This application claims priority of U.S. Provisional application Ser. No. 60,417,384, filed Oct. 9, 2002 to Stein et al., entitled COMPACT GALOIS FIELD MULTIPLIER; U.S. Provisional application Ser. No. 60/334,662, filed Nov. 30, 2001 to Stein et al., entitled GF2-ALU; U.S. Provisional application Ser. No. 60/334,510 filed Nov. 30, 2001 to Stein et al., entitled PARALLEL GALOIS FIELD MULTIPLIER; U.S. Provisional application Ser. No. 60/341,635, filed Dec. 18, 2001 to Stein et al., entitled GALOIS FIELD MULTIPLY ADD (MPA) USING GF2-ALU; U.S. Provisional application Ser. No. 60/341,737, filed Dec. 18, 2001, to Stein et al., entitled PROGRAMMABLE GF2-ALU LINEAR FEEDBACK SHIFT REGISTER—INCOMING DATA SELECTION; U.S. Provisional application Ser. No. 60/341,711, filed Dec. 18, 2001 to Stein et al., entitled METHOD FOR DATA ENCRYPTION STANDARD (DES) USING GF2-ALU AND 8 WAY PARALLEL LUT; U.S. patent application Ser. No. 10/395,620 filed Mar. 24, 2003 to Stein et al., entitled COMPACT GALOIS FIELD MULTIPLIER ENGINE; U.S. patent application Ser. No. 10/051,533 filed Jan. 18, 2002 to Stein et al., entitled GALOIS FIELD LINEAR TRANSFORMER; U.S. patent application Ser. No. 10/060,699 filed Jan. 30, 2002 to Stein et al., entitled GALOIS FIELD MULTIPLIER SYSTEM; U.S. patent application Ser. No. 10/228,526 filed Aug. 26, 2002 to Stein et al., entitled GALOIS FIELD MULTIPLY/MULTIPLY—ADD/MULTIPLY ACCUMULATE; and U.S. patent application Ser. No. 10/136,170, filed May 1, 2002 to Stein et al., entitled RECONFIGURABLE INPUT GALOIS FIELD LINEAR TRANSFORMER SYSTEM, the entire disclosures of which are incorporated by reference herein.
This invention relates to a Galois field divider engine and method and more generally to a compound Galois field engine for performing a succession of Galois field transforms in one transform operation.
Conventional arithmetic logic circuits used for forward error correction and detection, communications, encoding and decoding and general bit manipulation using Galois field linear transformations may be implemented in hardware or software. In certain applications such as encryption and error control coding, it is necessary to perform arithmetic operations, e.g., add, subtract, square root, multiply, and divide over Galois fields. Any such operation between any two members in a Galois field will result in an output (sum, difference, square root, product, quotient) which is another value in the same Galois field. The number of elements in a Galois field is 2m where m is the degree of the field. For example, GF(24) would have sixteen different elements in it; GF(28) would have 256. A Galois field is generated from an irreducible polynomial in a particular power. Each Galois field of a particular degree will have a number of irreducible polynomials form each of which may be devised a different field using the same terms but in a different order.
Division over a Galois field is done by multiplying the dividend by the reciprocal of the divisor. This divisor reciprocal can be generated in a number of ways. One way is to have a stored look-up table of reciprocals where the divisor is the address for the table. One problem with this approach is that for each field of each irreducible polynomial there must be stored a separate table. In addition, the tables can only be accessed in serial: if parallel operations are required a copy of each table must be provided for each parallel operation. Another approach is to multiply each of the stored Galois field elements by the particular divisor. The value that produces a product of one is then the reciprocal of the particular divisor. Once again all of the values have to be stored and in multiple copies if parallel operation is contemplated. And, a Galois field multiplier is required just to accomplish the retrieval. A third approach uses two linear feedback shift registers (LFSR) each configured to generate a selected Galois field of a particular irreducible polynomial. The first is initialized to the divisor; the second is initialized to “1”. Starting from the divisor value the two are clocked synchronously. When the product of the first LFSR equals “1” the divisor has been multiplied by its reciprocal. The product of the second LFSR at that moment is the Galois field element that is the reciprocal of the divisor. One problem with this approach is that for each Galois field of each irreducible polynomial for each degree a different pair of LFSRs is required. In both, the second look-up table approach, above, and the LFSR approach the search for the reciprocal requires up to 2m−1 iterations.
It is therefore an object of this invention to provide an improved Galois field divider engine and method.
It is a further object of this invention to provide such an improved Galois field divider engine which can complete the search for the divisor reciprocal in m−1 iterations.
It is a further object of this invention to provide such an improved Galois field divider engine which can be easily reconfigured to accommodate different irreducible polynomial Galois fields of different degrees.
It is a further object of this invention to provide such an improved Galois field divider engine which can function to generate both the divisor reciprocal and multiply it by the dividend.
It is a further object of this invention to provide such an improved Galois field divider engine which requires less power and less area.
It is a further object of this invention to provide more generally an improved, compound Galois field engine for performing a succession of Galois field transforms in one transform operation.
The invention results from the realization that such an improved Galois field division engine and method which is smaller, faster, and more efficient can be achieved with a Galois field reciprocal generator and an input selection circuit for initially inputting a 1 and a first Galois field element to the Galois field reciprocal generator to obtain an output, subsequently multiplying in the Galois field reciprocal generator a first Galois field element by the output of the Galois field reciprocal generator for predicting the modulo remainder of the square of the polynomial product of an irreducible polynomial m−2 times where m is the degree of the Galois field, to obtain the reciprocal of the first Galois field element and multiplying in the Galois field reciprocal engine the reciprocal of the first Galois field element by a second Galois field element for predicting the modulo reminder of the polynomial product for an irreducible polynomial to obtain the quotient of the two Galois field elements in m cycles.
It was also realized, more generally, that an improved compound Galois field engine for performing a succession of Galois field linear transforms on a succession of polynomial inputs to obtain an ultimate output where each input, except the first, is the output of the previous Galois field linear transform can be accomplished with an input circuit for providing a first input and a Galois field linear transformer having a matrix of cells responsive to the first input and configured to, in one transform, immediately predict the modulo remainder of the succession of Galois field linear transforms of an irreducible Galois field polynomial to obtain the ultimate output of the Galois field linear transform directly from the first input.
This invention features a Galois field divider engine including a Galois field reciprocal generator and an input selection circuit for initially inputting a 1 and a first Galois field element to the Galois field reciprocal generator to obtain an output, subsequently multiplying in the Galois field reciprocal generator a first Galois field element by the output of the Galois field reciprocal generator for predicting the modulo remainder of the square of the polynomial product of an irreducible polynomial m−2 times, where m is the degree of the Galois field, to obtain the reciprocal of the first Galois field element and multiplying in the Galois field reciprocal engine the reciprocal of the first Galois field element by a second Galois field element for predicting the modulo remainder of the polynomial product, for an irreducible polynomial to obtain the quotient of the two Galois field elements in m cycles.
In a preferred embodiment, the reciprocal generator may include first and second Galois field multipliers. The first Galois field multiplier may include a first polynomial multiplier circuit and a first Galois field linear transformer. The first Galois field linear transformer may include a matrix of cells. The first Galois field linear transform may include a matrix section and a unity matrix section. The second Galois field multiplier may include a second polynomial multiplier circuit and a second Galois field linear transformer. The second Galois field linear transformer may include a matrix of cells. The second Galois field linear transformer matrix of cells may include a matrix section and a unity matrix section. The output of the first Galois field multiplier may be fed to both multiply inputs of the second Galois field linear multiplier to provide the square of that output. The Galois field reciprocal generator may include a Galois field multiplier including a first polynomial multiplier and a first Galois field transformer and a second Galois field transformer for calculating the square of the first Galois field multiplier output. The second Galois field transformer may be approximately one half the size of the first Galois field transformer. The first and second Galois field transformers each may include a matrix of cells and the second Galois field transformer may include approximately one half the number of cells of the first Galois field transformer. The Galois field reciprocal engine may include a Galois field multiplier and a program circuit for programming the Galois field multiplier to perform a compound multiply-square operation for m−2 times followed by a multiply operation.
The invention also features in a broader sense a compound Galois field engine for performing a succession of Galois field linear transforms on a succession of polynomial inputs to obtain an ultimate output where each input except the first is the output of the previous Galois field linear transform. There is an input circuit for providing a first input and a Galois field linear transformer having a matrix of cells responsive to the first input and configured to, in one transform, immediately predict the modulo remainder of the succession of Galois field linear transforms of an irreducible Galois field polynomial to obtain the ultimate output of the Galois field linear transform directly from the first input.
This invention also features a method of Galois field division including initially inputting a 1 and a first Galois field element to a Galois field reciprocal generator to obtain an output, multiplying in the Galois field reciprocal generator a first Galois field element by the output of the Galois field reciprocal generator for predicting the modulo remainder of the square of the polynomial product of an irreducible polynomial m−2 times where m is the degree of the Galois field to obtain the reciprocal of the first Galois field element, and multiplying in the Galois field reciprocal engine the reciprocal of the first Galois field element by a second Galois field element for predicting the modulo remainder of the polynomial product for an irreducible polynomial to obtain the quotient of the two Galois field elements in m cycles.
This invention also features a Galois field square root engine including a Galois field square root generator and an input circuit for inputting a Galois field element to the Galois field square root generator to obtain the square root of the Galois field elements in one cycle.
In a preferred embodiment, the Galois field square root engine may include a Galois field multiplier, and a program circuit for programming the Galois field multiplier to perform a compound square operation of m−1 times in one cycle.
The invention also features a Galois field square root method including inputting a Galois field element to a Galois field square root generator to obtain an output and squaring in the Galois field square root generator the output of the Galois field square root generator for predicting the modulo remainder of the square of the polynomial product of an irreducible polynomial m−1 times where m is the degree of the Galois field to obtain the square root of the Galois field element in (m−1) cycles.
Other objects, features and advantages will occur to those skilled in the art from the following description of a preferred embodiment and the accompanying drawings, in which:
Aside from the preferred embodiment or embodiments disclosed below, this invention is capable of other embodiments and of being practiced or being carried out in various ways. Thus, it is to be understood that the invention is not limited in its application to the details of construction and the arrangements of components set forth in the following description or illustrated in the drawings.
Before disclosing the compound Galois field engine and the divisor engine and method of this invention an explanation of Galois field transformers and multipliers is presented for a better understanding.
A Galois field GF(n) is a set of elements on which two binary operations can be performed. Addition and multiplication must satisfy the commutative, associative and distributive laws. A field with a finite number of elements is a finite field. An example of a binary field is the set {0,1} under modulo 2 addition and modulo 2 multiplication and is denoted GF(2). The modulo 2 addition and multiplication operations are defined by the tables shown in the following illustration. The first row and the first column indicate the inputs to the Galois field adder and multiplier. For e.g. 1+1=0 and 1*1=1.
In general, if p is any prime number then it can be shown that GF(p) is a finite field with p elements and that GF(pm) is an extension field with pm elements. In addition, the various elements of the field can be generated as various powers of one field element, β, by raising it to different powers. For example GF(256) has 256 elements which can all be generated by raising the primitive element, β, to the 256 different powers.
In addition, polynomials whose coefficients are binary belong to GF(2). A polynomial over GF(2) of degree m is said to be irreducible if it is not divisible by any polynomial over GF(2) of degree less than m but greater than zero. The polynomial F(X)=X2+X+1 is an irreducible polynomial as it is not divisible by either X or X+1. An irreducible polynomial of degree m which divides X2m-1+1, is known as a primitive polynomial. For a given m, there may be more than one primitive polynomial. An example of a primitive polynomial for m=8, which is often used in most communication standards is F(X)=0×11d=x8+x4+x3+x2+1.
Galois field addition is easy to implement in software, as it is the same as modulo addition. For example, if 29 and 16 are two elements in GF(28) then their addition is done simply as an XOR operation as follows: 29 (11101)⊕16(10000)=13(01101).
Galois field multiplication on the other hand is a bit more complicated as shown by the following example, which computes all the elements of GF(24), by repeated multiplication of the primitive element β. To generate the field elements for GF(24) a primitive polynomial G(x) of degree m=4 is chosen as follows G(x)=X4+X+1. In order to make the multiplication be modulo so that the results of the multiplication are still elements of the field, any element that has the fifth bit set is brought into a 4-bit result using the following identity F(β)=β4+β+1=0. This identity is used repeatedly to form the different elements of the field, by setting β4=1+β. Thus the elements of the field can be enumerated as follows:
{0, 1, β, β2, β3, 1+β, β+β2, β2+β3, 1+β+β3, . . . 1+β3,}
since β is the primitive element for GF(24) it can be set to 2 to generate the field elements of GF(24) as {0, 1, 2, 4, 8, 3, 6, 12, 11 . . . 9}.
It can be seen that Galois field polynomial multiplication can be implemented in two basic steps. The first is a calculation of the polynomial product c(x)=a(x)*b(x) which is algebraically expanded, and like powers are collected (addition corresponds to an XOR operation between the corresponding terms) to give c(x).
For example c(x)=(a3x3+a2x2+a1x1+a0)*(b3x3+b2x3+b1x1+b0)
c(x)=c6x6+c5x5+c4x4+c3x3+c2x2+c1x1+c0 where:
The second is the calculation of d(x)=c(x) modulo p(x).
To illustrate, multiplications are performed with the multiplication of polynomials modulo an irreducible polynomial. For example: (if m(x)=x8+x4+x3+x+1)
{57}*{83}={c1} because,
An improved Galois field multiplier system 10, foreclosing on this approach includes a multiplier circuit for multiplying two polynomials a0-a7 in an A register with the polynomial b0-b7 in an B register with coefficients over a Galois field to obtain their product is given by the fifteen-term polynomial c(x) defined as Chart II. The multiplier circuit actually includes a plurality of multiplier cells.
The operation of a Galois field multiplier system is explained in U.S. Patent Application to Stein et al. entitled GALOIS FIELD MULTIPLIER SYSTEM Ser. No. 10/060,699 filed Jan. 30, 2002 which is incorporated herein in its entirety by this reference.
Each of the fifteen polynomial c(x) term includes an AND function as represented by an * and each pair of terms are combined with a logical exclusive OR as indicated by a ⊕. This product as represented in Chart II is submitted to a Galois field linear transformer circuit which may include a number of Galois field linear transformer units each composed of 15×8 cells, which respond to the product produced by the multiplier circuit to predict the modulo remainder of the polynomial product for a predetermined irreducible polynomial. The A0, B0 multiplication is performed in a first unit the A1, B1 in a second unit, the A2, B2 in a third unit, and the An, Bn in the last unit. The operation of a Galois field linear transformer circuit and each of its transformer units is explained in U.S. Patent Application to Stein et al. entitled GALOIS FIELD LINEAR TRANSFORMER Ser. No. 10/051,533 with a filing date of Jan. 18, 2002, which is incorporated herein in its entirety by this reference. Each of the Galois field linear transformer units predicts the modulo remainder by dividing the polynomial product by an irreducible polynomial. That irreducible polynomial may be, for example, anyone of those shown in Chart III.
The Galois field multiplier presented here GF(28) is capable of performing with powers 28 and powers 24 and under as shown in Chart III.
An example of the GF multiplication occurs as follows:
There is shown in
Conventional Galois field multiplier engine 10a,
The number of cells 24b per row,
Each cell 24b,
The efficacy of engine 10b,
The reduction in the number of required cells is not limited to only polynomials having the same power as the irreducible polynomial. It also applies to any of those having the power of one half or less of the power of the irreducible polynomial. For example, the eight by fifteen matrix 22b, shown in
If it is desirable to service the intermediate polynomials of power five, six and seven the unity matrix section can be replaced with a sparse matrix section 52f,
The number of input registers can be reduced from three to two and the number of external buses relied upon to communicate with the digital signal processor (DSP) 28g,
Another feature is the reconfigurability of Galois field linear transformer circuit 20g by virtue of the selective enablement of cells 24g. Reconfigurable control circuit 80 selectively enables the ones of cells 24g required to implement the coefficients of the selected irreducible polynomial and itself can be reduced in size since the number of cells it needs to control has been reduced.
The operation of a reconfigurable input Galois field linear transformer circuit is explained in U.S. patent application Ser. No. 10/136,170, filed May 1, 2002 to Stein et al., entitled RECONFIGURABLE INPUT GALOIS FIELD LINEAR TRANSFORMERER SYSTEM and all its priority applications and documents which are incorporated herein in their entirety by this reference.
Although thus far for the sake of simplicity the explanation has been with respect to only one engine, a number of the engines may be employed together as shown in
A polynomial multiplier circuit 181,
There is shown in
The fact that
is shown by the following exposition, given: the field of GF(q) is made up from the numbers {0, 1 . . . (q−1)}. If we multiply by β (β is a field member≠0} each member of {1, 2 . . . (q−1)} to get {1β0, 2β . . . (q−1)β} we can easily see that we get the same set back again (with the order changed). This means that 1, ·2· . . . ·(q−1)=1β·2β· . . . ·(q−1)β=1·2· . . . ·(q−1)β(q-1) by cancelling the factors 1·2· . . . (q−1) from both sides assures us that
βq-1=1. (1)
Therefore
β−1=βq-2 (2)
Replacing q with 2m results in the expression
According to (3) for n=7 we need to calculate β254. β254 can be calculated as β[1]128·β64·β32·β16·β8·β4·β2. Which can be iteratively calculated as
The circuit of
As can be seen, the final value of β−1 is obtained in (n−1) cycles. The same circuit is generating β−1 for all intermediate powers of m GF(2m) {m=3.7}, for example if m=4, β2
In one embodiment, Galois field reciprocal generator 155a,
The values at inputs 174 and 176 take the form of, from the most significant digit to the least, b7-b0 and a7-a0. When the squaring function is being performed as here, then each of the values b7-b0 will be the same, respectively, as each of the values of a7-a0 because they are the same numbers. The number of digits b7-b0, a7-a0 depends upon the size of the polynomial, which in this case where m is 8 would be eight digits. Whatever the size, since the values are the same at both inputs, the exclusive OR function will be zero. That is, like inputs to an exclusive OR gate renders a zero output as is well known. Thus, referring again to
Galois field transformers 156c and 166c,
When the Galois field divider engine has been reduced as shown in
A5 is equal to c14, c13, c12, , , c8, c5
A6 is equal to , , , , c9, c6,
A7 is equal to , , , , and c7,
all with the exclusive OR functions between them. This results in the output c14, exclusive OR c13, exclusive OR c12, exclusive OR c9, exclusive OR c8, exclusive OR c7, exclusive OR c6, exclusive OR c5. Thus, in matrix 200,
In operation, initially the GFLT is programmed as a compound multiplier performing (GF_MPY(α,β))2, a 1 is provided at input 214 and βk at input 216. Following that for m−2 iterations, the output 180 is fed back on input 214 while βk remains on input 216. After m−2 iterations, when the system has gone through a total of m−1 iterations, the input at 214 is now the reciprocal of βk. At this point the GFLT is programmed as a Galois Field multiplier, βk at input 216 is now replaced with input β1 so that the next multiplication, the mth iteration, multiplies β1 times the reciprocal of βk to provide the output β1 divided by βk. The Galois field division method of this invention is shown in
Thus far the invention has focused on a Galois field divider engine and method and to the ability to reduce that engine in size by first reducing the size of one of the Galois field linear transformers and eliminating one of the polynomial multipliers and then by combining the functions of the two linear transformers so that a succession of Galois field linear transforms on a succession of polynomial inputs is performed to obtain the ultimate output (quotient) as shown in
Another example of this fact can be seen in the square root operation of a Galois field member β. There is shown in
The fact that √{square root over (β)}=β2
Replacing q with 2m and multiplying both sides by β results in the expression
β2
Taking √{square root over ( )} the/form both sides results in the expression
β(2
or
β2
The Galois field square root method of this invention is shown in
In summary, generally a compound Galois field engine 260,
Although specific features of the invention are shown in some drawings and not in others, this is for convenience only as each feature may be combined with any or all of the other features in accordance with the invention. The words “including”, “comprising”, “having”, and “with” as used herein are to be interpreted broadly and comprehensively and are not limited to any physical interconnection. Moreover, any embodiments disclosed in the subject application are not to be taken as the only possible embodiments.
Other embodiments will occur to those skilled in the art and are within the following claims:
Number | Name | Date | Kind |
---|---|---|---|
3303477 | Voigt | Feb 1967 | A |
3805037 | Ellison | Apr 1974 | A |
4722050 | Lee et al. | Jan 1988 | A |
4847801 | Tong | Jul 1989 | A |
4852098 | Brechard et al. | Jul 1989 | A |
4918638 | Matsumoto et al. | Apr 1990 | A |
4975867 | Weng | Dec 1990 | A |
5095525 | Almgren et al. | Mar 1992 | A |
5101338 | Fujiwara et al. | Mar 1992 | A |
5214763 | Blaner et al. | May 1993 | A |
5379243 | Greenberger et al. | Jan 1995 | A |
5386523 | Crook et al. | Jan 1995 | A |
5396502 | Owsley et al. | Mar 1995 | A |
5446850 | Jeremiah et al. | Aug 1995 | A |
5612910 | Meyer | Mar 1997 | A |
5642367 | Kao | Jun 1997 | A |
5689452 | Cameron | Nov 1997 | A |
5696941 | Jung | Dec 1997 | A |
5754563 | White | May 1998 | A |
5768168 | Im | Jun 1998 | A |
5832290 | Gostin et al. | Nov 1998 | A |
5890800 | Meyer | Apr 1999 | A |
5964826 | Wei | Oct 1999 | A |
5996057 | Scales, III et al. | Nov 1999 | A |
5996066 | Yung | Nov 1999 | A |
5999959 | Weng et al. | Dec 1999 | A |
6038577 | Burshtein | Mar 2000 | A |
6049815 | Lambert et al. | Apr 2000 | A |
6138208 | Dhong et al. | Oct 2000 | A |
6141786 | Cox et al. | Oct 2000 | A |
6199086 | Dworkin et al. | Mar 2001 | B1 |
6199087 | Blake et al. | Mar 2001 | B1 |
6199088 | Weng et al. | Mar 2001 | B1 |
6209114 | Wolf et al. | Mar 2001 | B1 |
6219815 | DesJardins et al. | Apr 2001 | B1 |
6223320 | Dubey et al. | Apr 2001 | B1 |
6230179 | Dworkin et al. | May 2001 | B1 |
6246768 | Kim | Jun 2001 | B1 |
6279023 | Weng et al. | Aug 2001 | B1 |
6317763 | Vatinel | Nov 2001 | B1 |
6349318 | Vanstone et al. | Feb 2002 | B1 |
6384713 | Yu | May 2002 | B1 |
6389088 | Blois et al. | May 2002 | B1 |
6434662 | Greene et al. | Aug 2002 | B1 |
6438569 | Abbott | Aug 2002 | B1 |
6587864 | Stein et al. | Jul 2003 | B2 |
6766345 | Stein et al. | Jul 2004 | B2 |
6779011 | Weng et al. | Aug 2004 | B2 |
6836147 | Nakaya | Dec 2004 | B2 |
7197526 | Qu | Mar 2007 | B1 |
20020041685 | McLoone et al. | Apr 2002 | A1 |
20020147825 | Stein et al. | Oct 2002 | A1 |
20020156823 | Weng et al. | Oct 2002 | A1 |
20030103626 | Stein et al. | Jun 2003 | A1 |
20030105791 | Stein et al. | Jun 2003 | A1 |
20030110196 | Stein et al. | Jun 2003 | A1 |
20030115234 | Stein et al. | Jun 2003 | A1 |
20030133568 | Stein et al. | Jul 2003 | A1 |
20030140211 | Stein et al. | Jul 2003 | A1 |
20030140212 | Stein et al. | Jul 2003 | A1 |
20030140213 | Stein et al. | Jul 2003 | A1 |
20030149857 | Stein et al. | Aug 2003 | A1 |
20030182340 | Horie | Sep 2003 | A1 |
Number | Date | Country |
---|---|---|
1 246 389 | Oct 2002 | EP |
2001034167 | Feb 2001 | JP |
2001084242 | Mar 2001 | JP |
Number | Date | Country | |
---|---|---|---|
20040236812 A1 | Nov 2004 | US |