourth encryption units 10 of the data encryption device 10
It has the same function as 5a to 105d, and its operation is also completely the same. Here, first to fourth intermediate blocks corresponding to the first to third plaintext blocks are generated.

The block storage unit 202 has a block update function, and updates the chain block storing this fourth intermediate block as a new chain block each time the fourth encryption unit 205l generates a fourth intermediate block. However, it is used when processing the next block. The operation here is the same as that of the first embodiment.

The block combination unit 207 is the fourth decoding unit 2.
Each block of the plaintext data generated by 05d and the fractional plaintext data generated by the fractional data processing unit 206 are combined to generate plaintext data. Here, the 1st to 1st of each 64 bits
3 plaintext data and 8-bit fractional plaintext data are combined to generate 200-bit plaintext data.

<Operation> (Operation of Data Encryption Device 10) FIG. 17 is a diagram showing a flow of encryption processing in the data encryption device 10 according to the third embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 9 in the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (7) The same as the first embodiment (steps S101 to S107: the first time).

(8) Fifth to seventh encryption units 105e to 105
g generates the fifth to seventh intermediate blocks from the plaintext block and the fifth to sixth intermediate blocks based on the fifth to seventh partial keys, respectively (step S501). Here, fifth to seventh intermediate blocks are generated from the first plaintext block and fifth to sixth intermediate blocks corresponding to the first plaintext block (step S501: first time).

(9) to (17) The same as in the first embodiment (step S109, step S110: first time, step S101 to step S107: second time).

(18) In step S501, here, the fifth plaintext block and fifth to sixth intermediate blocks corresponding to the second plaintext block are generated to form fifth to seventh intermediate blocks (step S501: second time).

(19)-(27) Same as the first embodiment (step S109, step S110: second time,
Steps S101 to S107: third time).

(28) In step S501, here, fifth to sixth intermediate blocks are generated from the third plaintext block and the fifth to sixth intermediate blocks corresponding to the third plaintext block (step S501: third time).

(29)-(34) Same as the first embodiment (step S109, step S110: third time,
Step S101: Fourth time, Steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 13 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the third embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The steps common to those of the data decoding apparatus 20 shown in FIG. 10 according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (5) The same as the first embodiment (steps S201 to S205: the first time).

(6) Second to fourth decoding sections 205b to 205
d is 7th-5th based on the 7th-5th partial keys, respectively.
A sixth intermediate block, a fifth intermediate block and a plaintext block are generated from the intermediate block (step S601). Here, the sixth intermediate block, the fifth intermediate block, and the first plaintext block are generated from the seventh to fifth intermediate blocks corresponding to the first ciphertext block (step S601: the first time).

(7) The first encryption unit 205i generates a first intermediate block from the plaintext block generated by the fourth decryption unit 205d based on the first partial key (step S).
602). Here, the first intermediate block is generated from the first plaintext block (step S602: the first time).

(8) Second to fourth encryption units 205j to 205
l is the first to third subkeys based on the second to fourth partial keys, respectively.
Second to fourth intermediate blocks are generated from the intermediate blocks (step S603). Here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the first plaintext block (step S603: the first time).

(9) The block storage unit 202 updates the stored chain block using the fourth intermediate block generated by the fourth encryption unit 205l as a new chain block (step S604). Here, the fourth intermediate block corresponding to the first plaintext block is updated (step S60).
4: 1st time).

(10) to (15) The same as in the first embodiment (step S210: the first time, step S201 to step S201).
Step S205: second time).

(16) In step S601, in this case, the seventh to fifth intermediate blocks corresponding to the second ciphertext block to the sixth intermediate block, the fifth intermediate block, and the second intermediate block.
A plaintext block is generated (step S601: second time).

(17) In step S602, here, the first intermediate block is generated from the second plaintext block (step S602: second time).

(18) In step S603, here, second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the second plaintext block (step S6).
03: second time).

(19) In step S604, the fourth intermediate block corresponding to the second plaintext block is updated here (step S604: second time).

(20)-(25) Same as the first embodiment (step S210: second time, step S201-).
Step S205: third time).

(26) In step S601, in this case, the seventh to fifth intermediate blocks corresponding to the third ciphertext block to the sixth intermediate block, the fifth intermediate block and the third intermediate block.
A plaintext block is generated (step S601: third time).

(27) In step S602, the first intermediate block is generated from the third plaintext block here (step S602: third time).

(28) In step S603, here, second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the third plaintext block (step S6).
03: 3rd time).

(29) In step S604, the fourth intermediate block corresponding to the third plaintext block is updated here (step S604: third time).

(30) to (34) The same as in the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the third embodiment stores the intermediate block generated in the process of performing the cryptographic processing in the previous block as a chain block, and merges it with the key data in the subsequent cryptographic processing. , The chain block is updated each time encryption processing is performed.

In the third embodiment, the above-described changes are made to the first embodiment in which the chain block is merged into the key data. However, the second embodiment in which the chain block is merged into the plaintext block or the encryption processing block is described. Similarly, the above-described changes may be made.

Such a cryptographic processing device stores the intermediate block generated in the process of performing the cryptographic processing in the previous block as a chain block, and stores it in the plaintext block or the cryptographic processing block in the subsequent cryptographic processing. The chained data is updated every time it is merged and encrypted. (Embodiment 4) Embodiment 4 of the present invention is the same as Embodiment 3 with respect to Embodiment 2, except that
Reverse the order of the first to fourth encryption units that encrypt the data to be merged and the block storage unit that stores the chain block,
The block after fusion or before fusion is stored as a new chain block.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 4 of the present invention.

The components common to those of the data encryption device 10 shown in FIG. 11 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a partial key generation unit 10.
4, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combining unit 107, and a block merging unit 108.

The first encryption unit 105a generates the first intermediate block from the chain block stored in the block storage unit 102, not from the fused plaintext block.

The first to fourth encryption units 105a to 105d are
It has the same functions as those of the second embodiment. Here, the first to third intermediate blocks and the cryptographic processing block corresponding to each are generated from the chain block.

The block merging unit 108 uses the fourth encryption unit 1.
The cryptographic processing block generated by 05d is merged with the plaintext block to generate the fourth intermediate block. Here, when processing the first plaintext block, the initial value I of the chain block is
When the 64-bit first cryptographic processing block and the 64-bit first plaintext block generated from V are subjected to exclusive OR operation for each corresponding bit to process the second to third plaintext blocks, , 64-bit second to third cryptographic processing blocks generated during processing of the first to second plaintext blocks, and 6
An exclusive OR operation is performed for each of the corresponding bits of the 4-bit second to third plaintext blocks.

The block storage unit 102 has a block update function, and updates the chain block storing the fourth intermediate block as a new chain block each time the block merging unit 108 generates the fourth intermediate block, Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used in processing the first plaintext block, and the fourth intermediate block generated in this processing is stored as a new chain block. To do. Next, the chain block updated in processing the first plaintext block is used in processing the second plaintext block, and the fourth intermediate block generated in this processing is stored as a new chain block. . Next, the chain block stored during the processing of the second plaintext block is used when processing the third plaintext block, and the fourth intermediate block generated during this processing is stored as a new chain block. . Finally, the chain block stored during the processing of the third plaintext block is used when processing the fractional plaintext data.

The fifth to eighth encryption units 105e to 105h are
It has the same functions as those of the second embodiment. Here, from the fourth intermediate block,
7 intermediate blocks and first to third ciphertext blocks are generated.

The fraction data processing unit 106 receives the fraction plaintext data from the block dividing unit 101, and based on the cryptographic processing block generated by the fourth encryption unit 105d, the fraction plaintext data has the same number of bits as the fraction plaintext data. Generates encrypted data, and the data matching unit 106a
And a fraction data fusion unit 106b.

The data matching unit 106a is the fourth encryption unit 1
Fraction encryption processing data having the same number of bits as the fraction plaintext data is generated from the encryption processing block generated by 05d. Here, since the fractional plaintext data is 8 bits, the fractional encryption processing data composed of, for example, the upper 8 bits of the encryption processing block generated by the fourth encryption unit 105d is generated.

The fraction data merging unit 106b merges the fraction encryption processing data with the fraction plaintext data. Here, the 8-bit fraction ciphertext data and the 8-bit fraction plaintext data are subjected to an exclusive OR operation for each corresponding bit to generate 8-bit fraction ciphertext data.

Fractional data processing unit 106 may have the same function as that of the second embodiment.

(Structure of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 4 of the present invention.

The same components as those of the data decoding device 20 shown in FIG. 12 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

The data decryption device 20 includes a block division unit 201, a block storage unit 202, and a partial key generation unit 20.
4, first to fourth decryption units 205a to 205d, first to fourth encryption units 205i to 205l, a fraction data processing unit 206,
The block combining unit 207 and the block merging unit 208 are included.

The first encryption unit 205i generates a first intermediate block from the chain block stored in the block storage unit 202, based on the first partial key.

The second to fourth encryption units 205j to 205l are
The second intermediate block, the third intermediate block, and the cryptographic processing block are generated from the first to third intermediate blocks based on the second to fourth partial keys, respectively.

The block merging unit 208 uses the fourth encryption unit 2
The encryption processing block generated by 05l is transferred to the fourth decryption unit 20.
It is fused with the fourth intermediate block generated by 5d to generate a plaintext block. Here, when processing the first ciphertext block, 6 generated from the initial value IV of the chain block
A 64-bit first ciphertext block and a 64-bit fourth intermediate block generated from the first ciphertext block are subjected to exclusive OR operation for each corresponding bit to generate a 64-bit first plaintext block. However, when processing the second to third ciphertext blocks, the 64-bit second to third ciphertext processing blocks and the second to third ciphertext processing blocks generated from the chain block generated when processing the first to second ciphertext blocks ~ 64th respective 4th intermediate blocks generated from the ciphertext block are subjected to exclusive OR operation for each corresponding bit to generate 64-bit 2nd-3rd plaintext blocks.

The fraction data processing unit 206 receives the fraction ciphertext data from the block division unit 201, and based on the cipher processing block generated by the fourth encryption unit 205l, the fraction ciphertext data to the same bit as the fraction ciphertext data. The data matching unit 2 generates a plaintext data of a number.
06a and a fractional data fusion unit 206b.

The data matching unit 206a includes the fourth encryption unit 2
Fractional encryption processing data having the same number of bits as the fractional ciphertext data is generated from the encryption processing block generated by 05l.
Here, since the fraction ciphertext data is 8 bits, the fraction ciphertext data composed of, for example, the upper 8 bits of the cryptography block generated by the fourth encryption unit 205l is generated.

The fraction data merging unit 206b merges the fraction cipher processed data with the fraction ciphertext data. Here, 8
Bit-fractional encryption processing data and 8-bit fractional ciphertext data are subjected to exclusive OR operation for each corresponding bit to generate 8-bit fractional plaintext data.

The fraction data processing unit 206 may have the same function as that of the second embodiment.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 21 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the fourth embodiment of the present invention.

The steps common to the operation of the data encryption apparatus 10 shown in FIG. 13 in the second embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (3) Same as the second embodiment (step S101, step S102, step S3).
01: 1st time).

(4) The first encryption unit 105a generates a first intermediate block from the chain block stored in the block storage unit 102 based on the first partial key (step S701). Here, the first intermediate block is generated from the initial value IV of the chain block (step S701: the first time).

(5) Second to fourth encryption sections 105b to 105
d is the first to third subkeys based on the second to fourth partial keys, respectively.
A second intermediate block, a third intermediate block, and a cryptographic processing block are generated from the intermediate block (step S70).
2). Here, the second intermediate block, the third intermediate block, and the first cryptographic processing block are generated from the first to third intermediate blocks corresponding to the initial value IV of the chain block (step S702: the first time).

(6) The block merging unit 108 merges the encrypted block with the plaintext block to generate the fourth intermediate block (step S703). Here, the 64-bit first cryptographic processing block and the 64-bit first plaintext block are subjected to exclusive OR for each corresponding bit, and 6
A 4-bit fourth intermediate block is generated (step S7).
03: 1st time).

(7) to (13) The same as the second embodiment (steps S107 to S110: the first time, step S101, step S102, step S30).
1: Second time).

(14) In step S701, the first intermediate block is generated from the 64-bit chain block generated at the time of processing the first plaintext block (step S701: second time).

(15) In step S702, here, the first to third intermediate blocks corresponding to the chain block generated at the time of processing the first plaintext block to the second intermediate block, the third intermediate block, and the second cipher block. A processing block is generated (step S702: second time).

(16) In step S703, the 64-bit second cryptographic processing block and the 64-bit second plaintext block are exclusive-ORed for each corresponding bit to obtain the 64-bit fourth intermediate value. A block is generated (step S703: second time).

(17)-(23) Same as the second embodiment (steps S107-S110: second time,
Step S101, Step S102, Step S30
1: 3rd time).

(24) In step S701, the first intermediate block is generated from the 64-bit chain block generated in the processing of the second plaintext block (step S701: the third time).

(25) In step S702, here, the first to third intermediate blocks corresponding to the chain block generated during the processing of the second plaintext block to the second intermediate block, the third intermediate block, and the third cipher block. A processing block is generated (step S702: third time).

(26) In step S703, the 64-bit third cryptographic processing block and the 64-bit third plaintext block are exclusive-ORed for each corresponding bit to obtain the 64-bit fourth intermediate value. A block is generated (step S703: third time).

(27)-(34) Same as the second embodiment (steps S107-S110: third time,
Step S101: Fourth time, Steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 13 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the fourth embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The same steps as those of the operation of the data decoding apparatus 20 shown in FIG. 14 in the second embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (5) Same as the second embodiment (step S201, step S202, step S4).
01, step S205, step S206: the first time).

(6) The first encryption unit 205i generates a first intermediate block from the chain block stored in the block storage unit 202 based on the first partial key (step S801). Here, the first intermediate block is generated from the initial value IV of the chain block (step S801: the first time).

(7) Second to fourth encryption units 205j to 205
l is the first to third subkeys based on the second to fourth partial keys, respectively.
A second intermediate block, a third intermediate block, and a cryptographic processing block are generated from the intermediate block (step S80).
2). Here, the second intermediate block, the third intermediate block, and the first cryptographic processing block are generated from the first to third intermediate blocks corresponding to the initial value IV of the chain block (step S802: the first time).

(8) The block merging unit 208 merges the encrypted block with the fourth intermediate block to generate a plaintext block (step S803). Here, the 64-bit first ciphertext block and the 64-bit fourth intermediate block corresponding to the first ciphertext block are subjected to exclusive OR for each corresponding bit to obtain the 64-bit first plaintext block. It is generated (step S803: the first time).

(9) to (15) The same as the second embodiment (step S207, step S210: the first time, step S201, step S202, step S40).
1, step S205, step S206: second time).

(16) In step S 801, the 64 generated in the processing of the first ciphertext block, here.
A first intermediate block is generated from a chained block of bits (step S801: second time).

(17) In step S802, the first to third intermediate blocks, the second intermediate block, the third intermediate block, and the second intermediate block, which correspond to the chain block generated at the time of processing the first ciphertext block, A cryptographic processing block is generated (step S802: second time).

(18) In step S803, the 64-bit second cryptographic processing block and the 64-bit fourth intermediate block corresponding to the second ciphertext block are exclusive-ORed for each corresponding bit. The 64-bit second plaintext block is generated (step S80).
3: Second time).

(19)-(25) Same as the second embodiment (step S207, step S210: second time,
Step S201, Step S202, Step S40
1, step S205, step S206: third time).

(26) In step S 801, in this case, 64 generated at the time of processing the second ciphertext block.
A first intermediate block is generated from a chained block of bits (step S801: third time).

(27) In step S802, here, the first to third intermediate blocks corresponding to the chain block generated at the time of processing the second ciphertext block to the second intermediate block, the third intermediate block, and the third intermediate block. A cryptographic processing block is generated (step S802: third time).

(28) In step S803, the 64-bit third cryptographic processing block and the 64-bit fourth intermediate block corresponding to the third ciphertext block are exclusive-ORed for each corresponding bit. Then, a 64-bit third plaintext block is generated (step S80).
3: Third time).

(29)-(34) Same as the second embodiment (step S207, step S210: third time,
Step S201: Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the fourth embodiment stores the intermediate block generated in the process of performing the cryptographic processing in the previous block as a chain block, and performs the cryptographic processing in the subsequent cryptographic processing. It is merged with a plaintext block or a cipher processing block, and the chain block is updated every time cipher processing is performed. (Embodiment 5) In Embodiment 5 of the present invention, a block obtained by performing encryption processing on a chained block is stored as a new chained block, not as a new chained block after fusion or before fusion. Only the points are different from the fourth embodiment.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, the description thereof will be omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 5 of the present invention.

The components common to those of the data encryption device 10 shown in FIG. 11 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a partial key generation unit 10.
4, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combining unit 107, and a block merging unit 108.

The first encryption unit 105a generates the first intermediate block from the chain block stored in the block storage unit 102, not from the fused plaintext block.

The first to fourth encryption units 105a to 105d are
It has the same functions as those of the second embodiment. Here, the first to fourth intermediate blocks corresponding to the respective chain blocks are generated.

The block merging unit 108 uses the fourth encryption unit 1.
The fourth intermediate block generated by 05d is fused with the plaintext block to generate a fused plaintext block. Here, when processing the first plaintext block, the initial value I of the chain block is
64-bit fourth intermediate block generated from V and 64
An exclusive OR operation is performed for each corresponding bit of the first plaintext block, and when processing the second to third plaintext blocks, it is generated at the time of processing the first and second plaintext blocks. The 64-bit fourth intermediate block and the 64-bit second to third plaintext blocks corresponding to each are subjected to exclusive OR operation for each corresponding bit.

The fifth encryption unit 105e generates the fifth intermediate block from the fusion plaintext block generated by the block fusion unit 108, not from the fourth intermediate block.

The fifth to eighth encryption units 105e to 105h are
It has the same functions as those of the second embodiment. Here, from the fused plaintext block,
7 intermediate blocks and first to third ciphertext blocks are generated.

The fraction data processing unit 106 is the same as the fourth embodiment.
It has the same function as that of.

Fractional data processing unit 106 may have the same function as that of the second embodiment.

(Structure of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 in Embodiment 5 of the present invention.

The same components as those of the data decoding device 20 shown in FIG. 12 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

This data decryption apparatus 20 is comprised of a block division unit 201, a block storage unit 202 and a partial key generation unit 20.
4, first to fourth decryption units 205a to 205d, first to fourth encryption units 205i to 205l, a fraction data processing unit 206,
The block combining unit 207 and the block merging unit 208 are included.

The fourth decryption unit 205d generates an encryption processing block from the fifth intermediate block based on the fifth partial key. Here, the first to third cryptographic processing blocks are generated from the fifth intermediate block respectively corresponding to the first to third ciphertext blocks. Note that the first to fourth decoding units 205a to 2
The conversion performed by 05d is performed by the data encryption device 10 respectively.
Is the reverse conversion of the conversion performed by the fourth to first encryption units 105d to 105a.

The first encryption unit 205i generates a first intermediate block from the chain block stored in the block storage unit 202, based on the first partial key.

The second to fourth encryption units 205j to 205l are
The 2nd-4th intermediate blocks are generated from the 1st-3rd intermediate blocks based on the 2nd-4th partial keys, respectively.

The block storage unit 202 has a block update function, and updates the chain block storing the fourth intermediate block as a new chain block each time the fourth encryption unit 205l generates the fourth intermediate block. However, it is used when processing the next block. The operation here is the same as that of the first embodiment.

The first to fourth encryption units 205i to 205l are
Each of the first to fourth encryption units 10 of the data encryption device 10
It has the same function as 5a to 105d, and its operation is also completely the same. Here, first to fourth intermediate blocks corresponding to each chain block are generated.

The block merging unit 208 uses the fourth encryption unit 2
The fourth intermediate block generated by 05l is used by the fourth decoding unit 20.
The plaintext block is generated by merging with the encryption processing block generated by 5d. Here, when processing the first ciphertext block, 6 generated from the initial value IV of the chain block
A 4-bit fourth intermediate block and a 64-bit cryptographic processing block generated from the first ciphertext block are subjected to exclusive OR operation for each corresponding bit to generate a 64-bit first plaintext block, When processing the second to third ciphertext blocks, each 64-bit fourth intermediate block generated from the chain block generated when processing the first to second ciphertext blocks and the second to third ciphertexts. The 64-bit second to third cryptographic processing blocks generated from the statement block are subjected to exclusive OR operation for each corresponding bit. 6
Generate the 2nd to 3rd plaintext blocks of 4 bits.

The fraction data processing unit 206 is the same as the fourth embodiment.
It has the same function as that of.

The fraction data processing unit 206 may have the same function as that of the second embodiment.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 25 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the fifth embodiment of the present invention.

The steps common to the operation of the data encryption device 10 shown in FIG. 13 in the second embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (3) Same as the second embodiment (step S101, step S102, step S3).
01: 1st time).

(4) The first encryption unit 105a generates a first intermediate block from the chain block stored in the block storage unit 102 based on the first partial key (step S901). Here, the first intermediate block is generated from the initial value IV of the chain block (step S901: the first time).

(5)-(6) (6)-of the second embodiment
The same as (7) (step S106, step S1)
07: 1st time).

(7) The block merging unit 108 merges the fourth intermediate block with the plaintext block to generate a merged plaintext block (step S902). Here, the 64-bit fourth intermediate block corresponding to the initial value IV of the chained block and the 64-bit first plaintext block are exclusive-ORed for each corresponding bit to obtain the 64-bit first fused plaintext block. Is generated (step S902: the first time).

(8) The fifth encryption unit 105e generates a fifth intermediate block from the fused plaintext block based on the fifth partial key, and the sixth to seventh encryption units 105f to 105g
The sixth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks based on the sixth to seventh partial keys, respectively (step S903). Here, from the first fusion plaintext block to the fifth
The intermediate block is generated, and the sixth to sixth intermediate blocks are generated.
7 intermediate blocks are generated (step S903: first time).

(9) to (13) The same as the second embodiment (step S109, step S110: the first time, step S101, step S102, step S30).
1: Second time).

(14) In step S901, the first intermediate block is generated from the 64-bit chain block generated at the time of processing the first plaintext block (step S901: second time).

(15) to (16) (1 of the second embodiment
6) to (17) (step S106, step S107: second time).

(17) In step S902, the 64-bit fourth intermediate block and the 64-bit fourth intermediate block corresponding to the chain block generated at the time of processing the first plaintext block are used.
An exclusive OR is performed for each corresponding bit with the second plaintext block of bits to generate a 64-bit second fused plaintext block (step S902: second time).

(18) In step S903, the fifth intermediate block is generated from the second fused plaintext block, and the sixth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks (step S903: second time).

(19)-(23) Same as the second embodiment (step S109, step S110: second time,
Step S101, Step S102, Step S30
1: 3rd time).

(24) In step S901, the first intermediate block is generated from the 64-bit chain block generated at the time of processing the second plaintext block (step S901: third time).

(25)-(26) (2 of the second embodiment
6) to (27) (step S106, step S107: third time).

(27) In step S902, the 64-bit fourth intermediate block and the 64-bit fourth intermediate block corresponding to the chain block generated at the time of processing the second plaintext block are used.
Exclusive OR is performed for each corresponding bit with the third plaintext block of bits to generate a 64-bit third fused plaintext block (step S902: third time).

(28) In step S903, the fifth intermediate block is generated from the third fused plaintext block, and the sixth to seventh intermediate blocks are generated from the fifth to sixth intermediate blocks (step S903: third time).

(29)-(34) Same as the second embodiment (step S109, step S110: third time,
Step S101: Fourth time, Steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 16 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the fifth embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The same steps as those of the operation of the data decoding apparatus 20 shown in FIG. 14 in the second embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (4) The same as the second embodiment (step S201, step S202, step S4).
01, step S205: the first time).

(5) Second to fourth decoding sections 205b to 205
d is 7th-5th based on the 7th-5th partial keys, respectively.
A sixth intermediate block, a fifth intermediate block, and a cryptographic processing block are generated from the intermediate block (step S100).
1). Here, the 7th to 7th blocks corresponding to the first ciphertext block
A sixth intermediate block, a fifth intermediate block and a first cryptographic processing block are generated from the fifth intermediate block (step S1).
001: 1st time).

(6) The first encryption unit 205i generates a first intermediate block from the chain block stored in the block storage unit 202 based on the first partial key (step S1002). Here, the first intermediate block is generated from the initial value IV of the chain block (step S1002:
First time).

(7) Second to fourth encryption units 205j to 205
l is the first to third subkeys based on the second to fourth partial keys, respectively.
Second to fourth intermediate blocks are generated from the intermediate blocks (step S1003). Here, the second to fourth intermediate blocks are generated from the first to third intermediate blocks corresponding to the initial value IV of the chain block (step S1003: the first time).

(8) The block merging unit 208 merges the fourth intermediate block with the cryptographic processing block to generate a plaintext block (step S1004). Here, the 64-bit fourth intermediate block corresponding to the first ciphertext block and the 64-bit first cryptographic processing block are subjected to exclusive OR for each corresponding bit to obtain the 64-bit first plaintext block. It is generated (step S1004: first time).

(9) to (14) The same as the second embodiment (step S207, step S210: the first time, step S201, step S202, step S40).
1, step S205: second time).

(15) In step S1001, here, a sixth intermediate block, a fifth intermediate block and a second cryptographic processing block are generated from the seventh to fifth intermediate blocks corresponding to the second ciphertext block (step S1001:
Second time).

(16) In step S1002, in this case, 6 generated at the time of processing the first ciphertext block.
A first intermediate block is generated from a 4-bit chain block (step S1002: second time).

(17) In step S1003, here, the first to third intermediate blocks corresponding to the second to third intermediate blocks corresponding to the chain block generated at the time of processing the first ciphertext block are used.
4 intermediate blocks are generated (step S1003: second time).

(18) In step S1004, here, the 64-bit fourth intermediate block and the 64-bit second cryptographic processing block corresponding to the second ciphertext block are exclusive-ORed for each corresponding bit. Then, a 64-bit second plaintext block is generated (step S100).
4: Second time).

(19) to (24) The same as the second embodiment (step S207, step S210: second time,
Step S201, Step S202, Step S40
1, step S205: third time).

(25) In step S1001, the sixth to fifth intermediate blocks, the fifth intermediate block, and the third cryptographic processing block are generated from the seventh to fifth intermediate blocks, which correspond to the third ciphertext block here (step S1001:
Third time).

(26) In step S1002, in this case, 6 generated at the time of processing the second ciphertext block.
A first intermediate block is generated from a 4-bit chain block (step S1002: third time).

(27) In step S1003, here, the first to third intermediate blocks corresponding to the second to third intermediate blocks corresponding to the chain block generated at the time of processing the second ciphertext block are used.
4 intermediate blocks are generated (step S1003: third time).

(28) In step S1004, here, the 64-bit fourth intermediate block and the 64-bit third cryptographic processing block corresponding to the third ciphertext block are exclusive-ORed for each corresponding bit. Then, a 64-bit third plaintext block is generated (step S100).
4: 3rd time).

(29)-(34) Same as the second embodiment (step S207, step S210: third time,
Step S201: Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the fifth embodiment stores the intermediate block generated in the process of performing the cryptographic processing on the previous block as a chain block, and performs the cryptographic processing on the subsequent cryptographic processing. It is merged with a plaintext block or a cipher processing block, and the chain block is updated every time cipher processing is performed. (Sixth Embodiment) A sixth embodiment of the present invention is a cryptographic processing device that performs cryptographic processing specified by key data and generates output data from data to be encrypted. Each time it is applied, the output block, the encrypted block, the intermediate block, etc. are stored as a chain block, and when the encryption process for the next block is performed, the stored chain block is subjected to block conversion and fused into key data. It is a device.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, the description thereof will be omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 6 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 2 according to the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a key data fusion unit 1.
03, partial key generation unit 104, first to eighth encryption unit 105a
.About.105h, a fraction data processing unit 106, a block combining unit 107, and a block converting unit 109.

The block storage unit 102 has a block update function, and updates the chain block storing this ciphertext block as a new chain block each time the eighth encryption unit 105h generates a ciphertext block, Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used when processing the first plaintext block, and the first ciphertext block generated at this processing is used as a new chain block. Update. Next, the chain block updated in processing the first plaintext block is used in processing the second plaintext block,
The second ciphertext block generated in this process is updated as a new chain block. Next, the chain block updated in processing the second plaintext block is used in processing the third plaintext block, and the third ciphertext block generated in this processing is updated as a new chain block. . Finally, the chain block updated when processing the third plaintext block is used when processing the fractional plaintext data.

The block conversion unit 109 applies a predetermined conversion to the chain block stored in the block storage unit 102 to generate a conversion block. here,
The predetermined conversion performed by the block conversion unit 109 is, for example, bit replacement or bit conversion. Here, when processing the first plaintext block, a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and when processing the second to third plaintext blocks, the first plaintext block is processed. ~ 2
A 64-bit second to third conversion block is generated from the 64-bit chain block generated at the time of processing the plaintext block.

The key data fusion unit 103 fuses the conversion block generated by the block conversion unit 109 with key data to generate fusion key data. Here, when the preset 64-bit key data is obtained and the first plaintext block is processed, the 64-bit first conversion block and the 64-bit key data are exclusive for each corresponding bit. When performing the OR operation and processing the second to third plaintext blocks, 6
An exclusive OR operation is performed for each corresponding bit of the 4-bit second to third conversion blocks and the 64-bit key data.

The fraction data processing unit 106 receives the fraction plaintext data from the block division unit 101, and based on the conversion block generated by the block conversion unit 109, the fraction plaintext data to the fraction ciphertext data having the same number of bits as the fraction plaintext data. And includes a data matching unit 106a and a fractional data fusion unit 106b.

The data matching unit 106a generates the fractional conversion data having the same number of bits as the fractional plaintext data from the conversion block generated by the block conversion unit 109. here,
Since the fractional plaintext data is 8 bits, the block conversion unit 10
Fractional conversion data composed of, for example, upper 8 bits of the conversion block generated by 9 is generated.

The fraction data merging unit 106b merges the fraction conversion data with the fraction plaintext data. Here, the 8-bit fraction converted data and the 8-bit fraction plaintext data are subjected to an exclusive OR operation for each corresponding bit to generate 8-bit fraction ciphertext data.

Fractional data processing unit 106 may have the same function as that of the first embodiment.

(Structure of Data Decoding Device 20) FIG. 28
FIG. 9 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 6 of the present invention.

The same components as those of the data decoding apparatus 20 shown in FIG. 7 in the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data decryption apparatus 20 is comprised of a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to eighth decryption unit 205a
.About.205h, a fraction data processing unit 206, a block combination unit 207, and a block conversion unit 209.

The block storage unit 202 has a block update function, and every time the block division unit 201 generates a ciphertext block, the chained block that stores this ciphertext block as a new chained block is updated. Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the first ciphertext block is stored as a new chain block. Next, the chain block updated at the time of processing the first ciphertext block is used at the time of processing the second ciphertext block, and the second ciphertext block is stored as a new chain block. Next, the chain block stored when processing the second ciphertext block is used when processing the third ciphertext block, and the third ciphertext block is stored as a new chain block. Finally, the chain block stored when processing the third ciphertext block is used when processing the fraction ciphertext data.

The block conversion unit 209 generates a conversion block by performing a predetermined conversion on the chain block stored in the block storage unit 202. here,
The predetermined conversion performed by the block conversion unit 209 is the same as the predetermined conversion performed by the block conversion unit 109 of the data encryption device 10, and is, for example, bit replacement or bit conversion. Here, when processing the first ciphertext block,
When a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block and the second to third ciphertext blocks are processed, they are generated respectively when the first to second ciphertext blocks are processed. 6 from a 64-bit chain block
The second to third conversion blocks of 4 bits are generated.

The key data fusion unit 203 fuses the conversion block generated by the block conversion unit 209 with the key data to generate fusion key data. Here, when the preset 64-bit key data is obtained and the first ciphertext block is processed, the 64-bit first conversion block and the 64-bit key data are exclusive for each corresponding bit. When performing the logical OR operation and processing the second to third ciphertext blocks, the 64-bit second to third conversion blocks and the 64-bit key data are subjected to an exclusive OR operation for each corresponding bit. Calculate.

The fraction data processing unit 206 receives the fraction ciphertext data from the block division unit 201, and based on the conversion block generated by the block conversion unit 109, the fraction ciphertext data has the same number of bits as the fraction ciphertext data. The plain text data is generated, and the data matching unit 206
a and a fraction data fusion unit 206b.

The data matching unit 206a generates the fractional conversion data having the same number of bits as the fractional ciphertext data from the conversion block generated by the block conversion unit 109. Here, since the fraction ciphertext data is 8 bits, the fraction conversion data composed of, for example, upper 8 bits of the conversion block generated by the block conversion unit 109 is generated.

The fraction data merging unit 206b merges the fraction conversion data with the fraction ciphertext data. Here, the 8-bit fraction conversion data and the 8-bit fraction ciphertext data are subjected to exclusive OR operation for each corresponding bit,
8-bit fractional plaintext data is generated.

Fractional data processing unit 206 may have the same function as that of the first embodiment.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 29 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the sixth embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 9 in the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) and (2) The same as in the first embodiment (steps S101 and S102: the first time).

(3) The block conversion unit 109 generates a conversion block by performing a predetermined conversion on the chain block stored in the block storage unit 102, and the key data fusion unit 103 generates the conversion block. Is combined with key data to generate combined key data (step S1101). Here, the initial value IV to 6 of the 64-bit chain block is
A 4-bit first conversion block is generated, preset 64-bit key data is obtained, and the 64-bit first conversion block and 64-bit key data are subjected to exclusive OR for each corresponding bit. Calculation is performed (step S110)
1: 1).

(4)-(8) (4)-of the first embodiment
The same as (6), (8), and (9) (step S10).
4 to step S106, step S108, step S
109: 1st time).

(9) The block storage unit 102 updates the stored chain block using the ciphertext block as a new chain block (step S1102). Here, the first ciphertext block is updated (step S110).
2: 1st time).

(10) to (12) The same as in the first embodiment (step S110: the first time, step S101,
Step S102: second time).

(13) In step S1101, in this case, 64 generated at the time of processing the first plaintext block.
A 64-bit second conversion block is generated from the chained block of bits, and the 64-bit second conversion block and 64-bit key data are subjected to exclusive OR operation for each corresponding bit (step S1101: 2). Second time).

(14) to (18) (1 of the first embodiment
4) to (16), (18) and (19) (steps S104 to S106 and step S10).
8, step S109: second time).

(19) In step S1102, the second ciphertext block is updated here (step S1).
102: second time).

(20)-(22) Same as the first embodiment (step S110: second time, step S101,
Step S102: third time).

(23) In step S1101, in this case, 64 generated at the time of processing the second plaintext block.
A 64-bit third conversion block is generated from the bit chain block, and an exclusive OR operation is performed on the corresponding 64-bit third conversion block and 64-bit key data for each corresponding bit (step S1101: 3). Second time).

(24) to (28) (2) of the first embodiment
4) to (26), (28), and (29) (steps S104 to S106, step S10).
8, step S109: third time).

(29) In step S1102, the third ciphertext block is updated here (step S1).
102: the third time).

(30)-(34) Same as the first embodiment (step S110: third time, step S101:
Fourth time, steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 24 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the sixth embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The steps common to the operation of data decoding apparatus 20 shown in FIG. 10 according to Embodiment 1 are assigned the same reference numerals and explanations thereof are omitted.

(1) and (2) The same as the first embodiment (steps S201 to S202: the first time).

(3) The block conversion unit 209 performs a predetermined conversion on the chain block stored in the block storage unit 202 to generate a conversion block, and the key data fusion unit 203 generates the conversion block. Is merged with key data to generate fused key data (step S1201). Here, the initial value IV to 6 of the 64-bit chain block is
A 4-bit first conversion block is generated, preset 64-bit key data is obtained, and the 64-bit first conversion block and 64-bit key data are subjected to exclusive OR for each corresponding bit. Calculation is performed (step S120)
1: 1).

(4)-(8) (4)-of the first embodiment
The same as (6), (8), and (9) (step S20).
4 to step S206, step S208, step S
209: 1st time).

(9) The block storage unit 202 updates the stored chain block using the ciphertext block as a new chain block (step S1202). Here, the first ciphertext block is updated (step S120).
2: 1st time).

(10) to (12) The same as the first embodiment (step S210: the first time, step S201,
Step S202: second time).

(13) In step S1201, in this case, 64 generated at the time of processing the first plaintext block.
A 64-bit second conversion block is generated from the chained block of bits, and the 64-bit second conversion block and the 64-bit key data are subjected to exclusive OR operation for each corresponding bit (step S1201: 2). Second time).

(14) to (18) (1 of the first embodiment
4) to (16), (18), and (19) (steps S204 to S206, step S20)
8, step S209: second time).

(19) In step S1202, the second ciphertext block is updated here (step S1).
202: second time).

(20)-(22) Same as the first embodiment (step S210: second time, step S201,
Step S202: third time).

(23) In step S1201, in this case, 64 generated at the time of processing the second plaintext block.
A 64-bit third conversion block is generated from the bit chain block, and an exclusive OR operation is performed on the corresponding 64-bit third conversion block and 64-bit key data for each corresponding bit (step S1201: 3). Second time).

(24) to (28) (2 of the first embodiment
4) to (26), (28), and (29) (steps S204 to S206, step S20).
8, step S209: third time).

(29) In step S1202, the third ciphertext block is updated here (step S1).
202: third time).

(30) to (34) The same as the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the sixth embodiment stores the previous ciphertext block as a chain block, performs block conversion during the subsequent cryptographic processing, and fuses the key data.
The chain block is updated every time the encryption process is performed.

Although the ciphertext block is a new chain block in the sixth embodiment, the plaintext block or any intermediate block may be a new chain block. (Embodiment 7) In Embodiment 7 of the present invention, instead of merging a conversion block obtained by block conversion of a chain block into key data, encryption processing is performed on encrypted data or encrypted data. It is different from the sixth embodiment in that it is fused with later data.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 7 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 11 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a partial key generation unit 10.
4, first to eighth encryption units 105a to 105h, a fraction data processing unit 106, a block combination unit 107, a block fusion unit 108, and a block conversion unit 109.

The block storage unit 102 has a block update function, and updates the chain block storing this ciphertext block as a new chain block each time the eighth encryption unit 105h generates a ciphertext block, Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used when processing the first plaintext block, and the first ciphertext block generated at this processing is used as a new chain block. Update. Next, the chain block updated in processing the first plaintext block is used in processing the second plaintext block,
The second ciphertext block generated in this process is updated as a new chain block. Next, the chain block updated in processing the second plaintext block is used in processing the third plaintext block, and the third ciphertext block generated in this processing is updated as a new chain block. . Finally, the chain block updated when processing the third plaintext block is used when processing the fractional plaintext data.

The block conversion unit 109 applies a predetermined conversion to the chain block stored in the block storage unit 102 to generate a conversion block. here,
The predetermined conversion performed by the block conversion unit 109 is, for example, bit replacement or bit conversion. Here, when processing the first plaintext block, a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and when processing the second to third plaintext blocks, the first plaintext block is processed. ~ 2
A 64-bit second to third conversion block is generated from the 64-bit chain block generated at the time of processing the plaintext block.

The block fusion unit 108 fuses the conversion block generated by the block conversion unit 109 into a plaintext block to generate a fusion plaintext block. Here, when processing the first plaintext block, the 64-bit first conversion block and the 64-bit first plaintext block are subjected to an exclusive OR operation for each corresponding bit to perform the 64-bit first When the fused plaintext block is generated and the second to third plaintext blocks are processed, the 64-bit second to third conversion blocks and the 64-bit conversion block are used.
The 2nd to 3rd plaintext blocks of bits are subjected to an exclusive OR operation for each corresponding bit to generate 2nd to 3rd fused plaintext blocks of 64 bits.

(Structure of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 7 of the present invention.

The same components as those of the data decoding device 20 shown in FIG. 12 in the second embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

The data decryption apparatus 20 includes a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to eighth decryption unit 205a
.About.205h, a fraction data processing unit 206, a block combination unit 207, and a block conversion unit 209.

The block storage unit 202 has a block update function, and each time the block division unit 201 generates a ciphertext block, it updates the chain block storing this ciphertext block as a new chain block, and Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the first ciphertext block is stored as a new chain block. Next, the chain block updated at the time of processing the first ciphertext block is used at the time of processing the second ciphertext block, and the second ciphertext block is stored as a new chain block. Next, the chain block stored when processing the second ciphertext block is used when processing the third ciphertext block, and the third ciphertext block is stored as a new chain block. Finally, the chain block stored when processing the third ciphertext block is used when processing the fraction ciphertext data.

The block conversion unit 209 generates a conversion block by applying a predetermined conversion to the chain block stored in the block storage unit 202. here,
The predetermined conversion performed by the block conversion unit 209 is the same as the predetermined conversion performed by the block conversion unit 109 of the data encryption device 10, and is, for example, bit replacement or bit conversion. Here, when processing the first ciphertext block,
When a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block and the second to third ciphertext blocks are processed, they are generated respectively when the first to second ciphertext blocks are processed. 6 from a 64-bit chain block
The second to third conversion blocks of 4 bits are generated.

The block fusion unit 208 fuses the conversion block generated by the block conversion unit 209 with the encryption processing block to generate a plaintext block. Here, when processing the first ciphertext block, the 64-bit first conversion block and the 64-bit first cryptographic processing block are subjected to an exclusive OR operation for each corresponding bit to perform 64-bit operation. When the first plaintext block is generated and the second to third ciphertext blocks are processed, the 64-bit second to third conversion blocks and the 64-bit second to third cryptographic processing blocks are set for each corresponding bit. An exclusive OR operation is performed to generate 64-bit second to third plaintext blocks.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 33 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the seventh embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 13 in the second embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (3) The same as the second embodiment (step S101, step S102, step S3).
01: 1st time).

(4) The block conversion unit 109 performs a predetermined conversion on the chain block stored in the block storage unit 102 to generate a conversion block, and the block fusion unit 108 converts the conversion block. It is fused with the plaintext block to generate a fused plaintext block (step S130).
1). Here, the initial value I of the 64-bit chain block
A 64-bit first conversion block is generated from V, an exclusive OR operation is performed on the corresponding 64-bit first conversion block and 64-bit first plaintext block, and a 64-bit first conversion block is calculated. A fused plaintext block is generated (step S1301: first time).

(5) to (8) The same as the second embodiment (step S303, step S106, step S1).
08, step S109: the first time).

(9) The block storage unit 102 updates the stored chain block using the ciphertext block as a new chain block (step S1302). Here, the first ciphertext block is updated (step S130).
2: 1st time).

(10)-(13) Same as the second embodiment (step S110: first time, step S101,
Step S102, step S301: second time).

(14) In step S1301, in this case, 64 generated at the time of processing the first plaintext block.
A 64-bit second conversion block is generated from the chained block of bits, and the 64-bit second conversion block and the 64-bit second plaintext block are subjected to exclusive OR operation for each corresponding bit to obtain 64-bit. The second fused plaintext block of is generated (step S1301: second time).

(15) to (18) The same as the second embodiment (step S303, step S106, step S108, step S109: second time).

(19) In step S1302, the second ciphertext block is updated here (step S1).
302: second time).

(20)-(23) Same as the second embodiment (step S110: second time, step S101,
Step S102, step S301: third time).

(24) In step S1301, in this case, 64 generated at the time of processing the second plaintext block.
A 64-bit third conversion block is generated from the chained block of bits, and the 64-bit third conversion block and the 64-bit third plaintext block are subjected to an exclusive OR operation for each corresponding bit to obtain a 64-bit The third fused plaintext block is generated (step S1301: third time).

(25)-(28) Same as the second embodiment (step S303, step S106, step S108, step S109: third time).

(29) In step S1302, the third ciphertext block is updated here (step S1).
302: third time).

(30)-(34) Same as the second embodiment (step S110: third time, step S101:
Fourth time, steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 24 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the seventh embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The steps common to the operation of the data decoding apparatus 20 shown in FIG. 14 in the second embodiment will be assigned the same reference numerals and explanation thereof will be omitted.

(1) to (7) The same as the first embodiment (steps S201 to S202, step S4).
01, step S205, step S206, step S208, step S402: the first time).

(8) The block conversion unit 209 generates a conversion block by performing a predetermined conversion on the chain block stored in the block storage unit 202, and the block fusion unit 208 converts the conversion block. The plaintext block is generated by merging with the cryptographic processing block (step S140).
1). Here, a 64-bit first conversion block is generated from the initial value IV of the chain block, and the 64-bit first conversion block and the 64-bit first cryptographic processing block are
An exclusive OR operation is performed for each corresponding bit to generate a 64-bit first plaintext block (step S140).
1: 1).

(9) The block storage unit 202 updates the stored chain block using the ciphertext block as a new chain block (step S1402). Here, the first ciphertext block is updated (step S140).
2: 1st time).

(10) to (17) The same as the first embodiment (step S210: the first time, step S201,
Step S202, Step S401, Step S20
5, step S206, step S208, step S
402: Second time).

(18) In step S1401, in this case, 64 generated at the time of processing the first plaintext block.
A 64-bit second conversion block is generated from the chained block of bits, and the 64-bit second conversion block and the 64-bit second cryptographic processing block are subjected to exclusive OR operation for each corresponding bit to obtain 64-bit. The second plaintext block is generated (step S1401: second time).

(19) In step S1402, the second ciphertext block is updated here (step S1).
402: Second time).

(20)-(27) Same as the first embodiment (step S210: second time, step S201,
Step S202, Step S401, Step S20
5, step S206, step S208, step S
402: third time).

(28) In step S1401, in this case, 64 generated at the time of processing the second plaintext block.
A 64-bit third conversion block is generated from the chained block of bits, and the 64-bit third conversion block and the 64-bit third cryptographic processing block are subjected to exclusive OR operation for each corresponding bit to obtain 64-bit. The third plaintext block of is generated (step S1401: third time).

(29) In step S1402, the third ciphertext block is updated here (step S1).
402: third time).

(30)-(34) Same as the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the seventh embodiment stores the previous ciphertext block as a chain block, performs block conversion during the subsequent cryptographic processing, and merges the plaintext block and the cryptographic processing block with each other to obtain a ciphertext block. The chain block is updated every time processing is performed.

Although the ciphertext block is a new chain block in the seventh embodiment, the plaintext block or any intermediate block may be a new chain block. (Embodiment 8) A data encryption device 10 according to Embodiment 8 of the present invention includes a first encryption unit 105a and a block storage unit 1.
02, block combining unit 107 and block merging unit 108
The respective inputs are different from those in the seventh embodiment, and the processing order and the like are interchanged.

The data decryption apparatus 20 according to the eighth embodiment of the present invention is the same as the data encryption apparatus 10 except that only the input of the block storage unit is different from that of the data encryption apparatus 10. .

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, the description thereof will be omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 8 of the present invention.

The components common to those of the data encryption device 10 shown in FIG. 31 in the seventh embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

The configuration of this data encryption device 10 is the same as that of the seventh embodiment.

The first encryption unit 105a generates the first intermediate block from the converted block generated by the block conversion unit 109, not from the combined plaintext block generated by the block combination unit 108 as in the seventh embodiment.

The eighth encryption unit 105h generates a cryptographic processing block instead of the ciphertext block as in the seventh embodiment.

The first to eighth encryption units 105a to 105h are
It has the same functions as those of the seventh embodiment. Here, first to seventh intermediate blocks and first to third cryptographic processing blocks corresponding to the first to third conversion blocks are generated.

The block storage unit 102 has a block update function, and each time the block fusion unit 108 generates a ciphertext block, it updates the chained block that stores this ciphertext block as a new chained block. Used when processing blocks. The operation here is the seventh embodiment.
Is the same as.

The block fusion unit 108 fuses the cipher processing block generated by the eighth encryption unit 105h into the plaintext block instead of the conversion block generated by the block conversion unit 109 as in the seventh embodiment, to obtain a ciphertext block. To generate. Here, when processing the first plaintext block, 6
The 4-bit first ciphertext block and the 64-bit first plaintext block are subjected to exclusive OR operation for each corresponding bit to generate a 64-bit first ciphertext block,
When processing the second to third plaintext blocks, the 64-bit second to third cryptographic processing blocks and the 64-bit second to third plaintext blocks are subjected to exclusive OR operation for each corresponding bit. Generate the second to third ciphertext block of bits.

The block combining unit 107 combines each ciphertext block generated by the block merging unit 108 and the fraction ciphertext data generated by the fraction data processing unit 106 to generate ciphertext data. Here, the first to third of each 64 bits
The ciphertext block and the 8-bit fraction ciphertext data are combined to generate 200-bit ciphertext data.

(Structure of Data Decoding Device 20) FIG.
FIG. 20 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 in the eighth embodiment of the present invention.

The data decryption apparatus 20 includes a block division unit 201, a block storage unit 202, and a partial key generation unit 20.
4, first to eighth encryption units 205i to 205p, a fraction data processing unit 206, a block combination unit 207, a block fusion unit 208, and a block conversion unit 209.

The block storage unit 202 has a block update function, and every time the block division unit 201 generates a ciphertext block, the chained block that stores this ciphertext block as a new chained block is updated to Used when processing blocks. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block, and the first ciphertext block is updated as a new chain block. Next, the chain block updated in processing the first ciphertext block is used in processing the second ciphertext block, and the second ciphertext block is updated as a new chain block. Next, the chained block updated when processing the second ciphertext block is used when processing the third ciphertext block, and the third ciphertext block is updated as a new chained block. Finally, the chain block updated when processing the third ciphertext block is used when processing the fraction ciphertext data.

The components having the same names as those of the data encryption device 10 shown in FIG. 35 in the eighth embodiment have the same functions, and only the input of the block storage unit 202 is stored in the block storage unit 102 of the data encryption device 10. The data encryption device 10 is the same as the data encryption device 10 except that it is different from the input.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 37 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the eighth embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 33 according to the seventh embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (3) Same as the seventh embodiment (step S101, step S102, step S3).
01: 1st time).

(4) The block conversion unit 109 generates a conversion block by performing a predetermined conversion on the chain block stored in the block storage unit 102, and the first encryption unit 105a causes the first encryption unit 105a to perform the first conversion. A first intermediate block is generated from the converted block based on the partial key of step S1.
501). Here, a 64-bit first conversion block is generated from the initial value IV of the 64-bit chain block, and 6
A first intermediate block is generated from the 4-bit first conversion block (step S1501: first time).

(5) to (6) (6) to in the seventh embodiment
The same as (7) (step S106, step S1)
08: 1st time).

(7) The eighth encryption unit 105h generates an encryption processing block from the seventh intermediate block based on the eighth partial key (step S1502). Here, the first cryptographic processing block is generated from the seventh intermediate block corresponding to the initial value IV of the chain block (step S150).
2: 1st time).

(8) The block merging unit 108 merges the cryptographic processing block with the plaintext block to generate a ciphertext block (step S1503). Here, the 64-bit first ciphertext block and the 64-bit first plaintext block are subjected to exclusive OR operation for each corresponding bit to generate a 64-bit first ciphertext block (step S1503). : 1st time).

(9) to (13) The same as the seventh embodiment (step S1302, step S110: the first time,
Step S101, Step S102, Step S30
1: Second time).

(14) In step S1501, in this case, 64 generated at the time of processing the first plaintext block.
A 64-bit second conversion block is generated from the bit chain block, and a first intermediate block is generated from the 64-bit second conversion block (step S1501: second time).

(15) to (16) (1 of the seventh embodiment
6) to (17) (step S106, step S108: second time).

(17) In step S1502, here, a second cipher processing block is generated from the seventh intermediate block corresponding to the chain block generated at the time of processing the first plaintext block (step S1502: second time). .

(18) In step S1503, the 64-bit second cryptographic processing block and the 64-bit second plaintext block are subjected to exclusive OR operation for each corresponding bit to obtain the 64-bit second ciphertext block. Two ciphertext blocks are generated (step S1503: second time).

(19)-(23) Same as the seventh embodiment (step S1302, step S110: second time, step S101, step S102, step S).
301: Third time).

(24) In step S1501, in this case, 64 generated at the time of processing the second plaintext block.
A 64-bit third conversion block is generated from the bit chain block, and a first intermediate block is generated from the 64-bit third conversion block (step S1501: third time).

(25) to (26) (2) of the seventh embodiment
6) to (27) (step S106, step S108: third time).

(27) In step S1502, a third cryptographic processing block is generated from the seventh intermediate block, which corresponds to the chain block generated in processing the second plaintext block here (step S1502: third time). .

(28) In step S1503, the 64-bit third cryptographic processing block and the 64-bit third plaintext block are subjected to exclusive OR operation for each corresponding bit to obtain the 64-bit third ciphertext block. Three ciphertext blocks are generated (step S1503: third time).

(29) to (34) The same as the seventh embodiment (step S1302, step S110: third time, step S101: fourth time, step S111 to step S113).

(Operation of Data Decryption Device 20) The operation of the data decryption device 20 is an inverse conversion of the operation of the data encryption device 10.

Data Decoding Device 2 in Eighth Embodiment
The operation of 0 is the same as the operation of the data encryption device 10 according to the eighth embodiment except that the input of the block storage unit is different, and thus the description of the encryption processing device according to the eighth embodiment will be omitted. The ciphertext block is stored as a chain block, and block conversion and cipher processing are performed at the time of subsequent cipher processing to fuse the plaintext block and ciphertext block, and each time the cipher processing is performed, the chain block is updated. It is a thing.

In the eighth embodiment, the ciphertext block is a new chain block, but the plaintext block or any intermediate block may be a new chain block. (Embodiment 9) Embodiment 9 of the present invention differs from Embodiment 8 only in the input to the block storage unit.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, the description thereof will be omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 9 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 9 of the present invention.

The components common to those of the data encryption device 10 shown in FIG. 35 in the eighth embodiment are designated by the same reference numerals, and the description of the components having the same function will be omitted.

The configuration of this data encryption device 10 is similar to that of the eighth embodiment.

The block storage unit 102 has a block update function, and updates the chain block storing this encryption process block as a new chain block each time the eighth encryption unit 105h generates an encryption process block, Used when processing the next block. Here, a 64-bit initial value IV is stored in advance, this initial value IV is used when processing the first plaintext block, and the first cryptographic processing block generated at this processing is used as a new chain block. Update. Next, the chain block updated in the processing of the first plaintext block is used in processing the second plaintext block, and the second cipher processing block generated in this processing is updated as a new chain block. . Next, the chain block updated in processing the second plaintext block is used in processing the third plaintext block, and the third cipher processing block generated in this processing is updated as a new chain block. . Finally, the chain block updated when processing the third plaintext block is used when processing the fractional plaintext data.

(Structure of Data Decoding Device 20) FIG.
FIG. 9 is a diagram showing a detailed configuration of a data decoding device 20 shown in FIG. 1 in Embodiment 9 of the present invention.

The configuration of this data decryption apparatus 20 is the same as that of the eighth embodiment, and the components having the same names as those of the data encryption apparatus 10 shown in FIG. 38 in the ninth embodiment have the same functions. Therefore, the description thereof will be omitted.

<Operation> (Operation of Data Encryption Device 10) Embodiment 9 of the Present Invention
The data encryption device 10 is similar to the data encryption device 10 of the eighth embodiment except that the input of the block storage unit 102 is different, and thus the description of the operation thereof is omitted (of the data decryption device 20). Operation) Data Decoding Device 20
The operation of is an inverse conversion of the operation of the data encryption device 10.

Data Decoding Device 2 in Embodiment 9
The operation of 0 corresponds to the data encryption device 1 in the ninth embodiment.
Since the operation is the same as that of 0, the encryption processing device according to the ninth embodiment, the description of which is omitted, stores the encryption processing block generated in the process of performing the encryption processing on the previous block as a new chain block, In the subsequent cryptographic processing, block conversion and cryptographic processing are performed to fuse the plaintext block and the ciphertext block, and each time the cryptographic processing is performed, the chain block is updated. (Embodiment 10) Embodiment 10 of the present invention is the same as Embodiment 1 except that a function of updating key data every time one block is processed is added.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 13 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 10 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 2 according to the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a key data fusion unit 1.
03, partial key generation unit 104, first to eighth encryption unit 105a
.About.105h, a fraction data processing unit 106, a block combining unit 107, and a key data storage unit 110.

The conventional encryption device 30 shown in FIG. 50 and FIG.
The relationship with the data encryption device 10 according to the tenth embodiment of the present invention shown in 0 is the same as that of the first embodiment, and a key data storage unit 110 is further added.

The key data storage unit 110 stores key data. When processing the first block, the initial value of the key data is stored in advance.

[0527] The key data fusion unit 103 converts the chained blocks stored in the block storage unit 102 into the key data storage unit 1
It is fused with the key data stored in 10 to generate fused key data. Here, when processing the first plaintext block, the 64-bit chain block initial value IV and the 64-bit key data initial value are subjected to exclusive OR operation for each corresponding bit, When processing 2-3 plaintext blocks, a 64-bit chain block generated when processing first and second plaintext blocks and a 64-bit key generated when processing first and second plaintext blocks An exclusive OR operation is performed on the data and each corresponding bit.

The key data storage unit 110 has a key data update function, and updates the key data stored as new key data each time the key data fusion unit 103 generates fusion key data. Used when processing the next block. Here, a 64-bit initial value is stored in advance,
This initial value is used when processing the first plaintext block, and the fusion key data generated in this processing is updated as new key data. Next, the key data updated in processing the first plaintext block is used in processing the second plaintext block, and the fusion key data generated in this processing is updated as new key data. Next, the key data updated in processing the second plaintext block is used in processing the third plaintext block, and the fusion key data generated in this processing is updated as new key data.

(Structure of Data Decoding Device 20) FIG.
FIG. 20 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 in the tenth embodiment of the present invention.

The same components as those of the data decoding apparatus 20 shown in FIG. 7 in the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

The data decryption device 20 includes a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to eighth decryption unit 205a
.About.205h, a fraction data processing unit 206, a block combining unit 207, and a key data storage unit 210.

The key data storage unit 210 stores key data. When processing the first block, the initial value of the key data is stored in advance.

The key data fusion unit 203 converts the chained blocks stored in the block storage unit 202 into the key data storage unit 2
It is fused with the key data stored in 10 to generate fused key data. Here, when processing the first ciphertext block, the initial value IV of the 64-bit chain block and the initial value of the 64-bit key data are subjected to exclusive OR operation for each corresponding bit. 1 fusion key data is generated, and 2
When processing the third to third ciphertext blocks, the 64-bit chain block generated at the time of processing the first to second ciphertext blocks and at the time of processing the first to second ciphertext blocks respectively 64-bit key data is subjected to exclusive OR operation for each corresponding bit to generate second to third fused key data.

The key data storage unit 210 has a key data update function, and updates the key data stored as new key data each time the key data fusion unit 203 generates fusion key data. Used when processing the next block. Here, a 64-bit initial value is stored in advance,
This initial value is used when processing the first ciphertext block, and the first fusion key data generated during this processing is updated as new key data. Next, the key data updated during the processing of the first ciphertext block is used when processing the second ciphertext block, and the second key data generated during this processing is generated.
The fusion key data is updated as new key data. next,
The key data updated at the time of processing the second ciphertext block is used at the time of processing the third ciphertext block, and the third fusion key data generated at this processing is updated as new key data.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 42 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the tenth embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 9 in the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

Here, in addition to the conditions of the first embodiment,
It is assumed that the key data storage unit 110 stores the initial value of the key data in advance.

(1) and (2) The same as the first embodiment (step S101, step S102: the first time).

(3) The key data fusion unit 103 fuses the chain block stored in the block storage unit 102 with the key data stored in the key data storage unit 110 to generate fusion key data, and the key data storage unit The 110 updates the key data stored therein by using this fusion key data as new key data (step S1601). Here, the 64-bit initial value IV stored in the block storage unit 102 and the 64-bit key data initial value stored in the key data storage unit 110 are subjected to exclusive OR operation for each corresponding bit. To generate the first fusion key data to generate the partial key generation unit 10
4, and the key data is updated using the first fusion key data as new key data (step S1601: the first time).

(4) to (12) The same as the first embodiment (step S104 to step S110: the first time, step S101, step S102: the second time).

(13) In step S1601, in this case, 64 generated at the time of processing the first plaintext block.
The chained block of bits and the 64-bit key data generated during the processing of the first plaintext block are subjected to exclusive OR operation for each corresponding bit to generate the second fused key data and the partial The key data is passed to the key generation unit 104, and the key data is updated using the second fusion key data as new key data (step S1601: second time).

(14)-(22) Same as the first embodiment (steps S104-S110: second time,
Steps S101 and S102: third time).

(23) In step S1601, in this case, 64 generated at the time of processing the second plaintext block.
The chained block of bits and the 64-bit key data generated at the time of processing the second plaintext block are subjected to exclusive OR operation for each corresponding bit to generate the third fused key data, and the part is generated. The key data is passed to the key generation unit 104, and the key data is updated by using the third fusion key data as new key data (step S1601: third time).

(24)-(34) Same as the first embodiment (steps S104-S110: third time,
Step S101: Fourth time, Steps S111 to S113).

(Operation of Data Decoding Device 20) FIG.
FIG. 24 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the tenth embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The steps common to the operation of data decoding apparatus 20 shown in FIG. 10 according to Embodiment 1 are assigned the same reference numerals and explanations thereof will be omitted.

(1) and (2) The same as the first embodiment (step S201, step S202: the first time).

(3) The key data fusion unit 203 fuses the chain block stored in the block storage unit 202 with the key data stored in the key data storage unit 210 to generate fusion key data, and the key data storage unit The 210 updates the key data stored in itself by using this fusion key data as new key data (step S1701). Here, the 64-bit initial value IV stored in the block storage unit 202 and the 64-bit key data initial value stored in the key data storage unit 210 are subjected to exclusive OR operation for each corresponding bit. To generate the first fusion key data and generate the partial key generation unit 20.
4, and the key data is updated using the first fusion key data as new key data (step S1701: the first time).

(4) to (12) The same as the first embodiment (step S204 to step S210: the first time, step S201, step S202: the second time).

(13) In step S1701, here, 6 generated at the time of processing the first ciphertext block.
The 4-bit chain block and the 64-bit key data generated during the processing of the first ciphertext block are subjected to an exclusive OR operation for each corresponding bit to generate the second fusion key data. To the partial key generation unit 204, and the key data is updated by using the second fusion key data as new key data (step S1701: second time).

(14)-(22) Same as the first embodiment (steps S204-S210: second time,
Step S201, Step S202: third time).

(23) In step S1701, here, 6 generated at the time of processing the second ciphertext block.
The 4-bit concatenation block and the 64-bit key data generated during the processing of the second ciphertext block are subjected to exclusive OR operation for each corresponding bit to generate third fused key data. To the partial key generation unit 204, and the key data is updated with the third fusion key data as new key data (step S1701: third time).

(24) to (34) The same as the first embodiment (steps S204 to S210: third time,
Step S201: Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the tenth embodiment stores the intermediate block and the fusion key block generated in the process of performing the cryptographic processing on the previous block as a chain block and a key block, and stores them in the subsequent cryptographic processing. At this time, the chain block is fused with the key block, and the chain block and the key block are updated every time the encryption process is performed.

In the tenth embodiment, the key data storage unit 110 is added to the data encryption device 10 of the first embodiment, and the key data storage unit 210 is added to the data decryption device 20 of the first embodiment. However, the key data storage unit 110 and the key data storage unit 210 may be added similarly to the other embodiments 2 to 9. (Embodiment 11) The eleventh embodiment of the present invention is based on the first embodiment and further based on the chain block to be stored.
The function of selecting one block from the output block, the block to be encrypted, the intermediate block and the like is added.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, its explanation is omitted.

(Structure of Data Encryption Device 10) FIG.
FIG. 23 is a diagram showing a detailed configuration of the data encryption device 10 shown in FIG. 1 in Embodiment 11 of the present invention.

The same components as those of the data encryption device 10 shown in FIG. 2 according to the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data encryption device 10 includes a block division unit 101, a block storage unit 102, and a key data fusion unit 1.
03, partial key generation unit 104, first to eighth encryption unit 105a
.About.105h, a fraction data processing unit 106, a block combining unit 107, and a block selecting unit 111.

The conventional encryption device 30 shown in FIG. 50 and FIG.
The relationship with the data encryption device 10 according to the eleventh embodiment of the present invention shown in FIG. 4 is similar to that of the first embodiment, and a block selection unit 111 is further added.

The block selection unit 111 selects one block from the plaintext block, each intermediate block, and the ciphertext block based on the chain block stored in the block storage unit 102, and transfers it to the block storage unit 102. . Specifically, for example, when the lower 3 bits of the chain block stored in the block storage unit 102 is “001”, the first intermediate block is selected, and similarly, “010” to “11” are selected.
In the case of "1", the second to seventh intermediate blocks are selected. Also, the lower 3 bits of the chain block are "00".
In the case of "0", the plaintext block is selected when the lower 4th bit is "0", and the ciphertext block is selected when the lower 4th bit is "1".

The block storage unit 102 uses the block selected by the block selection unit 111 when updating the chain block stored as a new chain block and processing the next block. Here, an initial value IV of 64 bits is stored in advance, this initial value IV is used when processing the first plaintext block, and a block selected based on the lower 4 bits of this initial value IV is newly chained. Update as a block. Next, the chain block updated when processing the first plaintext block is used when processing the second plaintext block, and the block selected based on the lower 4 bits of this chain block is updated as a new chain block. To do. Next, the chain block updated when processing the second plaintext block is used when processing the third plaintext block, and the block selected based on the lower 4 bits of this chain block is updated as a new chain block. To do. Finally, the chain block updated when processing the third plaintext block is used when processing the fractional plaintext data.

(Structure of Data Decoding Device 20) FIG.
FIG. 27 is a diagram showing a detailed configuration of the data decoding device 20 shown in FIG. 1 in Embodiment 11 of the present invention.

The same components as those of the data decoding apparatus 20 shown in FIG. 7 in the first embodiment are designated by the same reference numerals,
Descriptions of components having the same function are omitted.

This data decryption apparatus 20 is comprised of a block division unit 201, a block storage unit 202, and a key data fusion unit 2
03, partial key generation unit 204, first to eighth decryption unit 205a
.About.205h, a fraction data processing unit 206, a block combination unit 207, and a block selection unit 211.

The block selection unit 211 selects one block from the ciphertext block, each intermediate block, and the plaintext block based on the chain block stored in the block storage unit 202, and transfers it to the block storage unit 202. . Specifically, for example, when the lower 3 bits of the chain block stored in the block storage unit 202 are “001”, the first intermediate block is selected, and similarly, “010” to “11” are selected.
In the case of "1", the second to seventh intermediate blocks are selected. Also, the lower 3 bits of the chain block are "00".
In the case of "0", the plaintext block is selected when the lower 4th bit is "0", and the ciphertext block is selected when the lower 4th bit is "1".

The block storage unit 202 uses the block selected by the block selection unit 211 to update the chain block stored as a new chain block and process the next block. Here, a 64-bit initial value IV is stored in advance, and this initial value IV is used when processing the first ciphertext block.
The block selected based on the bits is updated as a new chain block. Next, the chain block updated at the time of processing the first ciphertext block is used when processing the second ciphertext block, and the block selected based on the lower 4 bits of this chain block is used as a new chain block. To update as. Next, the chain block updated at the time of processing the second ciphertext block is used at the time of processing the third ciphertext block, and the block selected based on the lower 4 bits of this chain block is used as a new chain block. To update as. Finally, the chain block updated when processing the third ciphertext block is used when processing the fraction ciphertext data.

<Operation> (Operation of Data Encryption Apparatus 10) FIG. 46 is a diagram showing a flow of encryption processing in the data encryption apparatus 10 according to the eleventh embodiment of the present invention.

The same steps as those of the operation of the data encryption device 10 shown in FIG. 9 in the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.

(1) to (8) (1) to (8) of the first embodiment
The same as (6) and (8) to (9) (step S10).
1 to step S106, step S108, step S
109: 1st time).

(9) The block selection unit 111 selects one block from the plaintext block, each intermediate block, and the ciphertext block based on the chain block stored in the block storage unit 102, and the block storage unit 102 is
The stored chain block is updated with the selected block as a new chain block (step S180).
1). Here, for example, the lower 3 bits of the initial value IV of the chain block stored in the block storage unit 102 are “0.
If it is “11”, the third intermediate block corresponding to the first plaintext block is selected, and the chain block is updated with the selected third intermediate block as a new chain block (step S1801: the first time).

(10) to (18) The same as the first embodiment (step S110: the first time, step S101 to step S101).
Step S106, Step S108, Step S10
9: 2nd time).

(19) In step S1801, here, for example, the lower 4 bits of the chain block generated and selected during the processing of the first plaintext block are "000."
If it is “0”, the second plaintext block is selected, and the chain block is updated with the selected second plaintext block as a new chain block (step S1801: second time).

(20)-(28) Same as the first embodiment (step S110: second time, step S101-).
Step S106, Step S108, Step S10
9: 3).

(29) In step S1801, here, for example, the lower 4 bits of the chain block generated and selected during the processing of the second plaintext block are "100".
If it is “0”, the third ciphertext block is selected, and the chain block is updated with the selected third ciphertext block as a new chain block (step S1801: third time).

(30)-(34) Same as the first embodiment (step S110: third time, step S101:
Fourth time, steps S111 to S113).

[Operation of Data Decoding Device 20] FIG.
FIG. 27 is a diagram showing a flow of encryption processing in the data decryption device 20 according to the eleventh embodiment of the present invention.

The operation of the data decryption apparatus 20 is an inverse conversion of the operation of the data encryption apparatus 10.

The steps common to the operation of data decoding apparatus 20 shown in FIG. 10 according to Embodiment 1 are assigned the same reference numerals and explanations thereof will be omitted.

(1) to (8) (1) to (8) of the first embodiment
The same as (6) and (8) to (9) (step S20).
1 to step S206, step S208, step S
209: 1st time).

(9) The block selection unit 211 selects one block from the ciphertext block, each intermediate block, and the plaintext block based on the chain block stored in the block storage unit 202, and the block storage unit 202 is
The stored chain block is updated with the selected block as a new chain block (step S190).
1). Here, for example, the lower 3 bits of the initial value IV of the chain block stored in the block storage unit 202 are “0.
11 ”, the third intermediate block corresponding to the first ciphertext block is selected, and the chain block is updated with the selected third intermediate block as a new chain block (step S1901: first time).

(10) to (18) The same as the first embodiment (step S210: first time, step S201 to step S201).
Step S206, Step S208, Step S20
9: 2nd time).

(19) In step S1901, here, for example, the lower 4 bits of the chain block generated and selected at the time of processing the first ciphertext block are “000”.
If it is “0”, the second plaintext block is selected, and the chain block is updated with the selected second plaintext block as a new chain block (step S1901: second time).

(20)-(28) Same as the first embodiment (step S210: second time, step S201-).
Step S206, Step S208, Step S20
9: 3).

(29) In step S1901, here, for example, the lower 4 bits of the chain block generated and selected at the time of processing the second ciphertext block are "100".
If it is “0”, the third ciphertext block is selected, and the chain block is updated with the selected third ciphertext block as a new chain block (step S1901: third time).

(30)-(34) Same as the first embodiment (step S210: third time, step S201:
Fourth time, steps S211 to S213).

The cryptographic processing apparatus according to the eleventh embodiment stores intermediate blocks and the like generated in the process of performing the cryptographic processing on the previous block as chained blocks, and merges them with key data at the time of subsequent cryptographic processing. Then, each time the cryptographic processing is performed, 1 is selected from a plurality of intermediate blocks based on the chain block
This block selects one block and updates the chain block.

In the eleventh embodiment, the block selecting unit 111 is added to the data encryption device 10 of the first embodiment, and the block selecting unit 211 is added to the data decrypting device 20 of the first embodiment. Other Embodiments 2 to 10
Similarly, the block selection unit 111 and the block selection unit 211
May be added. (Embodiment 12) Embodiment 12 of the present invention is a modification of the processing of the fraction data performed by the fraction data processing unit 106 in the data encryption device 10 of the first embodiment.

<Structure> Since the structure of the cryptographic communication system is the same as that of the first embodiment, the description thereof is omitted.

(Structure of Data Encryption Device 10) The structure of this data encryption device 10 is the same as that of the first embodiment.

Descriptions of components having the same functions as those of the data encryption device 10 shown in FIG. 2 in the first embodiment will be omitted.

FIG. 48 is a diagram showing a detailed structure of the fraction data processing unit 106 according to the twelfth embodiment of the present invention.

When the fractional data processing unit 106 receives the fractional plaintext data from the block dividing unit 101, the fractional data plaintext data is passed to the first to eighth encryption units 105a to 105h for encryption, and encrypted. Block storage unit 10
Based on the chain block stored in 2, the ciphertext block processed immediately before is subjected to cryptographic processing to generate a fraction data processing block, and based on this, the same number of bits as the fraction plaintext data to the fraction plaintext data. Is used to generate the fraction ciphertext data, and the data matching unit 106a, the fraction data fusion unit 106b, and the ciphertext block storage unit 106c.
including.

The ciphertext block storage unit 106c stores the ciphertext block processed immediately before the processing of the fraction data,
When processing the fractional data, the stored ciphertext block is passed to the first to eighth encryption units 105a to 105h. Here, the third ciphertext block is stored, and when the fraction plaintext data is processed, the stored third ciphertext block is passed to the first to eighth encryption units 105a to 105h.

Here, the first to eighth encryption units 105a to 105
5h generates the fraction data processing block from the ciphertext block passed from the ciphertext block storage unit 106c by performing the same cryptographic processing as that of the first embodiment. Here, a fraction data processing block is generated from the third ciphertext block.

The data matching unit 106a generates matching data having the same number of bits as the fractional plaintext data from the fractional data processing block generated by performing the cryptographic processing. Here, since the fractional plaintext data is 8 bits, matching data composed of, for example, the upper 8 bits of the fractional data processing block is generated.

The fraction data merging unit 106b merges the matching data with the fraction plaintext data. Here, the 8-bit matched data and the 8-bit fractional plaintext data are subjected to an exclusive OR operation for each corresponding bit to generate 8-bit fractional ciphertext data.

<Operation> (Operation of Data Encryption Device 10) The operation of this data encryption device 10 is the same as the operation of the data encryption device 10 of the first embodiment shown in FIG.

FIG. 49 is a diagram showing a flow of fraction data processing in the data encryption device 10 according to the twelfth embodiment of the present invention.

Here, as an example, 200-bit plaintext data is acquired, the initial value IV is stored in advance in the block storage unit 102, encryption of the first to third plaintext blocks has already been completed, and the third encryption is performed. It is assumed that the text block is stored in the ciphertext block storage unit 106c, and the remaining 8 bits are passed as fractional plaintext data from the block division unit 101 to the fractional data processing unit 106 according to the DES algorithm. .

(1) The key data fusion unit 103 fuses the chain block stored in the block storage unit 102 with the key data to generate fusion key data (step S200).
1). Here, the chained block generated at the time of processing the third plaintext block and the 64-bit key data are subjected to an exclusive OR operation for each corresponding bit to generate fused key data to generate a partial key. Hand it over to section 104.

(2) The partial key generation unit 104 generates as many partial keys as the number of encryption units from the fusion key data (step S2002). Here, eight 48-bit partial keys are generated from the 64-bit fusion key data.

(3) The first encryption unit 105a generates a first intermediate block from the immediately-processed ciphertext block stored in the ciphertext block storage unit 106c based on the first partial key (step). S2003). Here, the first intermediate block is generated from the third ciphertext block.

(4) Second to seventh encryption units 105b to 105
g is the first to the sixth based on the second to the seventh partial keys, respectively.
Second to seventh intermediate blocks are generated from the intermediate blocks (step S2004). Here, second to seventh intermediate blocks are generated from the first to sixth intermediate blocks corresponding to the third ciphertext block.

(5) The eighth encryption unit 105h generates a fraction data processing block from the seventh intermediate block based on the eighth partial key (step S2005). Here, the fraction data processing block is generated from the seventh intermediate block corresponding to the third ciphertext block.

(6) The data matching unit 106a generates matching data having the same number of bits as the fractional plaintext data from the fractional data processing block generated by performing the encryption processing (step S2006). Here, since the fractional plaintext data is 8 bits, matching data composed of, for example, the upper 8 bits of the fractional data processing block is generated.

(7) The fraction data merging unit 106b merges the matching data with the fraction plaintext data (step S200).
7). Here, the 8-bit matched data and the 8-bit fractional plaintext data are subjected to an exclusive OR operation for each corresponding bit to generate 8-bit fractional ciphertext data.

(8) The block combining unit 107 combines each ciphertext block generated by the eighth encryption unit 105h and the fraction ciphertext data generated by the fraction data processing unit 106 to generate ciphertext data (step). S2008). Here, the ciphertext blocks and the fraction ciphertext data respectively corresponding to the first to third plaintext blocks are combined to generate 200-bit ciphertext data.

Note that as the processing of the fraction data performed by the fraction data processing unit 106 in the data encryption apparatus 10 changes, the processing of the fraction data performed by the fraction data processing unit 206 in the data decryption apparatus 20 also changes. The contents of the change are that the previous ciphertext block is encrypted as a new input block based on the chain block to generate the fraction data processing block, and based on this, the same as the fraction plaintext data to the fraction plaintext data. This is for generating the fraction ciphertext data of the number of bits, and since the modification is similar to that of the fraction data processing unit 106, the description thereof is omitted.

Further, in the twelfth embodiment, the processing of the fraction data performed by the fraction data processing unit 106 and the processing of the fraction data performed by the fraction data processing unit 206 of the first embodiment are changed, but the other embodiments are different. The processing of the fraction data may be changed to 2 to 11 in the same manner.

Also, the original DES algorithm performs initial transposition prior to the encryption processing by each encryption processing unit, and performs final transposition after 16-stage encryption processing. For simplification, the initial transposition, the final transposition, and the cryptographic processing units of the 9th and subsequent stages are omitted.

The algorithm of each of the above embodiments is not limited to the DES algorithm, and any algorithm may be used. Of course, the number of stages of the cryptographic processing unit is not limited to eight and may be any number.

Also, in each of the above embodiments, the output of the fourth stage is mainly a new chain block, but of course, this is 4
The output is not limited to the output of the stage, and the output of any stage may be used.

Also, although cases have been described with the above embodiments where the chain block and the key data have the same number of bits, this does not necessarily have to be the same. In each of the embodiments in which a chain block and key data are merged, if the number of bits in the chain block and the key data is different, data having the same number of bits as the key data is merged from the block to be merged into the key data. Generate and fuse this with key data. For example, here, when the number of bits of the key data is larger than 64 bits, a block to be merged with the key data is generated by transposing the data to generate data having the same number of bits as the key data and the number of bits of the key data is 64. If the number of bits is smaller than the number of bits, data composed of upper bits corresponding to the number of bits of the key data is generated, and this is fused with the key data.

In each of the above embodiments, the plaintext data is input and encrypted by the data encryption device 10, and the ciphertext data is decrypted by the data decryption device 20. Since the encryption and the decryption in the data decryption device 20 have an inverse conversion relationship, they can be both an encryption device and a decryption device. Therefore,
In each of the above embodiments, each of the data decoding devices 2
0 may input and encrypt the plaintext data, and each of the data encryption devices 10 may decrypt the ciphertext data.

[0617]

The cryptographic processing apparatus according to the present invention is a cryptographic processing apparatus that performs cryptographic processing on the basis of input data to generate output data, and is used to exert the influence of previous data on subsequent data. A storage unit that stores the chain data and updates the chain data each time the encryption process is performed, a fusion unit that fuses the chain data stored in the storage unit with the input data to generate the fusion data, and a main unit based on the fusion data. And a main cryptographic processing unit that outputs intermediate data generated in the process of generating output data by performing cryptographic processing and generating the output data, and the storage unit newly stores the intermediate data output by the main cryptographic processing unit. It is characterized in that the chain data stored by itself as the chain data is updated and used for the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent cryptographic process, and the cryptographic process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

Further, the main encryption processing means carries out a plurality of stages of partial processing, and a plurality of stages of partial processing means that there are a plurality of stages of partial processing, and the data subjected to the partial processing at the first stage is further divided at the second stage. It means that processing is performed for the number of stages, the data that is partially processed at the final stage becomes the output data, the data obtained by performing the partial processing at each stage other than the final stage becomes each intermediate data, and the storage The means may be characterized in that one of the intermediate data output by the main cryptographic processing means is stored as new chained data.

As a result, the decryption person cannot know which intermediate data becomes the new chained data.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus or the processing time.

Further, the input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the key data to generate fused key data. The apparatus further comprises partial key generation means for generating partial keys corresponding to the number of stages of the main cryptographic processing means from the fusion key data and sending the partial keys to respective stages of the main cryptographic processing means for use in respective partial processing. The encryption processing means may be characterized by performing a plurality of steps of partial processing specified by the partial keys for the number of steps and generating output data from the data to be encrypted.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, merged with the key data in the subsequent cryptographic process, and the chained data is updated each time the cryptographic process is performed. , Each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, though the device scale and processing time are not increased so much. Decryption becomes difficult.

Further, the cryptographic processing device further divides the data to be encrypted into blocks each having a predetermined number of bits, and prepares one block of data to be encrypted in sequence for block preparation. And a fraction data processing means for generating output data having the same length as the fraction data based on the chain data from the fraction data less than the block unit generated when the block preparation means divides the data to be encrypted into blocks. And the cryptographic processing device may perform cryptographic processing in block units.

As a result, output data having the same length as the fraction data can be generated from the fraction data.
All input data and all output data have the same length.

Therefore, since the data length does not change even if the encryption process is performed, the data is easy to handle.

Also, the fraction data processing means merges the fraction concatenation data with the fraction data to generate fraction concatenation data having the same length as the fraction data from the concatenation data and merges the fraction concatenation data with the fraction data to obtain the same fraction data. It is also possible to include a fractional data fusion means for generating output data of length.

As a result, since the fractional chain data having the same length as the fractional data can be generated from the chained data, the fractional chain data can be fused with the fractional data.

Therefore, the data length does not change even if the encryption process is performed, and the data is easy to handle.

The fraction data processing means stores the block that has been encrypted by the main encryption processing means, and stores the block stored when the fraction data occurs as new encrypted data. The main cryptographic processing means includes block storage means for passing to the main cryptographic processing means, and the main cryptographic processing means generates output data from the block passed from the block storage means and passes it to the fractional data processing means as a fractional data processing block. The processing means further includes
Data matching means for generating matching data of the same length as the fractional data from the fractional data processing block, and fractional data fusing means for fusing the matching data to the fractional data to generate output data of the same length as the fractional data. It may be characterized by including and.

As a result, the encryption process applied to the fractional data is comparable to the encryption process applied to each block.

Therefore, the safety can be improved even though the data length does not change.

The fusion in the fusion means and the fraction data fusion means may be a calculation of an exclusive OR for each corresponding bit.

As a result, the exclusive OR for each bit of the same data is calculated to obtain the result of the same data length, and the encryption and decryption can be performed in the same process.

[0636] Further, the storage means stores the initial value of the chained data in advance and is used when processing the first block, and the key data and the initial value of the chained data are devices for encrypting certain encrypted data. The same key data used by the device and the device used by the device that receives and decrypts the output of the device for encryption, and is private, and the device for encryption and the device for decryption have the same key data. Further, when the same initial value of the chain data is used, the encryption process performed by the decryption device is always an inverse conversion of the encryption process performed by the encryption device.

With this, when the first block is processed, the initial value of the chain data can be used, and when the same key data for encryption and decryption and the initial value of the chain data are used, the decryption can be performed. Is an inverse conversion of encryption, so that only the one having correct key data and chain data can decrypt the data.

Further, since the correct key data and the chain data are not disclosed, the decryption becomes difficult as compared with the case where only the key data is not disclosed, although the device scale and the processing time are not increased so much. .

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus, the processing time, and the like.

Further, the cryptographic processing device further comprises key data storage means for storing the key data and updating the key data each time the cryptographic processing is performed, and the fusion means stores the chained data stored in the storage means. Key data stored in the key data storage means and used by the key data storage means to store the initial value of the key data and process the first data. Can be updated and subjected to the next cryptographic processing.

As a result, since the key data can be updated, decryption becomes more difficult than when the key data is not updated.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus or the processing time.

Further, the storage means selects one from among the intermediate data, the input data, the fusion data and the output data output by the main cryptographic processing means based on the chained data stored therein, and newly selects the new data. It is also possible to update the chain data stored by itself as the new chain data and use it for the next encryption processing.

As a result, which data becomes the new chained data is determined based on the chained data, so that it becomes more difficult to decipher as compared with the case where the fixed intermediate data becomes the new chained data.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus or the processing time.

Further, the input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the data to be encrypted to generate fused data to be encrypted. The main cipher processing means may perform the main cipher processing specified by the key data to generate output data from the fused cipher processed data.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, fused to the data to be encrypted in the subsequent cryptographic process, and the chained data is updated each time the cryptographic process is performed. Therefore, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device scale and processing time are not increased so much. Regardless, it becomes difficult to decipher.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data A storage unit that stores the chain data used to generate the data and updates the chain data every time the cryptographic process is performed, and a main cryptographic process specified by the key data to generate the cryptographic process data from the encrypted data and perform the cryptographic process. The storage means includes a main encryption processing means for outputting intermediate data generated in the process of generating data, and a fusion means for fusing the chained data stored in the storage means with the encryption processing data to generate output data. Is characterized in that the intermediate data output by the main cryptographic processing means is used as new chained data to update the chained data stored in the chained data and is used for the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the cryptographic processing is stored as chained data, merged with the cryptographically processed data in the subsequent cryptographic processing, and the chained data is updated each time the cryptographic processing is performed. Therefore, each output data depends on all the data before itself,
The statistical characteristics of plaintext are disturbed by each chain of data,
It is difficult to decipher even though the device scale and processing time have not been increased so much. Also, the cryptanalyst is
Even if I could get a pair of ciphertext and plaintext,
It is virtually impossible to obtain the chained data used for cryptographic processing, and the initial value of the chained data generation algorithm and chained data is not disclosed, so it is more difficult to decipher by the known plaintext attack. It is also difficult to decipher by brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing on the basis of input data to generate output data, and is a chained data used to exert the influence of previous data on subsequent data. Storing means for updating the chained data each time encryption processing is performed, fusion means for fusing the chained data stored in the storage means with all or part of the input data to generate fused data, and A first main cryptographic processing means for performing a first main cryptographic processing based on the fused data to generate intermediate data; and a second main cryptographic processing means for performing a second main cryptographic processing on the basis of the fused data to generate output data. The means is characterized in that the intermediate data generated by the first main cryptographic processing means is used as new chained data to update the chained data stored in itself and to be used for the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent encryption process, and the encryption process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

Further, the input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the key data to generate fused key data. The apparatus further includes partial key generation means for generating partial keys of the first main cryptographic processing means and the second main cryptographic processing means from the fusion key data and using them for the respective main cryptographic processing. The processing means performs the first main encryption processing specified by the partial key to generate intermediate data from the data to be encrypted, and the second main encryption processing means performs the second main encryption processing specified by the partial key. The output data may be generated from the data to be encrypted.

As a result, the intermediate data generated in the process of performing the cryptographic processing is stored as chained data, merged with the key data in the subsequent cryptographic processing, and the chained data is updated each time the cryptographic processing is performed. , Each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, though the device scale and processing time are not increased so much. Decryption becomes difficult.

Further, the cryptographic processing apparatus further divides the data to be encrypted into blocks each having a predetermined number of bits, and prepares one block of data to be encrypted in order to be processed next in block preparation. And a fraction data processing means for generating output data having the same length as the fraction data based on the chain data from the fraction data less than the block unit generated when the block preparation means divides the data to be encrypted into blocks. And the cryptographic processing device may perform cryptographic processing in block units.

As a result, since output data having the same length as the fraction data can be generated from the fraction data,
All input data and all output data have the same length.

Therefore, since the data length does not change even if the encryption process is performed, the data is easy to handle.

Also, the fraction data processing means merges the fraction concatenation data with the fraction data to generate fraction concatenation data having the same length as the fraction data from the concatenation data, and merges the fraction concatenation data with the fraction data to obtain the same fraction data. It is also possible to include a fractional data fusion means for generating output data of length.

As a result, since the fractional chain data having the same length as the fractional data can be generated from the chained data, the fractional chain data can be fused with the fractional data.

Therefore, since the data length does not change even if the encryption process is performed, it is easy to handle the data.

Also, the fraction data processing means stores the block that has been subjected to the encryption processing by the second main encryption processing means, and stores the block stored when the fraction data has been generated as new encrypted data. As block data processing means for generating output data from the block transferred from the block storage means and using this as a fraction data processing block. The fraction data processing means further generates data matching means for generating matching data having the same length as the fraction data from the fraction data processing block, and merges the matching data with the fraction data to obtain the same fraction data. It is also possible to include a fractional data fusion means for generating output data of length.

As a result, the cryptographic process applied to the fractional data is comparable to the cryptographic process applied to each block.

Therefore, the security can be improved even though the data length does not change.

Further, the cryptographic processing device further comprises key data storage means for storing the key data and updating the key data each time the cryptographic processing is performed, and the fusion means stores the chain data stored in the storage means. Key data stored in the key data storage means and used by the key data storage means to store the initial value of the key data and process the first data. Can be updated and subjected to the next cryptographic processing.

Since this makes it possible to update the key data, it becomes more difficult to decipher as compared with the case where the key data is not updated.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus, the processing time and the like.

The input data includes key data and data to be encrypted, and the fusing means fuses the chained data stored in the storage means with the data to be encrypted to generate fused data to be encrypted. , The first main cryptographic processing means performs a first main cryptographic processing specified by key data to generate intermediate data from the fused encrypted data, and
The main encryption processing means may be characterized by performing the second main encryption processing specified by the key data to generate output data from the fused data to be encrypted.

As a result, the intermediate data generated in the process of performing the cryptographic processing is stored as chained data, merged with the data to be encrypted in the subsequent cryptographic processing, and the chained data is updated each time the cryptographic processing is performed. Therefore, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device scale and processing time are not increased so much. Regardless, it becomes difficult to decipher.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of the previous data on the subsequent data. Storage means for storing the chained data used for exerting and updating the chained data every time a cryptographic process is performed, and fusion means for merging the chained data stored in the storage means with the key data to generate fused key data, The partial key generation means for generating a partial key from the fusion key data, the first main cryptographic processing means for performing the first main cryptographic processing specified by the partial key to generate output data from the data to be encrypted, and the partial key A second main cryptographic processing means for performing the specified second main cryptographic processing to generate intermediate data from the output data, wherein the partial key generation means uses the fusion key data for the first
The partial keys of the main cryptographic processing means and the second main cryptographic processing means are respectively generated and subjected to the respective main cryptographic processing, and the storage means itself stores the intermediate data generated by the second main cryptographic processing means as new chain data. It is characterized in that the chain data to be updated is updated and subjected to the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, merged with the key data in the subsequent cryptographic process, and the chained data is updated each time the cryptographic process is performed. , Each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, though the device scale and processing time are not increased so much. Decryption becomes difficult. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

A cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data Storage means for storing the chained data used for exerting the data and updating the chained data every time the cryptographic processing is performed; and a first main cryptographic processing specified by the key data to generate intermediate data from the data to be encrypted. 1
The main cryptographic processing means, the second main cryptographic processing means for performing the second main cryptographic processing specified by the key data to generate the cryptographically processed data from the data to be encrypted, and the chained data stored in the storage means as the cryptographically processed data. And a fusion means for generating output data by fusing the intermediate data generated by the first main encryption processing means as new chain data, and the storage means updates the chain data stored by itself and supplies it to the next encryption processing. It is characterized by

As a result, the intermediate data generated in the process of performing the cryptographic processing is stored as chained data, merged with the cryptographically processed data in the subsequent cryptographic processing, and the chained data is updated each time the cryptographic processing is performed. Therefore, each output data depends on all the data before itself,
The statistical characteristics of plaintext are disturbed by each chain of data,
It is difficult to decipher even though the device scale and processing time have not been increased so much. Also, the cryptanalyst is
Even if I could get a pair of ciphertext and plaintext,
It is virtually impossible to obtain the chained data used for cryptographic processing, and the initial value of the chained data generation algorithm and chained data is not disclosed, so it is more difficult to decipher by the known plaintext attack. It is also difficult to decipher by brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

A cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data A storage unit that stores chain data used for exerting the data and updates the chain data every time the cryptographic process is performed, and a first main cryptographic process specified by the key data to generate the cryptographic process data from the chain data. A main cryptographic processing means, a fusion means for fusing the cryptographically processed data with the to-be-encrypted data to generate intermediate data, and a second cryptographic processing specified by the key data to generate output data from the intermediate data. The storage means is characterized by including main encryption processing means, and the storage means updates the chain data stored by itself as intermediate data as new chain data for use in the next encryption processing.

Thus, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and the cryptographic process is performed in the subsequent cryptographic process to generate the cryptographically processed data, which is fused to the data to be encrypted. Since the chain data is updated every time the cryptographic process is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chain data, and the device scale It is difficult to decipher even though the processing time and the like have not been increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chain data are not disclosed, "known plaintext attack"
It becomes even more difficult to decipher by brute force, and brute force is also difficult.

Therefore, safety can be improved without significantly increasing the scale of the apparatus, the processing time, and the like.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of the previous data on the subsequent data. A storage unit that stores chain data used for exerting the data and updates the chain data every time the cryptographic process is performed, and a first main cryptographic process specified by the key data to generate the cryptographic process data from the chain data. Main cryptographic processing means, second main cryptographic processing means for performing second main cryptographic processing specified by key data to generate intermediate data from data to be encrypted, and cryptographically processed data fused to intermediate data to output data The storage means is characterized in that the storage means updates the chained data stored therein by using the intermediate data as new chained data, and uses it for the next encryption processing.

Thus, the intermediate data generated in the process of performing the cryptographic processing is stored as chained data, and the cryptographic processing is performed in the subsequent cryptographic processing to generate the cryptographically processed data, which is fused to the intermediate data. Since the chained data is updated each time processing is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing Even if the time is not increased so much, it becomes difficult to decipher. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, safety can be improved without significantly increasing the scale of the apparatus, the processing time, and the like.

A cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data A storage unit that stores chain data used for exerting the data and updates the chain data every time the cryptographic process is performed, and a first main cryptographic process specified by the key data to generate intermediate data from the chain data. Cryptographic processing means, fusing means for fusing intermediate data with encrypted data to generate fused data, and second main cryptographic processing for performing second main cryptographic processing to generate output data from the fused data. The storage means is characterized in that the storage means updates the chained data stored therein by using the intermediate data as new chained data for use in the next cryptographic processing.

Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and the encryption process is performed in the subsequent encryption process to generate the intermediate data, which is fused with the data to be encrypted. Since the chained data is updated every time the cryptographic process is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device scale and Even if the processing time is not increased so much, the decryption becomes difficult. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data A storage unit that stores chain data used for exerting the data and updates the chain data every time the cryptographic process is performed, and a first main cryptographic process specified by the key data to generate intermediate data from the chain data. Cryptographic processing means, second main cryptographic processing means for performing the second main cryptographic processing specified by the key data to generate cryptographically processed data from the data to be encrypted, and output data obtained by fusing the intermediate data with the cryptographically processed data. The storage means is characterized in that the storage means updates the chained data stored therein by using the intermediate data as new chained data, and uses it for the next encryption processing.

Thus, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and the cryptographic process is performed in the subsequent cryptographic process to generate the intermediate data, which is fused with the cryptographically processed data. Since the chained data is updated each time processing is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing Even if the time is not increased so much, it becomes difficult to decipher. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force. Therefore, the safety can be improved without significantly increasing the scale of the device, the processing time, and the like.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing on the basis of input data to generate output data, and is a chained data used to exert the influence of previous data on subsequent data. Storing means for updating the chained data each time encryption processing is performed, converting means for generating the converted data by subjecting the chained data stored in the storing means to predetermined conversion, and the converted data. Fusing means for fusing the input data with the input data,
Main encryption processing means for performing main encryption processing based on the fused data to generate output data and outputting intermediate data generated in the process of generating output data, and the storage means includes intermediate data and input data. , The converted data or the output data is used as new chained data to update the chained data stored in the chained data, and the chained data is used for the next encryption process.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, predetermined conversion is performed to generate the transformed data to generate the key data or the encrypted data. It merges with input data such as processed data and updates the chained data each time encryption processing is performed, so each output data depends on all the data before itself, and the statistical characteristics of plaintext are It is disturbed by each chained data, and it becomes difficult to decipher even though the device scale and processing time are not increased so much.
Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The predetermined conversion performed by the conversion means may be bit replacement or bit conversion.

As a result, since a simple predetermined conversion such as bit replacement or bit conversion is not disclosed, it becomes difficult to decipher even though the device scale and processing time are not increased so much.

[0692] Also, the input data includes key data and data to be encrypted, the fusion means fuses the converted data to key data to generate fusion key data, and the main encryption processing means uses the fusion key data. Subject to the main encryption process to generate output data from the encrypted data, and the storage means updates the chained data stored by itself as new chained data of the intermediate data, the encrypted data or the output data. It can also be characterized in that it is subjected to the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, a predetermined conversion is performed to generate the converted data, which is fused with the key data. Since the chained data is updated each time processing is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing Even if the time is not increased so much, it becomes difficult to decipher.

Further, the cryptographic processing apparatus further divides the data to be encrypted into blocks each having a predetermined number of bits, and prepares one block of data to be processed in sequence for block preparation. And a fraction data processing means for generating output data having the same length as the fraction data based on the chain data from the fraction data less than the block unit generated when the block preparation means divides the data to be encrypted into blocks. And the cryptographic processing device may perform cryptographic processing in block units.

Therefore, the data length does not change even if the encryption process is performed, and the data is easy to handle.

As a result, since it is possible to generate output data having the same length as the fraction data from the fraction data,
All input data and all output data have the same length.

Also, the fraction data processing means merges the fraction concatenation data with the fraction data to generate fraction concatenation data having the same length as the fraction data from the concatenation data, and merges the fraction concatenation data into the fraction data. It is also possible to include a fractional data fusion means for generating output data of length.

As a result, since the fractional chain data having the same length as the fractional data can be generated from the chained data, the fractional chain data can be fused with the fractional data.

Therefore, the data length does not change even if the encryption process is performed, and the data is easy to handle.

The fraction data processing means merges the matching data with the fraction data to generate the matching data having the same length as the fraction data from the converted data, and merges the matching data with the fraction data to obtain the same length as the fraction data. It is also possible to include fractional data fusion means for generating the output data of

As a result, the encryption process applied to the fractional data is comparable to the encryption process applied to each block. Therefore, the safety can be improved even though the data length does not change.

Further, the encryption processing device further comprises key data storage means for storing the key data and updating the key data each time the encryption processing is performed, and the fusion means stores the converted data in the key data storage means. Fused with the key data to be stored,
The key data storage means may be characterized by storing an initial value of the key data and using it when processing the first data to update the key data stored by itself as the new key data.

As a result, the key data can be updated, making decryption more difficult than when the key data is not updated.

Therefore, the safety can be further improved without significantly increasing the scale of the apparatus or the processing time.

Also, the input data includes key data and data to be encrypted, and the fusing means fuses the converted data to the data to be encrypted to generate fused data to be encrypted, and the main encryption processing means. Performs the main cryptographic processing specified by the key data to generate output data from the fused encrypted data, and the storage means creates a new chain of intermediate data, encrypted data, fused encrypted data or output data. It may be characterized in that the chain data stored by itself as data is updated and provided for the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, predetermined conversion is performed to generate the converted data, which is fused with the data to be encrypted. Since the chain data is updated every time the cryptographic process is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chain data, and the device scale It is difficult to decipher even though the processing time and the like have not been increased so much.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data Storage means for storing the chain data used for exerting the data and updating the chain data each time the cryptographic processing is performed, and the chain data stored by the storage means is subjected to predetermined conversion to generate converted data. Conversion means, and main cipher processing means for performing main cipher processing specified by the key data to generate cipher processed data from the data to be ciphered and outputting intermediate data generated in the process of generating cipher processed data And a fusion unit that fuses the converted data with the encrypted data to generate output data, and the storage unit stores the intermediate data, the encrypted data,
It is characterized in that the encrypted data or output data is used as new chained data to update the chained data stored by itself and to be used for the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, predetermined conversion is performed to generate the converted data, which is fused with the cryptographic process data. Since the chained data is updated every time the cryptographic process is performed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device scale and Even if the processing time is not increased so much, the decryption becomes difficult. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data Storage means for storing the chain data used for exerting the data and updating the chain data each time the cryptographic processing is performed, and the chain data stored by the storage means is subjected to predetermined conversion to generate converted data. Transforming means, main cryptographic processing means for performing main cryptographic processing specified by key data to generate cryptographically processed data from the transformed data, and fusing means for merging cryptographically processed data with encrypted data to generate output data. The storage means is characterized in that the storage means updates the chained data stored in itself as new chained data and uses it for the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, a predetermined conversion is performed in the subsequent cryptographic process to generate the transformed data, and the cryptographic process is performed to perform the encrypted It merges with the processed data and updates the chained data each time the encryption process is applied, so each output data depends on all the data before itself, and the statistical characteristics of plaintext depend on each chained data. It is disturbed and it is difficult to decipher even though the device scale and processing time have not been increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data Storage means for storing the chain data used for exerting the data and updating the chain data each time the cryptographic processing is performed, and the chain data stored by the storage means is subjected to predetermined conversion to generate converted data. Transforming means, main cryptographic processing means for performing main cryptographic processing specified by key data to generate cryptographically processed data from the transformed data, and fusing means for merging cryptographically processed data with encrypted data to generate output data. The storage means is characterized in that the storage means updates the chained data stored by itself as new chained data to be subjected to the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, a predetermined conversion is performed to generate the transformed data, and the cryptographic process is performed to perform the encryption. It merges with the processed data and updates the chained data each time the encryption process is applied, so each output data depends on all the data before itself, and the statistical characteristics of plaintext depend on each chained data. It is disturbed and it is difficult to decipher even though the device scale and processing time have not been increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without greatly increasing the scale of the apparatus, the processing time, and the like.

A cryptographic processing device according to the present invention is a cryptographic processing device that performs cryptographic processing specified by key data to generate output data from data to be encrypted, and the influence of previous data on subsequent data Storage means for storing the chain data used for exerting the data and updating the chain data each time the cryptographic processing is performed, and the chain data stored by the storage means is subjected to predetermined conversion to generate converted data. A fusion unit that includes a conversion unit and a main encryption processing unit that performs the main encryption process specified by the key data to generate intermediate data from the converted data, and combines the intermediate data with the data to be encrypted to generate output data. The storage means is characterized in that the storage means updates the chained data stored therein by using the intermediate data as new chained data and provides the chained data for the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, a predetermined conversion is performed in the subsequent cryptographic process to generate the converted data, and the cryptographic process is performed to perform the encrypted data. It merges with the processed data and updates the chained data each time the encryption process is applied, so each output data depends on all the data before itself, and the statistical characteristics of plaintext depend on each chained data. It is disturbed and it is difficult to decipher even though the device scale and processing time have not been increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing method according to the present invention is a cryptographic processing method for performing cryptographic processing on the basis of input data to generate output data, since the storage means exerts the influence of the previous data on the subsequent data. Stores the chain data used,
A fusion step of fusing the concatenation data stored in the storage means with the input data to generate the fusion data, and a main encryption process based on the fusion data to generate the output data and the generation of the output data. A main cryptographic processing step of outputting intermediate data to be generated, a storage step of updating the chained data stored in the storage means as the new chained data of the intermediate data output in the main cryptographic processing step, and causing the chained data to be subjected to the next cryptographic processing. It is characterized by including.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent cryptographic process, and the cryptographic process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus, the processing time, and the like.

The cryptographic processing method according to the present invention is a cryptographic processing method for performing cryptographic processing on the basis of input data to generate output data, since the storage means exerts the influence of the previous data on the subsequent data. Stores the chain data used,
A merging step of merging the chained data stored in the storage means with all or a part of the input data to generate fused data; and a first main unit that performs a first main encryption process based on the fused data to generate intermediate data. The cryptographic processing step, the second main cryptographic processing step for performing the second main cryptographic processing based on the fused data to generate output data, and the intermediate data generated in the first main cryptographic processing step are stored as new chained data. And a storage step of updating the chain data stored in the means and subjecting the chain data to the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent encryption process, and the encryption process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The cryptographic processing method according to the present invention is a cryptographic processing method in which cryptographic processing is performed on input data to generate output data, and the storage means exerts the influence of the previous data on the subsequent data. Stores the chain data used,
A conversion step of generating a conversion data by applying a predetermined conversion to the chain data stored in the storage means, a fusion step of fusing the conversion data to the input data to generate fusion data, and a fusion data The main encryption processing step of performing the main encryption processing based on the above to generate the output data and outputting the intermediate data generated in the process until the output data is generated, and the intermediate data, the input data, the conversion data or the output data are newly added. A storage step of updating the chain data stored in the storage means as the chain data and providing the chain data for the next encryption processing.

As a result, the intermediate data generated in the process of performing the cryptographic process is stored as chained data, and in the subsequent cryptographic process, predetermined conversion is performed to generate the converted data to generate the key data or the encrypted data. It merges with input data such as processed data and updates the chained data each time encryption processing is performed, so each output data depends on all the data before itself, and the statistical characteristics of plaintext are It is disturbed by each chained data, and it becomes difficult to decipher even though the device scale and processing time are not increased so much.
Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The computer-readable storage medium storing the cryptographic processing method according to the present invention is a computer-readable storage medium storing a cryptographic processing method for performing cryptographic processing on input data to generate output data. And storing the chained data used by the storage means to influence the subsequent data on the subsequent data, and fusing the chained data stored in the storage means with the input data to generate fused data. , A main cryptographic processing step of performing main cryptographic processing based on the fused data to generate output data, and outputting intermediate data generated in the process of generating the output data, and intermediate data output in the main cryptographic processing step As a new chain data, the chain data stored in the storage means is updated and the storage step is provided for the next encryption processing. It is characterized in.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent encryption process, and the encryption process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus, the processing time, and the like.

A computer-readable storage medium that stores the cryptographic processing method according to the present invention is a computer-readable storage medium that stores a cryptographic processing method for performing cryptographic processing on input data to generate output data. The storage means stores the chain data used for exerting the influence of the previous data on the subsequent data in the storage means, and the chain data stored in the storage means is fused to all or part of the input data. A fusion step for generating fusion data,
A first main cryptographic processing step of performing first main cryptographic processing based on the fused data to generate intermediate data, and a second main cryptographic processing step of performing second main cryptographic processing based on the fused data to generate output data And a storage step of updating the chained data stored in the storage means as the new chained data using the intermediate data generated by the first main cryptographic processing step and providing the chained data for the next cryptographic processing.

As a result, the intermediate data generated in the process of performing the encryption process is stored as chained data, and is fused to the key data or the input data such as the data to be encrypted in the subsequent encryption process, and the encryption process is performed. Since the chained data is updated every time the data is processed, each output data depends on all the data before itself, and the statistical characteristics of plaintext are disturbed by each chained data, and the device size and processing time are disturbed. It is difficult to decipher even though it has not increased so much. Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the initial values of algorithms and chained data are not disclosed, it is even more difficult to decipher by "known plaintext attack" and brute force.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

The computer-readable storage medium storing the cryptographic processing method according to the present invention is a computer-readable storage medium storing a cryptographic processing method for performing cryptographic processing on input data to generate output data. Then, the storage means stores the chain data used for exerting the influence of the previous data on the subsequent data in the storage means, and the chain data stored in the storage means is subjected to a predetermined conversion. A conversion step for generating conversion data,
The fusion step of fusing the converted data with the input data to generate the fusion data, and the intermediate data generated in the process of generating the output data by performing the main encryption processing based on the fusion data Main encryption processing step and a storage step of updating the chain data stored in the storage means as intermediate data, input data, converted data, or output data as new chain data for use in the next encryption processing. And

Thus, the intermediate data generated in the process of performing the encryption process is stored as chained data, and in the subsequent encryption process, predetermined conversion is performed to generate the converted data to generate the key data or the encrypted data. It merges with input data such as processed data and updates the chained data each time encryption processing is performed, so each output data depends on all the data before itself, and the statistical characteristics of plaintext are It is disturbed by each chained data, and it becomes difficult to decipher even though the device scale and processing time are not increased so much.
Moreover, even if the cryptanalyst can obtain the pair of ciphertext and plaintext, it is virtually impossible to obtain the chained data used for the cryptographic processing, and further, the chained data is generated. Since the algorithm, the initial value of the chained data, and the predetermined conversion are not disclosed, the decryption by the "known plaintext attack" becomes more difficult, and the decryption by the brute force is also difficult.

Therefore, the safety can be improved without significantly increasing the scale of the apparatus or the processing time.

[Brief description of drawings]

FIG. 1 is a diagram showing a configuration of a cryptographic communication system according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a detailed configuration of a data encryption device 10 according to Embodiment 1 of the present invention.

FIG. 3 is a diagram showing a detailed configuration of first to eighth encryption units 105a to 105h.

FIG. 4 is a diagram showing a detailed configuration of a portion for calculating a function “f”.

FIG. 5 is a diagram showing a substitution table of selection functions S1 to S8.

FIG. 6 is a diagram showing a detailed configuration of a fraction data processing unit 106 according to the first embodiment of the present invention.

FIG. 7 is a diagram showing a detailed configuration of a data decoding device 20 according to the first embodiment of the present invention.

FIG. 8 is a diagram showing a detailed configuration of a fraction data processing unit 206 according to the first embodiment of the present invention.

FIG. 9 is a data encryption device 10 according to the first embodiment of the present invention.
6 is a diagram showing a flow of an encryption process in FIG.

FIG. 10 is a data decoding device 2 according to the first embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 11 is a diagram showing a detailed configuration of a data encryption device according to a second exemplary embodiment of the present invention.

FIG. 12 is a diagram showing a detailed configuration of a data decoding device 20 according to the second embodiment of the present invention.

FIG. 13 is a data encryption device 1 according to the second embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 14 is a data decoding device 2 according to the second embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 15 is a diagram showing a detailed configuration of a data encryption device according to a third embodiment of the present invention.

FIG. 16 is a diagram showing a detailed configuration of a data decoding device 20 according to the third embodiment of the present invention.

FIG. 17 is a data encryption device 1 according to the third embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 18 is a data decoding device 2 according to the third embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 19 is a diagram showing a detailed configuration of a data encryption device according to a fourth embodiment of the present invention.

FIG. 20 is a diagram showing a detailed configuration of a data decoding device 20 according to a fourth embodiment of the present invention.

FIG. 21 is a data encryption device 1 according to the fourth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 22 is a data decoding device 2 according to the fourth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 23 is a diagram showing a detailed configuration of a data encryption device according to a fifth embodiment of the present invention.

FIG. 24 is a diagram showing a detailed configuration of a data decoding device 20 according to the fifth embodiment of the present invention.

FIG. 25 is a data encryption device 1 according to the fifth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 26 is a data decoding device 2 according to the fifth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 27 is a diagram showing a detailed configuration of the data encryption device 10 according to the sixth embodiment of the present invention.

FIG. 28 is a diagram showing a detailed configuration of a data decoding device 20 according to the sixth embodiment of the present invention.

FIG. 29 is a data encryption device 1 according to the sixth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 30 is a data decoding device 2 according to the sixth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 31 is a diagram showing a detailed configuration of the data encryption device according to the seventh embodiment of the present invention.

FIG. 32 is a diagram showing a detailed configuration of a data decoding device 20 according to the seventh embodiment of the present invention.

FIG. 33 is a data encryption device 1 according to the seventh embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 34 is a data decoding device 2 according to the seventh embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 35 is a diagram showing a detailed configuration of a data encryption device according to an eighth embodiment of the present invention.

FIG. 36 is a diagram showing a detailed configuration of a data decoding device 20 according to the eighth embodiment of the present invention.

FIG. 37 is a data encryption device 1 according to the eighth embodiment of the present invention.
FIG. 6 is a diagram showing a flow of encryption processing in 0.

FIG. 38 is a diagram showing a detailed configuration of the data encryption device according to the ninth embodiment of the present invention.

FIG. 39 is a diagram showing a detailed configuration of a data decoding device 20 according to the ninth embodiment of the present invention.

FIG. 40 is a diagram showing a detailed configuration of a data encryption device according to the tenth embodiment of the present invention.

FIG. 41 is a diagram showing a detailed configuration of the data decoding device 20 according to the tenth embodiment of the present invention.

FIG. 42 is a diagram showing the flow of encryption processing in the data encryption device 10 according to the tenth embodiment of the present invention.

FIG. 43 is a diagram showing the flow of encryption processing in the data decryption device 20 according to the tenth embodiment of the present invention.

FIG. 44 is a diagram showing a detailed configuration of the data encryption device according to the eleventh embodiment of the present invention.

FIG. 45 is a diagram showing a detailed configuration of a data decoding device 20 according to the eleventh embodiment of the present invention.

FIG. 46 is a diagram showing a flow of encryption processing in the data encryption device according to the eleventh embodiment of the present invention.

FIG. 47 is a diagram showing the flow of encryption processing in the data decryption device 20 according to the eleventh embodiment of the present invention.

FIG. 48 is a diagram showing a detailed configuration of a fraction data processing unit 106 according to the twelfth embodiment of the present invention.

FIG. 49 is a diagram showing a flow of fractional data processing in the data encryption device 10 according to the twelfth embodiment of the present invention.

FIG. 50 is a diagram showing a configuration of an encryption device 30 that realizes a CBC mode.

[Explanation of symbols]

10 Data encryption device 11 Transmitter 101 block division unit 102 block storage 103 Key data fusion unit 104 partial key generation unit 105a to 105h encryption unit 106 Fraction data processing unit 106a data matching unit 106b Fractional data fusion unit 106c Ciphertext block storage unit 107 block joint 108 Block fusion department 109 block converter 110 key data storage 111 Block selection section 20 Data Decoding Device 21 Receiver 201 Block division part 202 block storage unit 203 Key data fusion unit 204 partial key generator 205a to 205h Decoding unit 205i-205p encryption unit 206 Fraction data processing unit 206a Data matching unit 206b Fractional data fusion unit 207 Block combiner 208 Block fusion department 209 block converter 210 key data storage 211 Block selection section 30 encryption device 301 Exclusive OR 302 Data encryption unit 303 register

─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Seikatsu Maruyama 1006 Kadoma, Kadoma City, Osaka Prefecture Matsushita Electric Industrial Co., Ltd. (56) Reference JP-A-52-130504 (JP, A) JP-A-2 -44390 (JP, A) JP-B-8-12537 (JP, B2) D.P. W. Davies, W.C. L. Price, Translated by Tadahiro Kamizono, Network Security, Nikkei McGraw-Hill, December 5, 1985, p. 85-102 E. Biham, Cryptanalysis of Multiple Modes of Operation, Right Notes in Computer Science, Vol. 917, p. 278-292 E. Biham, On Modes of Operation, Lecture Notes in Computer Science, Vol. 809, p. 116-120 E. Biham, L .; R. Knudsen, Cryptanalysis of the ANSI X9.52 CB CM Mode, Lecture Notes in Computer Science, Vol. 1403, p. 100-111 (58) Fields surveyed (Int.Cl. ⁷ , DB name) G09C 1/00 610 JISST file (JOIS)

Claims (18)

(57) [Claims] 1. An encryption processing device for generating output data by performing encryption processing in block units on the basis of input data including key data and data to be encrypted, the influence of previous data. Storing the chained data used to affect the subsequent data, and updating the chained data each time encryption processing is performed, and the chained data stored in the storage means is fused with the key data to create a fusion key. There is a fusion means for generating data and a plurality of stages of partial processing, and data that has been partially processed in the first stage is further subjected to partial processing in the second stage and this is performed for the number of stages to generate encrypted processed data. Encryption processing means, and partial key generation means for generating from the fusion key data the partial keys for the number of stages of the main encryption processing means, and sending the partial keys to each stage of the main encryption processing means for use in each partial processing. And the main encryption processing The means performs a plurality of stages of partial processing specified by the number of stages of partial keys on the encrypted data, and the data obtained by performing the partial processing at each stage other than the final stage becomes each intermediate data, The means updates one of the intermediate data obtained by the main encryption processing means as new chained data, updates the chained data stored in itself, and causes it to be subjected to the next encryption processing. The apparatus further divides the data to be encrypted into blocks, each block having a predetermined number of bits, and sequentially prepares one block of data to be encrypted to be processed next; A fraction that generates output data having the same length as the fraction data, based on the chain data, from fraction data less than the block unit generated when the preparation means divides the encrypted data into blocks. An encryption processing apparatus comprising: a data processing unit. 2. The fraction data processing unit merges the fraction data with the data matching unit that generates fraction concatenation data having the same length as the fraction data from the concatenation data, and merges the fraction concatenation data into the fraction data. 2. The encryption processing apparatus according to claim 1, further comprising: a fractional data fusion unit that generates output data having the same length as that of. 3. The fraction data processing means stores the block encrypted by the main encryption processing means, and when the fraction data is generated, the stored block is newly encrypted. Block storage means for passing the encrypted data to the main encryption processing means, wherein the main encryption processing means generates output data from the block passed from the block storage means, and uses this as a fraction data processing block. Passing to the data processing means, the fractional data processing means, further, from the fractional data processing block, a data matching means for generating matching data of the same length as the fractional data, The encryption processing apparatus according to claim 1, further comprising: a fraction data fusion unit that generates output data having the same length as the fraction data. 4. An encryption processing device which performs an encryption process in block units based on input data including key data and data to be encrypted to generate output data, the influence of previous data. Storing the chained data used to affect the subsequent data, and updating the chained data each time encryption processing is performed, and the chained data stored in the storage means is fused with the key data to create a fusion key. A fusion means for generating data, a first main encryption processing partial key and a second fusion key based on the fusion key data.
A partial key generating means for generating a main encryption processing partial key; and a first main encryption processing specified by the first main encryption processing partial key, to obtain intermediate data from the data to be encrypted. A first main encryption processing means for generating and a second main encryption processing for performing second main encryption processing specified by the partial key for second main encryption processing to generate output data from data to be encrypted. Encryption processing means, the storage means, the intermediate data generated by the first main encryption processing means as new chained data, to update the chained data stored by itself, to be subjected to the next encryption processing, The encryption processing device further divides the data to be encrypted into block units each having a predetermined number of bits, and sequentially prepares one block of the encrypted data to be processed next. Means and block preparation And a fraction data processing means for generating output data having the same length as the fraction data based on the chain data from the fraction data less than the block unit generated when the encrypted data is divided into blocks. An encryption processing device, comprising: 5. The fraction data processing means merges the fraction chain data with the data matching means for generating the fraction chain data having the same length as the fraction data from the chain data, and merges the fraction data with the fraction data. 5. The encryption processing device according to claim 4 , further comprising: a fractional data fusion unit that generates output data having the same length as that of. 6. The fraction data processing unit stores a block encrypted by the second main encryption processing unit, and when the fraction data is generated, the stored block is newly updated. Block storage means for passing to the second main encryption processing means as encrypted processing data is included, and the second main encryption processing means generates output data from the block passed from the block storage means, and outputs it as a fraction. The data is passed to the fraction data processing unit as a data processing block, and the fraction data processing unit further generates data from the fraction data processing block that is consistent with the same length as the fraction data. fused to the data encryption Kasho according to claim 4, characterized in that it comprises a fraction data fusion means for generating output data of the same length as the fraction data Apparatus. 7. An encryption processing device for performing an encryption process on a block-by-block basis to generate output data based on input data including key data and data to be encrypted, the influence of previous data. To store the chain data used to affect the subsequent data, and update the chain data each time the encryption process is performed, and the chain data stored in the storage unit to a predetermined conversion A conversion unit for generating conversion data by performing the above, a fusion unit for fusing the conversion data with key data to generate fusion key data, and a main encryption process specified by the fusion key data, And a main encryption processing means for generating output data from the encrypted processing data and outputting intermediate data generated in the process of generating the output data. As the chain data, the chain data stored by itself is updated and is subjected to the next encryption processing, and the encryption processing device further divides the data to be encrypted into blocks each having a predetermined number of bits. While, in order, the block preparation means for preparing one block of the encrypted data to be processed next, and the fraction less than the block unit generated when the block preparation means divides the encrypted data into the block units An encryption processing device, comprising: a fraction data processing unit that generates output data having the same length as the fraction data from the data based on the chain data. 8. The fraction data processing unit merges the fraction data with the data matching unit that generates fraction chain data having the same length as the fraction data from the chain data, and merges the fraction chain data with the fraction data. 8. The encryption processing apparatus according to claim 7 , further comprising: a fractional data fusion unit that generates output data having the same length as that of. 9. The fraction data processing means merges the matching data with the fraction data to generate matching data having the same length as the fraction data from the converted data, and the matching data is the same as the fraction data. 8. The encryption processing apparatus according to claim 7 , further comprising: a fractional data fusion unit that generates output data of length. 10. A decryption processing device for performing decryption processing on a block-by-block basis to generate output data, based on input data including key data and data to be decrypted, the influence of previous data. Storing chain data used to influence the subsequent data, and updating the chain data each time decryption processing is performed, and the chain data stored in the storage unit are fused with the key data to obtain a fusion key. There is a fusion means for generating data and a plurality of stages of partial processing, and the data that has been partially processed in the first stage is further subjected to partial processing in the second stage, and this is performed for the number of stages to generate decryption processing data. Decryption processing means, and partial key generation means for generating partial keys for the number of stages of the main decryption processing means from the fusion key data, feeding the partial keys to the respective stages of the main decryption processing means, and providing each partial processing. Comprising the main decryption The processing means performs a plurality of stages of partial processing specified by the number of partial keys on the decryption-processed data, and the data obtained by performing the partial processing at each stage other than the final stage is each intermediate data, The storage means updates one of the intermediate data obtained by the main decoding processing means as new chained data, updates the chained data stored by itself, and causes it to be subjected to the next decoding processing. The processing device further divides the data to be decoded into blocks each having a predetermined number of bits, and sequentially prepares one block of data to be decoded to be processed next, and block preparation means, An end that generates output data of the same length as the fraction data based on the chain data from the fraction data less than the block unit generated when the block preparation means divides the data to be decoded into blocks. A decoding processing device, comprising: a number data processing means. 11. The fraction data processing means merges the fraction chain data with the data matching means for generating fraction chain data having the same length as the fraction data from the chain data, and merges the fraction data with the fraction data. decoding apparatus according to claim 1 0, wherein the including the fraction data fusion means for generating output data of the same length as. 12. The fraction data processing means stores a block that has been subjected to a decoding process by the main decoding processing means, and when the fraction data occurs, the stored block is newly decoded. Block storage means for passing to the main decoding processing means as the encrypted data, the main decoding processing means generates output data from the block passed from the block storage means, and uses this as a fraction data processing block. Passing to the data processing means, the fractional data processing means, further, from the fractional data processing block, a data matching means for generating matching data of the same length as the fractional data, decoding apparatus according to claim 1 0, wherein the including the fraction data fusion means for generating output data of the same length as the fraction data. 13. A decryption processing device for performing decryption processing in block units based on input data including key data and data to be decrypted to generate output data, the influence of previous data. Storing chain data used to influence the subsequent data, and updating the chain data each time decryption processing is performed, and the chain data stored in the storage unit are fused with the key data to obtain a fusion key. Fusion means for generating data, a first main decryption processing partial key and a second fusion key from the fusion key data
Partial key generation means for generating a partial key for main decryption processing; and a first main decryption process specified by the first partial key for main decryption processing, and intermediate data from the decrypted data. A first main decryption processing unit for generating, and a second main decryption processing for performing a second main decryption processing specified by the second partial key for the main decryption processing to generate output data from data to be decrypted The storage means updates the chained data stored by itself as the new chained data of the intermediate data generated by the first main decoding processing means, and causes the next decoding processing to be performed. The decoding processing device further divides the data to be decoded into blocks each having a predetermined number of bits, and sequentially prepares one block of data to be decoded to be processed next. Means and block preparation And a fraction data processing means for generating output data having the same length as the fraction data, based on the chain data, from the fraction data less than the block unit generated when the stage divides the data to be decoded into blocks. A decoding processing device comprising: 14. The fraction data processing means merges the fraction chain data with the data matching means for generating fraction chain data having the same length as the fraction data from the chain data, and merges the fraction data with the fraction data. decoding apparatus according to claim 1 3, wherein the including the fraction data fusion means for generating output data of the same length as. 15. The fraction data processing unit stores the block decoded by the second main decoding processing unit, and when the fraction data is generated, the stored block is newly updated. Block storage means for passing to the second main decoding processing means as data to be decoded is included, and the second main decoding processing means generates output data from the block passed from the block storage means, and outputs it as a fraction. The data is passed to the fraction data processing unit as a data processing block, and the fraction data processing unit further generates data from the fraction data processing block that is consistent with the same length as the fraction data. fused to the data, decoding of claims 1 to 3, wherein the including the fraction data fusion means for generating output data of the same length as the fraction data Processing equipment. 16. A decryption processing device for performing decryption processing in block units based on input data including key data and data to be decrypted to generate output data, the influence of previous data. Storing the chain data used to affect the subsequent data, and updating the chain data each time the decoding process is performed, and the chain data stored in the storage unit, a predetermined conversion A conversion unit for generating conversion data by performing the above, a fusion unit for fusing the conversion data with key data to generate fusion key data, and a main decryption process specified by the fusion key data, A main decoding processing means for generating output data from the decoding processing data and outputting intermediate data generated in the process of generating the output data, and the storage means stores the intermediate data. As the chain data, the chain data stored by itself is updated and is subjected to the next decoding process, and the decoding processing device further sets the decoding target data in block units having a predetermined number of bits. While dividing, in order, a block preparing means for preparing one block of decoded data to be processed next, and a block less than a block unit generated when the block preparing means divides the decoded data into blocks A decoding processing device, comprising: fraction data processing means for generating output data having the same length as the fraction data from the fraction data based on the chain data. 17. The fraction data processing unit merges the fraction data with the data matching unit that generates fraction chain data having the same length as the fraction data from the chain data, and merges the fraction data with the fraction data. 17. The decoding processing device according to claim 16 , further comprising: a fractional data merging unit that generates output data having the same length as that of. 18. The fraction data processing means merges the matching data with the fraction data to generate matching data having the same length as the fraction data from the converted data, and the matching data is the same as the fraction data. The decoding processing device according to claim 16 , further comprising: a fractional data fusion unit that generates length output data.