Configurable device for lattice-based cryptography

Abstract

Some embodiments relate to a first electronic network node is provided configured for a cryptographic operation. The first network node is configured to receive as input a difficulty parameter (d), and a structure parameter (n), and to obtain a shared matrix (A), the shared matrix being shared a second network node through a communication interface, entries in the shared matrix (A) being selectedmodulo a first modulus (q), the shared matrix (A) being a square matrix (k*k) of dimension (k) equal to the difficulty parameter (d) divided by the structure parameter (n), the entries in the shared matrix (A) being polynomials modulo a reduction polynomial (f) of degree equal to the structure parameter (n), said cryptographic operation using the shared matrix.

Description

technical field [0001] The present invention relates to a network node configured for cryptographic operations, a cryptographic operation method, and a computer-readable medium. Background technique [0002] In cryptography, a key agreement protocol is a protocol by which two or more parties that have not shared a public key can agree on a key. Preferably, both parties can influence the outcome such that neither party can force the choice of key. An attacker who has eavesdropped on all communications between the two parties should know nothing about the key. However, while an attacker who sees the same communication gains nothing or much, the parties themselves may derive the shared secret. Key agreement protocols may be used, for example, to secure communications, for example to encrypt and / or authenticate messages between two parties. [0003] To facilitate secure communication between parties, key agreement protocols are sometimes further subdivided into cryptographic ...

AI Technical Summary

Problems solved by technology

Not only must every scenario be coded, but every scenario must be debugged to ensure they do not contain critical vulnerabilities that could compromise their security

On the other hand, not implementing all scenarios, or at least most of them, also implies certain risks

If one of the above problems is broken, such as RLWE or modular lattice, the corresponding scheme is completely broken

Images