Harris Corporation

Harris Global Communications, Inc.

L3harris Global Communications, Inc.

Harris Solutions Ny, Inc.

Marcin Lukowiak

Michael Thomas Kurdziel

Alan R Kaminsky

Steven M Farris

Stanislaw P Radziszowski

Peter Bajorski

Stainslaw Radziszowski

Christopher Wood

Stephanie Soldavini

Stanislaw Radziszowski

Daniel F Stafford

Matthew Kelly

Systems and methods for protecting intellectual property of a circuit via obfuscation of logic through encryption. The methods comprise: analyzing a combinational circuit (CC) to identify first logic gates that perform first function(s) which is(are) implementable by LUT(s); dividing CC a first portion comprising the first logic gates and a second portion comprising remaining logic gates; protecting gate logic of the first portion by at least storing information implementing the first function(s) in an encrypted LUT format in a memory device of the circuit such that the first function(s) is(are) obfuscated when the circuit is in an at-rest state; and interfacing the remaining logic gates with the memory device such that the circuit is configured to generate an output in accordance with operations of the combinational circuit using the information stored in the encrypted LUT format.

System and method for obfuscation of sequential logic through encryption

A cross-domain information transfer system includes a key distribution center that generates private encryption keys and a signature key pair as a secret signing and secret verifying key for an attribute associated with a given domain. A sender device generates ciphertext from plaintext based upon the private encryption key, appends an attribute for a given domain to the ciphertext, generates ciphertext with a concealed attribute based upon the secret signing key and broadcasts the ciphertext with the concealed attribute. Domain gateway devices each receive a respective secret verifying key for an associated attribute, receive the ciphertext with the concealed attribute from the untrusted network, and use the secret verifying key to determine if the concealed attribute matches the attribute associated with the domain gateway device, and, when so, pass the ciphertext to at least one receiver device coupled with the domain gateway device.

Cross-domain information transfer system and associated methods

Systems () and methods () for customizing a cryptographic algorithm. The methods comprise: providing an electronic device with the cryptographic algorithm implementing a permutation function &#x192; configured to produce a first keystream using bits input thereto, the permutation function &#x192; comprising a round function &#x192;consisting of a mixing layer in which input bits are combined together; and customizing the mixing layer of the permutation function &#x192; while the electronic device is in the field. The mixing layer is customized by: receiving, by the electronic device, a first user-software interaction for entering a first bit string comprising a plurality of first arbitrary bits; breaking the first bit string into a plurality of equal length segments each comprising only a portion of the plurality of first bits; and translating each of the equal length segments into irreducible polynomial coefficients and/or an irreducible polynomial identifier.

Customizable encryption/decryption algorithm

Systems () and methods () for generating encrypted data. The methods involve: combining a cryptographic key with state initialization bits to generate first combination bits; producing a first keystream by performing a permutation function &#x192; using the first combination bits as inputs thereto; and using the first keystream to encrypt first data (e.g., authentication data or message body data) so as to produce first encrypted data. The permutation function &#x192; comprises a round function &#x192;that is iterated R times. The round function &#x192;consists of (1) a substitution layer in which the first combination bits are substituted with substitute bits, (2) a permutation layer in which the substitute bits are re-arranged, (3) a mixing layer in which multiple of the permutation layer are combined together, and (4) an addition layer in which a constant is added to the output of the mixing layer.

Customizable encryption algorithm based on a sponge construction with authenticated and non-authenticated modes of operation

Method for distributing a group session cryptographic key includes initiating at least one pairwise key distribution session including a root node () and at least one communication node (-). The method further includes performing at a communication node which has received the group session cryptographic key a propagated pairwise key distribution session with at least one of the communication nodes which has not previously received said group session cryptographic key. The propagated pairwise key distribution sessions are performed at each of the communication nodes which subsequently receives the group session cryptographic key until the group session cryptographic key has been securely provided to all authorized communication nodes.

Electronic key management using PKI to support group key establishment in the tactical environment

Growing community of inventors

Rochester, NY, United States of America

Marcin Lukowiak