This invention relates to a condensed Galois field computing system.
Multiplication of polynomials with coefficients in Galois fields (GF) is widely used in communication systems for Reed Solomon (RS) coding and in advanced encryption. Galois field multiplication is difficult and time consuming for traditional digital signal processors (DSP) to perform: DSP's are optimized for finite impulse response (FIR) filtering and other multiply-accumulate (MAC) intensive operations, but do not efficiently process Galois field types of operations. One approach uses straight forward polynomial multiplication and division over the Galois field using linear feedback shift registers (LFSR's) which process one bit at a time. This is a very slow process. For example, in broadband communication for AES types of applications, where the bit rate is up to 100 megabits per second, there will be up to 12.5 million GF multiplications per second (MPS) and each multiplication may require many e.g. 60-100 operations. Another approach uses look-up tables to perform the Galois field multiplication. Typically, this approach requires 10-20 or more cycles which for 12.5 mps results in a somewhat lower but still very large number of operations e.g. 20×12.5=250 mps or more. Reed-Solomon codes have been widely accepted as the preferred error control coding scheme for broadband networks. A programmable implementation of a Reed-Solomon encoder and decoder is an attractive solution as it offers the system designer the unique flexibility to trade-off the data bandwidth and the error correcting capability that is desired based on the condition of the channel. The first step in Reed-Solomon decoding is the computing of the syndromes. The syndromes can be formally defined as Si=R mod G where i=(0, 1 . . . 15). The received code word may be expressed in polynomial form as Ri=roXN−1+rlXN−2+ . . . rN−1 where the length of the received word is N. It can be seen that computing the syndrome amounts to polynomial evaluation over the Galois field at the roots as defined by the j'th power of the i'th root of the generator polynomial. For each received word in the Reed-Solomon Algorithm there are sixteen syndromes to be calculated which raise the operations by a factor of sixteen to 400 mps—not practical on current microprocessors. Using the straight forward multiplication instead of the look-up tables raises the operation rate to 1.6 gigs per second. The need for Galois field multiplications is increasing dramatically with the expansion of the communications field and the imposition of encryption requirements on the communication data. This further complicates the matter because each domain error checking encryption needs Galois field multiplication over a different Galois field which requires different sets of look-up tables.
It is therefore an object of this invention to provide an improved condensed Galois field computing system.
It is a further object of this invention to provide such an improved condensed Galois field computing system which requires less power and less area.
It is a further object of this invention to provide such an improved condensed Galois field computing system which is much faster than current look-up tables and linear feedback shift register (LFSR) implementations.
It is a further object of this invention to provide such an improved condensed Galois field computing system which reduces the amount of storage required.
It is a further object of this invention to provide such an improved condensed Galois field computing system which dramatically reduces the number of required operations per second.
The invention results from the realization that an improved condensed Galois field computing system which can operate as a multiplier, multiplier-adder, and multiplier-accumulator requiring less power and area can be achieved by multiplying first and second polynomials with coefficients over a Galois field to obtain their product and then using a Galois field linear transformer circuit to apply an irreducible polynomial of power n to the product including a partial result generator responsive to terms of power n and greater in the product for providing a folded partial result and a Galois field adder for condensing the folded partial result and the terms less than power n in the product to obtain the Galois field transform of power n of the product.
The subject invention, however, in other embodiments, need not achieve all these objectives and the claims hereof should not be limited to structures or methods capable of achieving these objectives.
This invention features condensed Galois field computing system, including a multiplier circuit for multiplying first and second polynomials with coefficients over a Galois field to obtain their product. There is a Galois field linear transformer circuit for applying an irreducible polynomial of power n to the product including a partial result generator responsive to terms of power n in greater in the product for providing a folded partial result. And a Galois field adder for combining the folded partial result and the terms less than power n in a product to obtain the Galois field transformer power n of the product.
In preferred embodiments, the partial result generated may include a look-up table. The look-up table may include the folded partial results for the combinations of n or greater. The look-up table may include an address generator. The address generator may provide statistically independent address access. The Galois field adder may include a three input adder. The third input to the three input adder may be a 0 and the Galois field computing system may operate as a Galois field multiplier. The Galois field in or output may be fed back to the Galois field computing system and the Galois field computing system may operate as a multiplier-accumulator. The Galois field adder output may be fed back to the multiplier circuit with one of the first and second polynomials and the other of the first and second polynomials may constitute the third input to the Galois field adder, so that the Galois field computing system operates as a multiplier-adder. The Galois field adder may include an exclusive OR circuit.
The invention also features a condensed Galois field multiplier system including a multiplier circuit for multiplying first and second polynomials with coefficients over a Galois field to obtain their product, and a Galois field linear transformer circuit for applying an irreducible polynomial of power n to the product including a partial result generator responsive to terms of power n and greater in the product for providing a folded partial result and a Galois field adder for combining the folded partial results and the terms less than power n in the product to perform a Galois field multiply operation.
The invention also features a condensed Galois field multiply-accumulate system including a multiplier circuit for multiplying first and second polynomials with coefficients over a Galois field to obtain their product, and a Galois field linear transformer circuit for applying an irreducible polynomial of power n to the product including a partial result generator responsive to terms of power n and greater in the product for providing a folded partial result and a Galois field adder for combining the folded partial results, the terms less than power n in the product and the Galois field adder fed back to perform a Galois field multiply-accumulate operation.
The invention also features a condensed Galois field multiplier-adder system including a multiplier circuit for multiplying first and second polynomials with coefficients over a Galois field to obtain their product, a Galois field linear transformer circuit for applying an irreducible polynomial of power n to the product including a partial result generator responsive to terms of power n and greater in the product for providing a folded partial result and a Galois field adder whose output is fed back to the multiplier circuit with one of the first and second polynomials and the other of the polynomials is a third input to the Galois field adder along with the folded partial results and the terms less than power n in the product to perform a Galois field multiply-add operation.
Other objects, features and advantages will occur to those skilled in the art from the following description of a preferred embodiment and the accompanying drawings, in which:
Aside from the preferred embodiment or embodiments disclosed below, this invention is capable of other embodiments and of being practiced or being carried out in various ways. Thus, it is to be understood that the invention is not limited in its application to the details of construction and the arrangements of components set forth in the following description or illustrated in the drawings. If only one embodiment is described herein, the claims hereof are not to be limited to that embodiment. Moreover, the claims hereof are not to be read restrictively unless there is clear and convincing evidence manifesting a certain exclusion, restriction, or disclaimer.
There is shown in
In operation an 8-bit polynomial with coefficient over GF(28) X (x7-x0) is multiplied by an 8-bit polynomial Y (y7-y0) in polynomial multiplier 12. The polynomial product is a 14-bit number. Instead of dividing this 14-bit polynomial product by the field irreducible polynomial of power n to get the modulo reminder as would normally be the procedure, in accordance with this invention, those terms of the polynomial product which are less than the power n of the irreducible polynomial are delivered directly to the Galois Field adder input 18 of exclusive OR gate 16. Those terms in the product which have powers of n or greater are used to access a partial result stored in look-up table 14 which when provided at input 20 to exclusive OR gate 16 and exclusively ORed or Galois field added by exclusive OR gate 16, produce the Galois field transform Z of 8-bits z7-z0. The realization of this invention is that the terms that are below a power n are unaffected by the reduction process (division of the product by an irreducible polynomial where n is the power of that irreducible polynomial), and so they can be delivered directly without any further operation or manipulation to input 18 of Galois field adder 16. Those of the power n or above must go through the reduction process where they are replaced by a folded partial result using a look-up table, which is then added in adder 16 to the lower power terms from input 18 to produce the proper Galois field output. (A partial result look-up table value is generated by expressing all the product terms of power of n or above in terms of power of n−1 or less and accumulating all the terms). For example, if the irreducible polynomial chosen has a power of eight, all those terms in the product from polynomial multiplier 12 which have power seven or below would be delivered directly to input 18 while those that had a power of eight or above would be used on line 22 to access the folded partial result in look-up table 14 which when added to the lower power terms on input 18 produce the proper Galois field output.
Galois field polynomial multiplication can be implemented in two basic steps. The first is a calculation of the polynomial product. c(x)=a(x)*b(x) is algebraically expanded, and like powers are collected (addition corresponds to an X-OR operation between the corresponding terms) to give c(x).
The second is the calculation of d(x)=c(x) modulo p(x).
To illustrate, multiplications are performed with the multiplication of polynomials modulo an irreducible polynomial. For example: (if m(x)=x8+x4+x3+x+1) {57}*{83}={c1} because,
First Step
Second Step
For the irreducible polynomial x8+x4+x3+x+1
If the polynomial multiplication product=x13⊕x11 ⊕x9 ⊕x8 ⊕x6 ⊕x5 ⊕x4 ⊕x3 ⊕1 then each of the terms of power n (8) or above are expressed in terms of n−1=7 or less:
x8=x4+x3+x+1
x9=x·x8=x(x4+x3+x+1)=x5+x4+x2+x
x11=x·x8=x3(x4+x3+x+1)=x7+x6+x4+x3
x13=x5·x8=x5(x4+x3+x+1)=x9+x8+x6+x5 which simplifies to x6+x3+x2+1
Assigning a 1 to each term to express the terms of power n and above
By Galois field addition (X-OR 16) of terms of powers less than n in the product with the folded Partial Result for LUT 14 the first Galois field output is obtained.
The irreducible polynomial used in this case: x8+x4+x3+x+1 is only one of many that may be used. For example, any one of those shown in Chart II may be used:
In summary, applying the irreducible polynomial 0x11b (x8+x4+x3+x+1) having a power n=8 to the polynomial product 30,
Condensed Galois field computing system 10a, according to this invention, may be more generalized using a Galois field adder, exclusive OR gate 16a, that includes three inputs the third input 36 may be a 0 when Galois field computing system 10a is operated as a multiplier. There may also be provided an address generator including adder circuit 38 and base address circuits 40. Then, for example, for advanced encryption standards (AES) look-up table 14a may have a base of 0 added to the addresses coming in on line 22a so that the addresses will be from 0 to 127, and for a Reed-Solomon operation base 40 may add the number 128 to the address coming in on 22a to access addresses from 128 to 255. In that way the different irreducible polynomial based Galois Field multipliers can coexist in the same system. Based on the fact that the base address is a multiple of 27 (the last 7 Lsb's are guaranteed to be “zero”) and the address generator adder 38 can be simplified to be a simple OR-circuit. The condensed Galois field computing system according to this invention, 10b,
And it may be operated as multiplier-adder 10c,
Although specific features of the invention are shown in some drawings and not in others, this is for convenience only as each feature may be combined with any or all of the other features in accordance with the invention. The words “including”, “comprising”, “having”, and “with” as used herein are to be interpreted broadly and comprehensively and are not limited to any physical interconnection. Moreover, any embodiments disclosed in the subject application are not to be taken as the only possible embodiments.
Other embodiments will occur to those skilled in the art and are within the following claims.
In addition, any amendment presented during the prosecution of the patent application for this patent is not a disclaimer of any claim element presented in the application as filed: those skilled in the art cannot reasonably be expected to draft a claim that would literally encompass all possible equivalents, many equivalents will be unforeseeable at the time of the amendment and are beyond a fair interpretation of what is to be surrendered (if anything), the rationale underlying the amendment may bear no more than a tangential relation to many equivalents, and/or there are many other reasons the applicant can not be expected to describe certain insubstantial substitutes for any claim element amended.
Number | Name | Date | Kind |
---|---|---|---|
3303477 | Voigt | Feb 1967 | A |
3658864 | Golitz et al. | Apr 1972 | A |
3805037 | Ellison | Apr 1974 | A |
4722050 | Lee et al. | Jan 1988 | A |
4847801 | Tong | Jul 1989 | A |
4852098 | Brechard et al. | Jul 1989 | A |
4918638 | Matsumoto et al. | Apr 1990 | A |
5062057 | Blacken et al. | Oct 1991 | A |
5073864 | Methvin et al. | Dec 1991 | A |
5095525 | Almgren et al. | Mar 1992 | A |
5101338 | Fujiwara et al. | Mar 1992 | A |
5182746 | Hurlbut et al. | Jan 1993 | A |
5214763 | Blaner et al. | May 1993 | A |
5278781 | Aono et al. | Jan 1994 | A |
5379243 | Greenberger et al. | Jan 1995 | A |
5383142 | Chung | Jan 1995 | A |
5386523 | Crook et al. | Jan 1995 | A |
5446850 | Jeremiah et al. | Aug 1995 | A |
5528526 | Klug et al. | Jun 1996 | A |
5577262 | Pechanek et al. | Nov 1996 | A |
5689452 | Cameron | Nov 1997 | A |
5696941 | Jung | Dec 1997 | A |
5754563 | White | May 1998 | A |
5768168 | Im | Jun 1998 | A |
5832290 | Gostin et al. | Nov 1998 | A |
5894427 | Chung | Apr 1999 | A |
5996057 | Scales, III et al. | Nov 1999 | A |
5996066 | Yung | Nov 1999 | A |
5999959 | Weng et al. | Dec 1999 | A |
6049815 | Lambert et al. | Apr 2000 | A |
6138208 | Dhong et al. | Oct 2000 | A |
6199086 | Dworkin et al. | Mar 2001 | B1 |
6199087 | Blake et al. | Mar 2001 | B1 |
6223320 | Dubey et al. | Apr 2001 | B1 |
6230179 | Dworkin et al. | May 2001 | B1 |
6246768 | Kim | Jun 2001 | B1 |
6285607 | Sinclair | Sep 2001 | B1 |
6317763 | Vatinel | Nov 2001 | B1 |
6317819 | Morton | Nov 2001 | B1 |
6349318 | Vanstone et al. | Feb 2002 | B1 |
6384713 | Yu | May 2002 | B1 |
6389088 | Blois et al. | May 2002 | B1 |
6434662 | Greene et al. | Aug 2002 | B1 |
6480845 | Egolf et al. | Nov 2002 | B1 |
6539477 | Seawright | Mar 2003 | B1 |
6587864 | Stein et al. | Jul 2003 | B2 |
6631466 | Chopra et al. | Oct 2003 | B1 |
6738794 | Stein et al. | May 2004 | B2 |
6766345 | Stein et al. | Jul 2004 | B2 |
7133889 | Parthasarathy et al. | Nov 2006 | B2 |
20030093450 | Chen | May 2003 | A1 |
20030110196 | Stein et al. | Jun 2003 | A1 |
20030115234 | Stein et al. | Jun 2003 | A1 |
20030133568 | Stein et al. | Jul 2003 | A1 |
20030135530 | Parthasarathy et al. | Jul 2003 | A1 |
20030140211 | Stein et al. | Jul 2003 | A1 |
20030140212 | Stein et al. | Jul 2003 | A1 |
20030140213 | Stein et al. | Jul 2003 | A1 |
20030149857 | Stein et al. | Aug 2003 | A1 |
20040078409 | Stein et al. | Apr 2004 | A1 |
20040145942 | Leijten-Nowak | Jul 2004 | A1 |
20040210618 | Stein et al. | Oct 2004 | A1 |
20060080376 | Zhang et al. | Apr 2006 | A1 |
Number | Date | Country | |
---|---|---|---|
20060123325 A1 | Jun 2006 | US |