Post quantum cryptography key management system and post quantum cryptography key management method

Abstract

This application relates to a post-quantum cryptography key management system, comprising a hardware-protected security element, a secure key store, and a processor. The hardware-protected security element is adapted to store a device root key. The processor is electrically coupled to the hardware-protected security element and the secure key store, and is programmed to perform a number of operations. These operations include generating a master key protected by the device root key; generating a post-quantum cryptography key pair as a session key in response to a key generation request, wherein the post-quantum cryptography key pair contains a public key and a private key; applying a compression algorithm to the private key to generate a compressed private key; encrypting the compressed private key using the master key to generate an encrypted private key; and storing the encrypted private key in the secure key store.

Claims

1. A post-quantum cryptography key management system, comprising: a hardware-protected security element adapted to store a device root key; a secure key store; and a processor coupled to the hardware-protected security element and the secure key store, and programmed to perform a number of operations, the operations including: generating a master key protected by the device root key; generating a post-quantum cryptography key pair as a session key in response to a key generation request, the post-quantum cryptography key pair including a public key and a private key; applying a compression algorithm to the private key to generate a compressed private key; encrypting the compressed private key using the master key to generate an encrypted private key; and storing the encrypted private key in the secure key store.

2. The quantum cryptography key management system as described in request item 1, wherein, This compression algorithm is a lossless and structure-aware compression algorithm.

3. A quantum cryptography key management system as described in request item 1, wherein, This hardware protection security element is a Trusted Platform Module (TPM).

4. The post-quantum cryptography key management system as described in claim 1 further includes a post-quantum cryptography algorithm module adapted to store a post-quantum cryptography algorithm optimized for an embedded hardware architecture, the post-quantum cryptography algorithm being used to generate the post-quantum cryptography key pair.

5. A quantum cryptography key management system as described in request item 4, wherein, The embedded hardware architecture is based on the ARM architecture.

6. A quantum cryptography key management system as described in request item 1, wherein, The secure key store is a flash memory.

7. The quantum cryptography key management system described in claim 1 further includes a key management application interface adapted to generate the key generation request.

8. A post-quantum cryptography key management method, applicable to a post-quantum cryptography key management system, the post-quantum cryptography key management system comprising a hardware-protected security element and a secure key store, the post-quantum cryptography key management method comprising: storing a device root key using the hardware-protected security element; generating a master key protected by the device root key; generating a post-quantum cryptography key pair as a session key in response to a key generation request, the post-quantum cryptography key pair comprising a public key and a private key; applying a compression algorithm to the private key to generate a compressed private key; encrypting the compressed private key using the master key to generate an encrypted private key; and storing the encrypted private key in the secure key store.

9. The quantum cryptography key management method as described in claim 8, wherein, This compression algorithm is a lossless and structure-aware compression algorithm.

10. The quantum cryptography key management method as described in claim 8, wherein, This hardware protection security element is a Trusted Platform Module (TPM).

11. The post-quantum cryptography key management method as described in claim 8 further includes a post-quantum cryptography algorithm module adapted to store a post-quantum cryptography algorithm optimized for an embedded hardware architecture, the post-quantum cryptography algorithm being used to generate the post-quantum cryptography key pair.

12. The quantum cryptography key management method as described in claim 11, wherein, The embedded hardware architecture is based on the ARM architecture.

13. The quantum cryptography key management method as described in claim 8, wherein, The secure key store is a flash memory.

Images