40 results about "Cryptosystem" patented technology

The invention provides a quantum circuit system based on an AES cryptosystem and an encryption method. The quantum circuit system based on the AES cryptosystem comprises a byte replacement module which adopts a pre-optimized S-box query circuit to realize non-linear byte replacement; the row shift module completes in-row byte cyclic shift through quantum bit exchange operation; the column confusion module realizes a matrix multiplication circuit based on finite field operation, and a quantum circuit of the column confusion module is generated by a depth-first matrix decomposition algorithm; and the round key adding module realizes XOR operation of a round key and a state by using a CNOT gate array, and a key required by the round key adding module is dynamically generated through a key expansion circuit. And a compact Z-shaped architecture is adopted to optimize time sequence scheduling and resource allocation of each module. On the premise of keeping the quantum bit resource usage amount equivalent to that of an original Z-shaped architecture, the quantum circuit depth is remarkably reduced, and higher fidelity and shorter execution time can be realized on NISQ equipment.

The application provides a power plant data security processing method, and belongs to the technical field of power Internet of Things security and privacy computing, which can at least partially solve the problems of complex certificate management of power plant monitoring system, large data aggregation calculation overhead and privacy leakage risk of cloud analysis in the prior art. The application comprises: generating a double-factor private key based on a certificateless public key cryptography system; serializing and encoding multi-dimensional operation data into a single integer using the Chinese remainder theorem; performing homomorphic encryption and signature on the encoded data using the double-factor private key, verifying the signature in batches on the edge side and aggregating in the ciphertext state; loading a neural network model adapted to homomorphic encryption on the cloud to perform ciphertext domain reasoning on the aggregated ciphertext; and decrypting the operation state analysis result on the authorized side. The application realizes ciphertext availability of power plant core data while ensuring data transmission integrity and confidentiality, and reduces communication and calculation overhead.

The invention relates to a calculation accelerator (10) adapted to carry out calculations according to a first cryptosystem and a second cryptosystem, the first cryptosystem being a lattice-based cryptosystem and the second cryptosystem being a code-based cryptosystem, the calculation accelerator (10) comprising several calculation modules, each calculation module applying an operation on input signals to obtain an output signal, namely: - a first calculation module (M1) configurable to implement modular addition or carryless addition, - a second calculation module (M2) configurable to implement identity with relation to one of the input signals, modular subtraction, modular addition and carryless addition, - a third calculation module (M3) configurable to implement integer multiplication and carryless multiplication, and - a fourth calculation module (M4) configurable to implement identity with relation to one of the input signals; modular subtraction, modular addition and carryless addition.

The invention discloses a heterogeneous high-performance distributed key agreement algorithm for supporting and resisting malicious participants in a block chain. The method is characterized in that a group negotiation intermediate message is generated under a heterogeneous cryptosystem between a certificate-based public key cryptosystem and a certificateless cryptosystem, and a cryptosystem conversion process is not needed, so that the performance overhead is reduced. All intermediate messages may be signed to verify integrity and used to identify, audit and defend malicious disruption and collusion attacks by participants. After key negotiation is completed, any encryptor can dynamically establish a session, customize a receiver group and generate a session key, and only a specified receiver can decrypt. According to the scheme, specific cryptographic operation and conversion rules are designed according to unique system composition and interaction processes in the heterogeneous system, and provable security of the heterogeneous cryptographic system is achieved.

An encryption unit (403) that an encryption apparatus (400) includes, when a user secret key SKΓ is generated using a secret key MSK of attribute based encryption and a set of attributes Γ corresponding to a decryption-possible condition L, generates a key K and a ciphertext P corresponding to the key K by encrypting the decryption-possible condition L using, as an encryption key of the attribute based encryption, a key PK consisting of a public key MPK corresponding to the secret key MSK and a public key PQCPK of post quantum cryptography, regards a part of the ciphertext P where the decryption-possible condition L is encrypted based on a secret value as P-D, regards a part of the ciphertext P where the secret value that is shared is encrypted as P-SS, and generates K′ and P′-D by randomizing each of the key K and the P-D using a random number R, and generates a ciphertext C by encrypting data consisting of the P-D and the random number R using the public key PQCPK. Here, the P-SS, the P′-D, and the K′ are decryption-possible verification parameters corresponding to the user secret key SKΓ.

The present application relates to a kind of based on Paillier cryptosystem's security homomorphism k-means clustering method, the system including cloud server, computing service provider, several user terminals, each user terminal is registered on cloud server, and with communication connection, cloud server is connected with computing service provider;The method includes data preprocessing process, security K-means clustering process, iteration update process, result decryption process.The present application provides a kind of practical privacy protection data clustering solution, and promotes the development of privacy protection data mining technology.

A method of performing a cryptographic operation is described, the method comprising performing masking inversion on a ring element f belonging to Rq, where Rq is an exchange ring, and the ring element f is represented by a plurality of shares. A masking inversion is calculated by performing a number-theoretical transformation on a plurality of shares to generate a corresponding plurality of shares of a polynomial function a, with each coefficient; i belongs to [n]; determining a set of coefficients, the set of coefficients corresponding to a product of the n coefficients of the plurality of shares; determining inverse elements of a set of coefficients corresponding to a product of the n coefficients of the plurality of shares; generating a set of coefficients ci of a plurality of shares corresponding to inverse elements of the polynomial function a; wherein an i-th coefficient of the plurality of shares is calculated by multiplying a value derived from an inverse of a product of n coefficients of the plurality of shares by values derived from other coefficients of the plurality of shares; and performing an inverse number theory transform on the plurality of shares corresponding to the inverse element of the polynomial function a to generate a plurality of shares corresponding to the inverse element of the ring element f. By applying the NTT transform to the masked ring elements and then determining inverse elements of a set of coefficients corresponding to the product of the masked transform coefficients, the processing cost of inversion of the masked ring elements can be reduced.

The invention discloses a cross-heterogeneous domain authentication method based on proxy re-signature applied to industrial Internet of Things, which comprises the following steps: Internet of Things equipment generates an anonymous identity, and the anonymous identity is verified and stored by an authentication center; in the cross-domain authentication stage, the equipment performs cross-domain authentication through an anonymous identity, and an edge server performs proxy re-signature; and in the batch cross-domain authentication stage, the cross-domain authentication problem of multiple devices is solved, and the efficiency of the production process is improved. According to the method, the certificateless cryptosystem is adopted to generate the anonymous identity, a dynamic anonymous identity updating mechanism is introduced to ensure security identity verification and privacy protection of the equipment, a batch authentication strategy is used for reducing communication overhead and improving authentication efficiency, and formalized verification further proves the correctness of security certification. According to the method, privacy, non-linkability, non-repudiation and external aggression resistance are ensured, and more functions are provided under the condition of keeping similar overhead.

The invention relates to an attribute-aware dynamic encryption access control method, and belongs to the technical field of communication security. According to the technical scheme, the method comprises the steps that a multi-channel social attribute tensor is constructed by collecting a static social relation, a dynamic behavior relation, a bidirectional interaction relation and a deep social relation of a user, and a social attribute vector is obtained through vector embedding; a linear secret sharing structure access matrix is generated based on the vector, an access strategy is adjusted in real time according to a behavior deviation score and a neighborhood consistency index, a ring learning error lattice password is adopted to generate a user private key bound with a social state, and attribute-based encryption is performed according to an access structure to generate a ciphertext; during decryption, verifying social attribute satisfaction and then recovering a plaintext, and realizing verifiable revocation and social state tracking by using a Merkle tree and a fingerprint chain; according to the invention, the dynamic adaptability and security of access control can be obviously improved.

An adaptive, hybrid, and resource-efficient crypto system for optimized IoT security and performance, consisting of: a variety of IoT devices; The IoT gateway is communicatively connected to the multitude of IoT devices; a trust assessment module configured to calculate trust scores for each IoT device in real time based on anomaly detection results, historical security events, energy consumption patterns, and network activity patterns; a modified Advanced Encryption Standard (M-AES) encryption module configured to perform encryption operations using an XOR triplet diffusion mechanism consisting of four XOR operations that combine different bytes of state data to achieve diffusion; an Elliptic Curve Cryptography (ECC) module configured to perform Elliptic Curve Diffie-Hellman key exchange operations for secure key generation; A Reinforcement Learning Security Agent (RLSA) module configured to: monitor a multidimensional state space encompassing the power level, network load, trust level, and key age of IoT devices; select actions from an action space that includes maintaining current encryption keys, initiating key rotation, and changing encryption strength; optimize security configurations using the Q-Learning algorithm with a reward function that balances security benefits and energy consumption; a key management module configured to perform dynamic key rotation based on trust values ​​and energy thresholds determined by the reinforcement learning security agent; and a communication interface configured to enable encrypted data transmission between IoT devices and the IoT gateway using the hybrid cryptographic operations M-AES and ECC.

The application provides a quantum circuit system and encryption method based on AES encryption system, which comprises a byte substitution module, a row shift module and a column confusion module; the byte substitution module uses a pre-optimized S-box query circuit to realize nonlinear byte substitution; the row shift module completes the cyclic shift of the bytes in the row through a quantum bit exchange operation; the column confusion module realizes a matrix multiplication circuit based on finite field operation, wherein the quantum circuit of the column confusion module is generated by a depth-first matrix decomposition algorithm; the round key addition module uses a CNOT gate array to realize the XOR operation of the round key and the state, and the required key of the round key addition module is dynamically generated through a key expansion circuit. The timing scheduling and resource allocation of each module are optimized by using a compact Z-shaped architecture. Under the premise of keeping the quantum bit resource usage equivalent to the original Z-shaped architecture, the quantum circuit depth is significantly reduced, and higher fidelity and shorter execution time can be realized on NISQ devices.

The invention relates to the technical field of information security, and particularly discloses an ECDH-based offline dynamic password authentication method, which comprises the following steps that: an authentication server pre-stores an elliptic curve public key of a user; the authentication server generates a temporary key pair for each time of authentication, performs ECDH calculation on the temporary key pair and a user public key to obtain a shared secret, and immediately destroys a temporary private key after generating an expected dynamic password OTP; the authentication server encodes the temporary public key, the challenge data and the OTP digit parameter into a two-dimensional code for display; the user equipment scans the two-dimensional code, performs ECDH calculation by using a local private key, and generates the same dynamic password OTP'in an off-line manner; and the user inputs the dynamic password OTP'to complete authentication. According to the invention, an asymmetric cryptosystem is adopted, and the server only stores the public key of the user, so that the single-point fault risk of large-scale key leakage at the server side is eliminated. Different temporary key pairs are used for authentication each time and are destroyed immediately after being used, and even if the system is attacked, key information of historical authentication sessions cannot be recovered.

The application discloses a modulus decomposition method of an RSA variant cryptosystem, and classifies and discusses a public-private key pair of the RSA variant cryptosystem. 2 <ed<N 3 When the public-private key pair satisfies N 3 <ed<N 4 , the modulus N of the RSA is decomposed by using an enumeration method to continuously test a candidate value, finding a suitable k value to calculate a key equation, and by using a lattice theory analysis skill, an LLL algorithm to find a short vector in a lattice, a variant of a Coppersmith method and a direct application of an approximate integer common factor of a Howgrave-Graham algorithm to transform a modulus equation solving problem into a short vector solving problem in a lattice, and the modulus N of the RSA is decomposed. 12 The time complexity of the method for decomposing a polynomial is O(2log N). The application enriches the application of lattice cryptography on the RSA algorithm and improves the security of the variant RSA algorithm.

The application discloses an efficient lightweight NTT multiplier circuit based on a lattice cryptosystem, comprising an NTT control unit, a dual-port RAM and two parallel NTT butterfly calculation units; wherein the NTT butterfly calculation unit mode is switchable, the NTT control unit is connected with the dual-port RAM, and the dual-port RAM is connected with the two parallel NTT butterfly calculation units respectively; data is input into the NTT butterfly calculation unit through the dual-port RAM, different NTT butterfly calculation unit modes are selected through a mode control signal of the NTT control unit, the NTT butterfly calculation unit processes data, the calculation result is reduced through a Barrett reduction unit, and the result is written back into the dual-port RAM in accordance with a specific sequence of the NTT algorithm. The application reduces the calculation complexity and hardware resource consumption, and improves the operation speed of the modular multiplication unit.

The invention relates to the technical field of network security and cryptography, and discloses an intelligent power grid terminal group security communication method and device based on certificateless public key cryptography, comprising three stages of system initialization and registration, key negotiation and communication, and fault self-healing. A key generation center constructs certificateless public key cryptosystem parameters of elliptic curve cryptography, a security gateway carries out offline registration, an intelligent terminal carries out broadcast registration and is arbitrated and taken over by an intra-group gateway, and encryption communication of a management-gateway layer, a gateway terminal layer and a group broadcast layer is realized by adopting a layered key negotiation architecture. A gateway fault self-healing mechanism of heartbeat detection and arbitration takeover is designed, and meanwhile, a device for realizing the method is matched. Certificate management and key escrow risks are eliminated, the lightweight operation requirement of the terminal is adapted, terminal dynamic registration and gateway fault self-recovery are realized, the broadcast communication efficiency is improved, high communication security, high availability and high efficiency are considered, and the method is suitable for a large-scale smart grid terminal group security communication scene.

This invention discloses an ultra-high-speed post-quantum cryptographic secure communication method for on-orbit intelligent agents, belonging to the field of communication technology. The method includes: generating an encryption key pair based on a post-quantum cryptographic algorithm and a signature key pair based on a quantum-resistant digital signature algorithm for each on-orbit intelligent agent node; recording the two public key information in a blockchain ledger through consensus; obtaining the receiver's public key information from the blockchain ledger, generating a session seed using a post-quantum key encapsulation method and encapsulating it into ciphertext, digitally signing the ciphertext-containing information using a quantum-resistant signature private key, and then sending it; upon receiving the information, the receiver verifies the signature, confirms the identity's legitimacy, and decrypts to obtain the session seed; based on the session seed, both communicating parties generate a one-time session key and transmit business data with symmetric encryption; after communication ends, a communication audit log is generated based on the transmitted information. This invention improves the security of on-orbit intelligent agent communication using the above method.

The cryptographic system (1) performs a cryptographic process in which a Richelot homology sequence which starts from an Abelian surface A0 and ends at an Abelian surface A s is set as a secret key, and the Abelian surface A s is set as a public key. The encryption device (20) generates a Richelot homology sequence which moves the Abelian surface A s as the public key by encoding a plaintext m, and calculates the Abelian surface A m as a ciphertext. The decryption device (30) calculates a Richelot homology sequence which starts from the Abelian surface A m as the public key and ends at the Abelian surface A s as the ciphertext, based on the Richelot homology sequence as the secret key. The decryption device (30) decrypts the ciphertext by moving the Abelian surface A m as the ciphertext by the Richelot homology sequence as the secret key.

Methods and systems for performing efficient privacy-preserving machine learning (or other computationally intensive private computing operations) based on homomorphic encryption are disclosed. Two computer systems can collectively perform these methods on behalf of a client computer using threshold leveled homomorphic encryption (LHE) or fully homomorphic encryption (FHE), e.g., using the Cheon-Kim-Kim-Song cryptosystem. For example, two computer systems could privately evaluate a client's encrypted inputs using a machine learning model and return an encrypted output to the client, preserving the privacy of the client's data. Methods according to embodiments include efficient bootstrapping methods, ciphertext packing methods, encryption parameter optimization methods, and methods for privately fine-tuning machine learning models using low rank adaptation (LoRA). Embodiments improve the speed and efficiency of private HE-based computation, which are often several orders of magnitude slower than non-private computation.

The application discloses a smart marketing terminal power data communication security protection method and system, and belongs to the field of power data security, which comprises the following steps: collecting electromagnetic noise spectrum data through a terminal built-in environment electromagnetic sensing module, extracting electromagnetic characteristic factors and constructing an associated model of the electromagnetic characteristic factors and the complexity of elliptic curve cryptography; then building a terminal twin image, combining a long short-term memory neural network to predict a communication instruction sequence and calculate a deviation coefficient; classifying and screening the power data collected by the terminal, integrating the desensitized privacy data into a hash segment of the unique identification of the terminal device, and generating a desensitized power data packet containing the terminal identity identification; generating a data digest according to the encryption parameters determined by the associated model and verifying the access authority, converting the data collection timestamp into a binary coding sequence and embedding the data digest, generating an encrypted data packet with time sequence traceability watermark, and uploading the block chain for notarization; the application realizes the whole-process safety control of power data, and improves the communication security and data credibility.

The application discloses a kind of based on lattice cryptosystem and double-layer blockchain's vehicle networking security authentication and abnormal protection method this method fuses lattice cryptosystem (MLWE / RLWE), double-layer alliance chain and decentralized identifier DID technology, successively through system initialization, DID registration and lattice key generation, cross-domain authentication and RLWE key negotiation, reputation feedback and abnormal monitoring, five stages of malicious node revocation, build "identity authentication-key negotiation-reputation control-node revocation" full closed loop security system.Adopt MLWE to realize anti-quantum long-term identity authentication, RLWE completes efficient temporary session key negotiation;Double-layer blockchain realizes backbone layer global storage and user layer localization management, reduces consensus delay, improves real-time performance;Combined with DID decentralized identity and blockchain reputation mechanism, realize vehicle cross-domain fast authentication, abnormal accurate identification and malicious node global network isolation.The application has the characteristics of anti-quantum attack, decentralization, high real-time performance, engineering can be landed, etc., suitable for vehicle-to-everything (V2X) scene, can meet the identity of vehicle high dynamic communication, data security and global protection demand.

The invention discloses a password authentication connection method based on a Kyber key encapsulation algorithm, and provides a novel password authentication connection mechanism conforming to the ICAO9303 technical specification, the mechanism adopts a protocol architecture of negotiating a generator first and then negotiating a key, a high-strength session key can still be generated in a weak password scene through a cryptography enhancement technology, and the password authentication connection method has the advantages of being simple in structure, convenient to operate and high in practicability. Therefore, the security design goal that weak passwords support strong session keys is achieved, and the protocol is realized based on a lattice cryptosystem and can resist future quantum computing attacks. According to the method, anti-quantum migration transformation is carried out on a password authentication connection protocol (PACE) of an electronic machine-readable travel certificate in ICAO9303 based on a Kyber key encapsulation algorithm, and an improved key generation algorithm and an improved key encapsulation algorithm based on a temporary random matrix are provided, so that the PACE protocol has the capability of resisting quantum computing attack.

The present application relates to a kind of separate point multiplication method and hardware circuit, belong to cryptography field.The method of the present application includes: three parts;Wherein, the first part is NAF encoding operation, the continuous point multiplication calculation process of second part is point expansion calculation, the continuous point addition / subtraction calculation process of third part is point accumulation calculation.The method of the present application includes: fixed point preprocessing mode, random point point multiplication serial mode, random point point multiplication parallel mode, random point point multiplication pipelined mode, fixed point acceleration point multiplication mode, random point fixed point mixed pipelined mode.The present application combines the application characteristics of ECC elliptic curve cryptosystem, provides six application modes, with more extensive and more flexible application effect, can obtain better performance under the constraint of different hardware resources.

The invention discloses an improved verification cross-chain query method based on a block chain, and the method comprises the steps: firstly obtaining a to-be-queried block chain address, querying a cross-chain dependency relationship of the address in an inverted index of a dependency chain, and rapidly positioning a related cross-chain transaction record; by adopting a cumulative hash verification algorithm based on an RSA cryptosystem, verifying the integrity of a query result by generating a global verification value and an exclusion proof; before transaction chain query, data integrity is ensured by using a bidirectional Hash cross validation algorithm; by adopting an intelligent fragmentation technology based on LSTM dynamic prediction, the transaction frequency is predicted according to a user historical transaction sequence, and highly active users are dynamically allocated to the same fragment to realize load balancing; querying the transaction records in parallel in the transaction chain fragments according to the related address set, and integrating to generate a complete cross-chain transaction process; according to the method, the single-point fault risk is effectively reduced, and the cross-chain query performance and reliability are improved.

The invention discloses an efficient circuit bootstrap method, and belongs to the technical field of cryptography and privacy computing. The method constructs a'bootstrap-extraction-conversion 'three-level pipeline architecture based on a lattice-on-loop cryptosystem, and comprises the following steps: firstly, performing algebraic expansion on an input ciphertext through a multi-valued function bootstrap technology to generate a low-noise and structured RLWE ciphertext; secondly, performing homomorphic projection on the RLWE ciphertext by using a homomorphic trace operator, extracting effective information components, and generating a GRLWE format ciphertext; and finally, converting the ciphertext in the GRLWE format into the ciphertext in the NGS format through an RLTN or DrRLTN conversion algorithm. According to the method, the high calculation complexity of traditional RLWE-to-LWE key switching is avoided, the bootstrap efficiency is remarkably improved, and the method is particularly suitable for high-precision lookup table evaluation, large-scale Boolean circuit homomorphic operation and real-time privacy calculation scenes.

The application discloses an aircraft anonymous authentication method based on pseudonym aggregation index, and the method constructs a hierarchical collaborative architecture of a trusted authority center, a regional management agency, a low-altitude base station and an unmanned aircraft, completes system initialization, strong authentication and key negotiation based on an elliptic curve cryptography system, generates an aircraft pseudonym by the regional management agency, and generates a unique index through aggregation operation, and the index is chained together with a certificate, and the trusted authority center stores the mapping relationship between the index and the real identity. The aircraft initiates an anonymous authentication request through additive homomorphic encryption, and the index level fast authentication is completed by a calculation node after verification by the base station; in a malicious scene, the ciphertext pseudonym is aggregated, and the real identity is traced back by controlled decryption of the trusted authority center, and the whole life cycle management of the certificate is realized, forming a 'one-time strong authentication and multiple fast authentication' mode. The method reduces authentication complexity and time delay, improves high-concurrency processing capacity, and realizes privacy protection and security supervision.

A system and method for cryptographic decryption using deterministic collapse resonance based on the Total Wave Modified Schrödinger Equation (TWMSE). An encrypted problem state is encoded as a system wavefunction, while candidate solutions are represented as observer wavefunctions. A collapse field with tunable parameters ensures destructive interference cancels incorrect candidates and constructive resonance deterministically selects the correct solution. Unlike brute-force search or probabilistic quantum measurement, the method achieves decryption in a single engineered collapse. Hardware embodiments include optical photonic systems, neuromorphic processors, and resonant field architectures. Applications extend to RSA, Diffie-Hellman, elliptic curve cryptography, lattice-based post-quantum protocols, blockchain, and secure messaging frameworks. Proof-of-concept demonstrations on small instances, including factorization of $N=15$, illustrate feasibility at toy scale. Scaling to larger cryptosystems is envisioned through adaptive parameter control, resonance calibration, and experimental implementation.

The present invention relates to an apparatus, a computer-readable storage medium, a method, and a system for a cryptosystem based on singular matrices. In particular, an encryption scheme of the cryptosystem comprises a generation of singular matrices representing the whole or a part of an information block to obtain a ciphertext and a private key to be sent to an intended receiver. In similar manner, a decryption scheme of the cryptosystem comprises an inversion of singular matrices representing the whole or a part of said ciphertext to obtain the information block from a sender. Certain embodiments comprising of an at least one processor, an at least one memory, an at least one storage medium, an at least one communication implement, and an at least one display implement is used to implement the present invention.

In a general aspect, digital certificates are generated. In some aspects, a method includes accessing a primary root certificate of a root certificate authority of a PKI system. The primary root certificate includes a first public key based on a first cryptosystem and a first signature generated with a private key that corresponds to the first public key. A secondary crypto-agile root certificate is generated. The secondary crypto-agile root certificate includes the first public key of the root certificate authority, a second public key of the root certificate authority that is based on a second cryptosystem, a second signature of the root certificate authority that is created with a second private key that corresponds to the second public key, and a third signature of the root certificate authority that is generated with the first private key. The secondary crypto-agile root certificate is propagated to subordinate entities in the PKI system.