Patent ID: 8467527

Claim:
A system comprising: a cryptographic engine to derive a cryptographic client session key, client_key, for each of a plurality of clients using a derivation formula as follows: client_key — MSB =AES128(base_key — 1, client_ID), (1) client_key — LSB =AES128(base_key — 2, client_ID+pad), and (2) client_key =client_key — MSB ∥client_key — LSB , wherein (1) and (2) are executed in parallel; and a medium access control (MAC) processing unit coupled to the cryptographic engine, wherein AES128 is an Advanced Encryption Standard cryptographic operation using a 128-bit key and having a 128-bit output, client_key_MSB and client_key_LSB are 128-bit outputs of AES128, base_key — 1 and base_key — 2 are derivation keys provided by a domain controller, client_ID is 128 bits of data that identify a client, pad is one of a null value, a value of a counter, and a prescribed string, and ∥ is a concatenation operation, wherein the cryptographic engine is configured to derive the client session key by concatenating the outputs of the parallel operations AES128(base_key — 1, client_ID) and AES128(base_key — 2, client_ID+pad).