4 results about "Encrypted key exchange" patented technology

Use of a neutrino detector as a trusted node in a cryptographic key exchange procedure between a first communication endpoint and a second communication endpoint, wherein the neutrino detector: - receives a first cryptographic key from the first communication endpoint via a first neutrino-based communication channel, - receives a second cryptographic key from the second communication endpoint via a second neutrino-based communication channel, - stores the two cryptographic keys in a key memory, - receives a random number (RND) generated at the first communication endpoint via a public communication channel, which is encrypted using the first cryptographic key.- the random number (RND) is decrypted using the stored first cryptographic key and - the decrypted random number (RND) is encrypted using the second cryptographic key stored in the key memory and sent via a public communication channel to the second communication endpoint to enable the second communication endpoint to reconstruct the random number (RND) using the second cryptographic key known to it, so that the first and second communication endpoints have a common random number (RND) as a cryptographic key for the symmetric encryption of user data.

Techniques relating to cryptographic key exchange operations are disclosed. In some embodiments, a computing device includes a cryptographic circuit coupled to a secure memory to which the computing device's processor has no access. Program instructions executed on the computing device can request a key exchange to establish a shared secret with another device. The cryptographic circuit is configured to perform the key exchange, including deriving the shared secret using private key material held in the secure memory.In some embodiments, the key exchange includes verifying a key authorization data structure issued by a key authorization instance, comprising a first public key of a first participant authorization instance and a second public key of a second participant authorization instance. Upon successful verification, the exchange uses a public key pair attested by the first participant authorization instance as belonging to a member of the first device group.

A security platform architecture is described herein. The security platform architecture includes multiple layers and utilizes a combination of encryption and other security features to generate a secure environment.

This application provides a security authentication method and apparatus applied to Wi-Fi. An access point AP negotiates, based on a password, a pairwise master key PMK with a first device based on a twin base password encrypted key exchange TBPEKE protocol, where the password is a shared key between the AP and the first device; and the AP performs a 4-way handshake with the first device based on the PMK. Therefore, in embodiments of this application, a PMK with a high entropy value can be generated by performing a TBPEKE procedure, so that the security authentication method provided in embodiments of this application can help resist an offline dictionary attack.