108 results about "Post-quantum cryptography" patented technology

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

The invention discloses an intelligent system and method for fusing mental health evaluation in an interest scene based on an education robot. The system realizes non-intrusive mental health assessment by constructing a technical architecture of'multi-modal biological feature anonymization-quantum hybrid encryption-federated learning privacy protection-dynamic risk assessment '. The method is characterized by comprising the following steps of: (1) generating irreversible biological characteristic codes by adopting a chaos random number generator, and realizing anonymized association by combining a double hash chain technology; (2) designing a quantum enhanced hybrid encryption system, fusing an SM4 algorithm, NTRU post quantum cryptography and quantum key distribution; (3) developing a dynamic scene generator, and naturally fusing psychological test questions into interest topics by using a generative adversarial network (GAN) and a curiosity engine; (4) constructing a multi-modal emotion analysis system, and combining an LSTM + CNN hybrid model to realize physiology-behavior-voice data fusion analysis; and (5) deploying a federated learning framework, and protecting model training data through differential privacy noise injection (epsilon = 0.5).

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

Disclosed are various examples for managing post quantum cryptography migrations of application services. For example, a system can include a computing device that is configured to identify a uniform resource location associated with source code for an application service and identify a cryptographic primitive in the source code by scanning the source code. The computing device can be configured to generate a large language model prompt for a cryptographic bill of materials based at least in part on the cryptographic primitive. The cryptographic bill of materials for the source code can be generated by inputting the large language model prompt to a large language model application. The cryptographic bill of materials can include a list of cryptographic components.

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

The invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) security gateway communication method fused with a post quantum cryptography technology, which comprises the following steps of: S1, in a first-stage main mode of IKE (Internet Key Exchange) key agreement, replacing a traditional single SM2 algorithm and a digital certificate based on an SM2 cryptographic algorithm with an SM2 and PQC mixed algorithm and a mixed PQC digital certificate; s2, the initiator and the responder respectively use the PQC encryption key pair and the PQC signature key pair to carry out key exchange and data signature, and simultaneously use the SM2 encryption key pair and the SM2 signature key pair to carry out key exchange and data signature; s3, in the message 1, the initiator sends a security alliance load containing the attribute of the fused SM2 and PQC algorithm to the responder; s4, in the message 2, the responder feeds back a PQC series hybrid certificate and an SA proposal; and S5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification. According to the invention, the security of the IPSec VPN security gateway can be improved, and quantum computing attacks can be resisted.

Embodiments of the present disclosure provide techniques for providing secure communication for connected systems. The techniques may include receiving a communication session indication associated with a first connected system; authenticating the first connected system based on IAM policy; encrypting a message to generate an encrypted message based on a post quantum cryptography public key associated with the first connected system; and causing transmitting of the encrypted message to a second connected system.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The embodiment of the invention provides a mixed signature method, a signature verification method, electronic equipment and a computer readable storage medium. In the method, a to-be-signed target message is input into a first trusted execution environment for signature operation based on a traditional cryptographic algorithm to obtain a first digital signature, and then the target message and the first digital signature are input into a second trusted execution environment for signature operation based on post quantum cryptography to obtain a second digital signature. And finally, splicing the first digital signature and the second digital signature to obtain a mixed digital signature. The signature operation is carried out based on different cryptographic algorithms to obtain the mixed digital signature, so that the security of message transmission can be remarkably improved.

The invention provides a data encryption method and device, electronic equipment and a storage medium, and belongs to the technical field of data encryption. Determining the data type of the to-be-encrypted data; if the data type is a first type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the first type; if the data type is a second type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the second type; wherein the encryption efficiency of the post quantum cryptography encryption standard corresponding to the first type is higher than that of the post quantum cryptography encryption standard corresponding to the second type, and the security of the post quantum cryptography encryption standard corresponding to the second type is higher than that of the post quantum cryptography encryption standard corresponding to the first type. According to the method, the encryption requirements of two types of data requiring encryption efficiency and security can be met at the same time.

The invention discloses an IPSec VPN security gateway communication method based on a post quantum cryptography technology, and the method comprises the following steps: S1, replacing a conventional SM2 algorithm and a certificate with a PQC algorithm and a digital certificate in a first-stage main mode of IKE key negotiation; s2, the initiator and the responder respectively use the PQC key pair to complete key exchange and signature; s3, in the message 1, the initiator sends a security alliance load containing a PQC public key algorithm attribute to the responder; s4, in the message 2, the responder sends an SA load containing a PQC signature certificate and an encryption certificate, and a received SA proposal sent by the initiator is marked; s5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification; and S6, in the message 5 and the message 6, the initiator and the responder encrypt the transmitted information by using a symmetric cryptographic algorithm, and identify the previous exchange process. According to the invention, the security of the IPSec VPN security gateway is improved, and quantum computing attacks can be resisted.

The invention discloses a compiling system for a post-quantum cryptography algorithm, and relates to the technical field of post-quantum cryptography, the compiling system receives a C / C + + program compiled according to an algorithm library, generates a software operator intermediate representation through a front-end compiling module, carries out related optimization through a machine-independent optimization module, reduces redundant codes, and then, carries out compiling on the C / C + + program through a machine-independent optimization module. The software operator intermediate representation is converted into a hardware operator intermediate representation through a machine-related optimization module, optimization oriented to a specific hardware architecture is carried out, and finally, the hardware operator intermediate representation selects a corresponding target code generation module according to different target hardware to generate a file which can be executed on the target hardware. Through the system provided by the invention, a programmer can deploy various post quantum cryptography algorithms to different hardware architectures under the condition that a source program is slightly modified.

The invention provides a centralized quantum key relay network and a key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in a transmission process. Through the quantum digital signature, the quantum security MAC check code and the post quantum cryptography signature mechanism, the security of the system facing the quantum computing threat is greatly improved, and meanwhile, the dynamic path selection combining the aging level, the multi-factor dynamic scoring model and the elastic target time window is adopted; according to the method, the optimal path and the target time can be dynamically adjusted according to the timeliness requirement, the path condition and the network state of the request, the path selection is more flexible, different timeliness requirements are met, the integrity and legality of the secret key are ensured by adopting a three-level verification mode, and meanwhile, when the network has a fault, the safety of the network is ensured. A standby path can be automatically switched and a problem node can be isolated.

The invention discloses a security encryption method, device, equipment and medium for a vehicle-gauge-level HSM, and relates to the technical field of vehicle network security, and the method comprises the steps: obtaining a target algorithm parameter corresponding to a target encryption task in an algorithm parameter register after receiving the target encryption task, and determining a corresponding encryption algorithm type; if the target algorithm type is a post quantum cryptography algorithm type, a true random number generation component of a vehicle gauge level HSM is called through a post quantum cryptography coprocessor to generate a true random seed, and a target encryption task is executed based on the target algorithm parameter and the true random seed; in the process of executing the target encryption task, second-order mask operation is carried out on the fast number theory transformation operation, whether error injection attacks exist or not is continuously detected in the sampling process, and operation results of the key steps are stored through a preset composite register set.

The invention relates to the technical field of post quantum cryptography, and discloses a multi-algorithm collaborative acceleration system for dynamically reconstructing post quantum cryptography. The system comprises a dynamic parameter library, a password graph indexer, a vectorization scheduling engine and a collaborative execution unit. And after dynamic parameter inventory, the quantum cryptography algorithm operates the parameter set in real time, and feedback update is performed according to the collaborative execution unit. A dynamic cryptographic algorithm index graph is constructed by a cryptographic graph indexer, nodes are algorithm instances, edges are in a cooperative relation, and edge weights are fed back and adjusted according to vectorization scheduling engine path weights. The vectorization scheduling engine carries out vectorization coding on a user password task request to generate a task semantic vector, calculates the similarity between the task semantic vector and an index map node embedding vector, and generates an algorithm selection instruction. And the collaborative execution unit receives the instruction, calls a corresponding algorithm instance for operation, and feeds back the parameter change to the dynamic parameter library. According to the system, dynamic optimization and efficient collaboration of the post-quantum cryptography algorithm are realized, and the adaptability to complex scenes is enhanced.

The invention discloses a micro-fluidic DNA detection-based security key generation and authentication method, which comprises the following steps: S1, carrying out DNA detection on a biological sample through a micro-fluidic chip to obtain SNP and STR feature data; s2, performing unified coding on the SNP and STR feature data to form stable bit string representation; s3, processing the bit string representation by using a fuzzy extraction mechanism, and generating a consistent key material under the condition of permitting a detection error; s4, deriving a final symmetric key from the key material by using a key derivation function; and S5, performing security packaging, transmission and authentication on the final symmetric key by adopting a post-quantum cryptography mechanism. According to the security key generation and authentication method based on microfluidic DNA detection, a set of key generation and identity authentication scheme with instantaneity, high specificity and anti-quantum security is constructed.

The invention belongs to the technical field of post-quantum cryptography, and particularly relates to a post-quantum key encapsulation method based on modular lattices and lattice coding. The method disclosed by the invention comprises a scale nested lattice code encoding and decoding method based on a Barnes-Wall lattice; an IND-CPA security public key encryption method is adopted; an IND-CCA security key packaging method is adopted; according to the method, a scale nested lattice code encoding and decoding method based on Barnes-Wall lattices is constructed, and a novel error correction mechanism and a ciphertext compression technology are introduced, so that the limitation of an existing lattice-based secret key packaging algorithm on bandwidth performance is broken through, the decryption error rate is reduced, and the communication efficiency and safety are improved. Besides, the method has flexible parameter selection capability, and adaptive parameter configuration can be provided for different security levels so as to meet security requirements of various application scenes.

The invention discloses an Internet data analysis system and method, and relates to the technical field of data analysis, and the method comprises the steps: collecting the original data of the Internet, carrying out the encryption through quantum key distribution and a post-quantum cryptography algorithm, and generating an encryption-protected data package; decrypting the data packet through a decryption engine, recovering an original data format by using a quantum key, cleaning, and generating a structured data set; based on the data set, loading an adversarial generative network model, creating a virtual sample, and generating an extended data set; performing feature extraction on the extended version data set by adopting a deep learning framework to form a feature vector; building an analysis model through a vector machine according to the feature vectors; the analysis model is applied to predict to-be-analyzed data, a conversion result is in a visual form, and visual display is generated. By integrating the quantum security technology and the artificial intelligence algorithm, the efficiency and accuracy of data analysis are remarkably improved while the data security is ensured.

Devices, systems, and methods for secure modular addition and subtraction are provided. A modular adder and subtractor circuit with masking circuit includes an arithmetic to Boolean (A2B) conversion operator configured to convert (i) a second sum and (ii) a value determined based on a first sum, to Boolean resulting in first and second Boolean values, a shifter configured to (i) make a most significant bit of the first Boolean value a least significant bit resulting in a shifted first Boolean value and (ii) make the most significant bit of the second Boolean value a least significant bit resulting in a shifted second Boolean value, and a Boolean to arithmetic (B2A) conversion operator, configured to convert a representation of the shifted first Boolean value and a representation of the shifted second Boolean value to arithmetic representation resulting in first and second arithmetic values, respectively.

The invention relates to secure communication of connected systems using post quantum cryptography. Embodiments of the present disclosure provide techniques for providing secure communications for connected systems. The technique may include receiving a communication session indication associated with a first connected system; authenticating the first connection system based on an IAM policy; encrypting a message based on a post quantum cryptography public key associated with the first connection system to generate an encrypted message; and causing the encrypted message to be transmitted to the second connection system.

A method and apparatus for securing a device to operate in a post quantum computing environment is disclosed. In one embodiment, the method comprises a first stage of performing a secure boot of the processor, using the pre-provisioned, protected symmetric boot key, a second stage of generating, by the processor, at least one post quantum cryptography (PQC) key pair having a PQC private key and a PQC public key; encrypting the PQC private key according to the pre-provisioned protected symmetric key, storing the encrypted PQC private key in the secure memory, generating a request having the PQC public key; and transmitting the request to an agency external to the processor. A third stage of deploying PQC safe applications is also disclosed.

A verification method is provided. The verification method may be applied to an apparatus. The verification method may include the following steps. The apparatus may generate a first random nonce. Then, the apparatus may bind the first random nonce to the signing data. Then, the apparatus may calculate the first signature according to the hash-based post-quantum cryptography (PQC) algorithm and the signing data bound to the first random nonce to obtain the first verification time. Then, the apparatus may determine whether the first verification time meets the quality of service (QOS) condition. The apparatus may adopt the first signature for a verification process in response to the first verification time meeting the QoS condition.

The application discloses a dual-mode multiplier number theory transformation system and method based on an FPGA platform, relates to the field of post-quantum cryptography, and comprises a control module, eight butterfly execution units and 24 storage units, wherein each butterfly execution unit is equipped with three storage units and is connected with the control unit, and has two modular multiplication modules which are selectable for common modulus and special modulus. A host computer generates relevant data and sends the data to the 24 storage units of the FPGA, different modular multiplication modules are selected according to different requirements, and each butterfly execution module reads data and executes data conversion calculation. The application has the advantages of flexibility, high efficiency and reusability, can improve the efficiency of NTT execution, and further improve the efficiency of post-quantum cryptography execution, can be used in various encryption schemes which need to execute NTT, can also be used in identity authentication, key management and other cryptographic products, and effectively resists the threat brought by quantum computing.

The present disclosure relates to a 5G communication system or a 6G communication system for supporting a higher data rate than a 4G communication system such as Long Term Evolution (LTE). Embodiments disclosed herein relate to methods and systems for selecting a security profile in a communication network. More specifically, embodiments disclosed herein relate to methods (500, 900, 2200) and systems (200) for performing a security profile selection procedure for a wireless communication network. The proposed method (500, 900, 210) provides for post quantum cryptography (PQC) or quantum cryptography based secure profile selection in a wireless communication network. The method (500, 900, 2210) discloses a plurality of post quantum based security profiles in a User Equipment (UE) (202), and mechanisms and processes involved in security profile selection, primarily for maintaining user privacy in an initial authentication process between the UE (202) and a communication network (204). The selected security profile may be further used for data encryption between the UE (202) and the communication network (204). The mechanism can dynamically select a security profile that can provide better security in a given network environment.

The present disclosure relates to a 5th-Generation (5G) communication system or a 6th-Generation (6G) communication system for supporting higher data rates beyond a 4th-Generation (4G) communication system such as Long Term Evolution (LTE). The present disclosure provides techniques for performing authentication and authorization based on client credential assertion in a wireless communication system. A method performed by a network entity for performing client credential assertion (CCA)-based authentication and authorization of the network entity is provided. In one embodiment, a method includes sending, by a network entity, a first service request to a network repository function (NRF), where sending of the first service request includes encrypting, by the network entity, a CCA token using a Key Encapsulation Mechanism (KEM), where the KEM is based on a predefined post-quantum cryptography (PQC) mechanism, where the KEM is based on the PQC mechanism. The encrypted CCA token is signed by the network entity using a digital signature to generate a quantum-secure CCA token, where the quantum-secure CCA token is a digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism, and sending, by the network entity, the quantum-secure CCA token to the NRF along with the first service request, where the quantum-secure CCA token is the digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism. And receiving, by the network entity, a service response to the first service request from the NRF.

A digital circuit for including a scalar product between two vectors (a0, a1, . . . , ai, . . . , aN-1) and (s0, s1, . . . , si, . . . , sN-1). The digital circuit includes a multiplier, an accumulator including at least one adder and a register, as well as a control circuit of the accumulator. At a clock tick of index i, the multiplier is configured to compute the result ri of the multiplication ai×si, and the accumulator is configured to add ri with the current value of the register. Afterwards, the result of the addition is memorised in the register. The control circuit is configured to control the accumulator so as to perform the addition in an approximate manner for at least one addition amongst the N additions of the computation of the scalar product. In particular, the digital circuit is intended to be used in an electronic device implementing a cryptographic algorithm based on a “Learning With Errors” (LWE) technology.

The application provides a centralized quantum key relay network and key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in the transmission process.The application greatly improves the security of the system when facing quantum computing threats through quantum digital signature, quantum secure MAC check code and post-quantum cryptography signature mechanism, simultaneously adopts dynamic path selection combined with time limit level, a multi-factor dynamic scoring model and an elastic target time window, can dynamically adjust the optimal path and the target time according to the timeliness requirement of the request, the path condition and the network state, is more flexible in path selection, meets different timeliness requirements, and further adopts a three-level verification mode to ensure the integrity and legality of the key, and when a network fault occurs, can automatically switch to a standby path and isolate a problem node.

The invention relates to the technical field of data encryption, and discloses a post quantum cryptography algorithm adaptive optimization method based on AI driving. According to the method, multi-source password parameter data are collected, and a standardized password parameter set is generated through self-adaptive noise injection and parameter normalization preprocessing; constructing a dynamic optimization network model based on multi-head attention and reinforcement learning, adopting adversarial evolution strategy training, simulating a quantum attack scene, and screening an anti-quantum parameter combination; utilizing a differentiable parameter space mapping algorithm to convert into optimal encryption protocol configuration and correcting conflicts; and through iterative optimization of a meta-learning framework, local parameter sensitivity and global anti-attack capability are fused, and an adaptive post-quantum cryptographic algorithm is output. According to the method, the performance and the security of the post-quantum cryptography algorithm are effectively improved, the algorithm can be optimized according to different scene requirements, and a reliable technical scheme is provided for coping with quantum computing threats.

The application belongs to the field of post-quantum cryptography and information security technology, and relates to a lattice polynomial operation acceleration method and system based on fusion accumulation and recursive divide-and-conquer and a storage medium. The method comprises the following steps: obtaining a to-be-operated polynomial, determining the polynomial operation type, selecting a corresponding operation method according to the determination result, generating a corresponding type of synthetic long polynomial, and continuously writing the synthetic long polynomial into a shared accumulation buffer. The synthetic long polynomial is read from the shared accumulation buffer, polynomial folding and modulus reduction are performed, a polynomial operation result component is generated, and the polynomial operation result component is output to a next-level storage unit. The application solves the technical problems of high memory read-write bandwidth consumption and redundant algorithm power consumption caused by modulus reduction and folding immediately after multiplication of each sub-polynomial in the existing traditional matrix-vector multiplication, and the strict limitation of the existing NTT acceleration scheme to a specific modulus structure and poor algorithm agility.

Example embodiments of the present disclosure are directed to mixing pre-shared keys with post-quantum cryptography. A method comprises sending a key exchange request to a second apparatus, wherein the key exchange request comprises at least a first public key generated using a post-quantum cryptography (PQC) key generation mechanism (KEM), and information indicating that a post-quantum pre-shared key (PPK) is used; receiving a response from the second apparatus, wherein the response to the key exchange request comprises at least a first responder ciphertext generated based on the first public key using the PQC KEM by the second apparatus and information indicating that a PPK is used; and generating a seed key based on a first PQC KEM shared secret extracted from the first responder ciphertext, wherein the seed key is used to derive one or more intermediate cryptographic keys which are then mixed with the PPK using a pseudorandom function to derive one or more cryptographic keys used for security and authenticity of the communication between the first apparatus and the second apparatus.