1. A gear train of an automatic transmission for a vehicle comprising first and second planetary gear sets arranged on a first shaft, a third planetary gear set arranged on a second shaft, which is parallel to the first shaft and connected to the first and second planetary gear sets through first and second transfer gears and a plurality of friction members, wherein:
the first planetary gear set comprises:
a first sun gear that always acts as a fixed element;
a first ring gear that acts as a reduced speed output element; and
a first planet carrier that is connected to an input shaft and always acts as an input element and an output element;
the second planetary gear set comprises:
a second sun gear that is connected to the first ring gear and always acts as an input element;
a second planet carrier that is selectively connected to the input shaft and selectively connected to a transmission housing and selectively acts as an input element, a fixed element, and a output element; and
a second ring gear that selectively acts as an output element and a fixed element;
and the third planetary gear set comprises:
a third sun gear that is selectively connected to the first ring gear, the first planet carrier, the second ring gear or the transmission housing, and selectively acts as an input element and a fixed element;
a third ring gear that is connected to the second planet carrier and selectively acts as an input element and a fixed element; and
a third planet carrier that acts as an output element.
2. The gear train of an automatic transmission of claim 1, wherein:
the first planetary gear set is a double pinion planetary gear set;
the second planetary gear set is a single pinion planetary gear set; and
the third planetary gear set is a double pinion planetary gear set.
3. The gear train of an automatic transmission of claim 1, wherein:
the first transfer gear is connected to the third sun gear and selectively connected to the first planet carrier, the first ring gear and the second ring gear;
the second transfer gear is connected to the third ring gear and the second planet carrier, and selectively connected to the input shaft; and
the friction element comprises:
a first clutch that selectively connects the second ring gear and the first transfer gear;
a second clutch that selectively connects the first ring gear and the first transfer gear;
a third clutch that selectively connects the input shaft and the second transfer gear;
a fourth clutch that selectively connects the first planet carrier and the first transfer gear;
a first brake that selectively connects the second planet carrier and the transmission housing; and
a second brake that selectively connects the first transfer gear and the transmission housing.
4. The gear train of an automatic transmission of claim 3, wherein:
the first clutch and the first brake are operated in a first forward speed;
the first clutch and the second brake are operated in a second forward speed;
the first and second clutches are operated in a third forward speed;
the first and fourth clutches are operated in a fourth forward speed;
the first and third clutches are operated in a fifth forward speed;
the third and fourth clutches are operated in a sixth forward speed;
the second and third clutches are operated in a seventh forward speed;
the third clutch and the second brake are operated in an eighth forward speed; and
the second clutch and the first brake are operated in a reverse speed.
5. The gear train of an automatic transmission of claim 1, wherein the first sun gear is connected to the transmission housing.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. An incremental MAC tag generation device comprising:
a padding unit configured to input a final block of a plaintext (M) that has been divided into a plurality of blocks, and carry out padding on the final block of the plaintext (M) when a length of the final block of the plaintext (M) is less than a predetermined number of bits;
a cache reference parallel encryption unit configured to input blocks of the plaintext (M) other than the final block, a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032), and calculate an intermediate variable (S);
a scrambled hash unit configured to carry out scrambling processing on the intermediate variable (S), and calculate a hash value (V) by performing exclusive OR (XOR) on respective blocks of the scrambled intermediate variable (S) and the final block of the plaintext (M) output from the padding unit; and
a tag generation unit configured to calculate a tag by encrypting the hash value (V) by using a parameter to indicate the presence or absence of the padding by the padding unit,
wherein the cache reference parallel encryption unit compares the blocks of the plaintext (M) other than the final block with respective blocks of the plaintext (M\u2032),
when there exists a block of the plaintext (M\u2032) matched with a block of the plaintext (M), the cache reference parallel encryption unit uses a block of the intermediate variable (S\u2032) corresponding to the block of the plaintext (M\u2032) in the intermediate variable (S), and
when there exists no block of the plaintext (M\u2032) matched with a block of the plaintext (M), the cache reference parallel encryption unit encrypts the block of the plaintext (M) and uses the encrypted block of the plaintext (M) in the intermediate variable (S).
2. The incremental MAC tag generation device according to claim 1, wherein the scrambling processing of the scrambled hash unit cyclically shifts a partial sequence having a specific prime length of each of the blocks of the input intermediate variable (S).
3. The incremental MAC tag generation device according to claim 1, wherein the scrambling processing of the scrambled hash unit multiplies the respective input blocks of the intermediate variable (S) by constants having different values in a specific finite field.
4. The incremental MAC tag generation device according to claim 1, wherein the scrambling processing of the scrambled hash unit applies respective input blocks of the intermediate variable (S) to a linear shift register, and performs operations as many as the same number as the input blocks.
5. A message authentication device comprising:
an incremental MAC tag generation device according to claim 1;
an input unit configured to input a plaintext (M), a tag (T) corresponding to the plaintext (M), a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032);
a local tag verification unit configured to verify a local tag (Z) generated by the incremental MAC tag generation device by comparing the local tag (Z) with the tag (T) input from the input unit by using the plaintext (M), the plaintext (M\u2032), and the intermediate variable (S\u2032); and
an output unit configured to output the verification result of the local tag verification unit.
6. An incremental MAC tag generation method comprising:
inputting a final block of a plaintext (M) that has been divided into a plurality of blocks, and carrying out padding on the final block of the plaintext (M) when a length of the final block of the plaintext (M) is less than a predetermined number of bits;
inputting blocks of the plaintext (M) other than the final block, a cached plaintext (M\u2032), and an intermediate variable (S) obtained by encrypting the plaintext (M\u2032);
comparing the blocks of the plaintext (M) other than the final block with respective blocks of the plaintext (M\u2032);
when there exists a block of the plaintext (M\u2032) matched with a block of the plaintext (M), using a block of the intermediate variable (S\u2032) corresponding to the block of the plaintext (M\u2032) in the intermediate variable (S);
when there exists no block of the plaintext (M\u2032) matched with a block of the plaintext (M), calculating the intermediate variable (S) by encrypting the block of the plaintext (M);
performing scrambling processing on the intermediate variable (S), and calculating a hash value (V) by performing exclusive OR (XOR) on respective blocks of the scrambled intermediate variable (S) and the final block of the plaintext (M); and
calculating a tag by encrypting the hash value (V) by using a parameter to indicate the presence or absence of padding.
7. A non-transitory computer readable information recording medium storing an incremental MAC tag generation program that, when executed by a processor, performs a method for:
inputting a final block of a plaintext (M) that has been divided into a plurality of blocks, and carrying out padding on the final block of the plaintext (M) when a length of the final block of the plaintext (M) is less than a predetermined number of bits;
inputting blocks of the plaintext (M) other than the final block, a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032);
comparing the blocks of the plaintext (M) other than the final block with respective blocks of the plaintext (M\u2032);
when there exists a block of the cached plaintext (M\u2032) matched with a block of the plaintext (M), using a block of the intermediate variable (S\u2032) corresponding to the block of the cached plaintext (M) in the intermediate variable (S);
when there exists no block of the plaintext (M\u2032) matched with a block of the plaintext (M), calculating the intermediate variable (S) by encrypting the block of the plaintext (M);
performing scrambling processing on the intermediate variable (S), and calculating a hash value (V) by performing exclusive OR (XOR) on respective blocks of the scrambled intermediate variable (S) and the final block of the plaintext (M); and
calculating a tag by encrypting the hash value (V) by using a parameter to indicate the presence or absence of padding.
8. A message authentication device comprising:
an incremental MAC tag generation device according to claim 2;
an input unit configured to input a plaintext (M), a tag (T) corresponding to the plaintext (M), a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032);
a local tag verification unit configured to verify a local tag (Z) generated by the incremental MAC tag generation device by comparing the local tag (Z) with the tag (T) input from the input unit by using the plaintext (M), the plaintext (M\u2032), and the intermediate variable (S\u2032); and
an output unit configured to output the verification result of the local tag verification unit.
9. A message authentication device comprising:
an incremental MAC tag generation device according to claim 3;
an input unit configured to input a plaintext (M), a tag (T) corresponding to the plaintext (M), a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032);
a local tag verification unit configured to verify a local tag (Z) generated by the incremental MAC tag generation device by comparing the local tag (Z) with the tag (T) input from the input unit by using the plaintext (M), the plaintext (M\u2032), and the intermediate variable (S\u2032); and
an output unit configured to output the verification result of the local tag verification unit.
10. A message authentication device comprising:
an incremental MAC tag generation device according to claim 4;
an input unit configured to input a plaintext (M), a tag (T) corresponding to the plaintext (M), a cached plaintext (M\u2032), and an intermediate variable (S\u2032) obtained by encrypting the plaintext (M\u2032);
a local tag verification unit configured to verify a local tag (Z) generated by the incremental MAC tag generation device by comparing the local tag (Z) with the tag (T) input from the input unit by using the plaintext (M), the plaintext (M\u2032), and the intermediate variable (S\u2032); and
an output unit configured to output the verification result of the local tag verification unit.