Implementing use-dependent security settings in a single white-box implementation

摘要

A method of enforcing security settings in a cryptographic system, including: receiving, by the cryptographic system, a first input message associated with a first security setting of a plurality of security settings; performing, by the cryptographic system, a keyed cryptographic operation mapping the first input message into a first output message, wherein the keyed cryptographic operation produces a correct output message when the cryptographic system is authorized for the first security setting, wherein each of the plurality of security settings has an associated set of input messages wherein the sets of input messages do not overlap.

主权项

1. A non-transitory machine-readable storage medium encoded with instructions for execution by a cryptographic system for enforcing security settings, the non-transitory machine-readable storage medium comprising:
instructions for receiving, by the cryptographic system, a first input message associated with a first security setting of a plurality of security settings; instructions for performing, by the cryptographic system, a keyed cryptographic operation mapping the first input message into a first output message, wherein the keyed cryptographic operation produces a correct output message when the cryptographic system is authorized for the first security setting, wherein each of the plurality of security settings has an associated set of input messages wherein the sets of input messages do not overlap, wherein an input message space includes all potential input messages to the keyed cryptographic operation and the plurality of input message groups includes all of the input messages in the input message space.