How to Add the Integrity Checking Capability to Block Encryption Algorithms
Résumé
This paper describes a novel engine, called PE-ICE (Parallelized Encryption and Integrity Checking Engine), enabling to guarantee the confidentiality and the integrity of data exchanged between a SoC (System on Chip) and its external memory by using an existing block-encryption algorithm. Performance evaluations show that the overhead of security mechanisms in PE-ICE remains low (below 12%) compared to block-encryption-only systems which provide only data confidentiality.