85 results about "Post-quantum cryptography" patented technology

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The embodiment of the invention provides a mixed signature method, a signature verification method, electronic equipment and a computer readable storage medium. In the method, a to-be-signed target message is input into a first trusted execution environment for signature operation based on a traditional cryptographic algorithm to obtain a first digital signature, and then the target message and the first digital signature are input into a second trusted execution environment for signature operation based on post quantum cryptography to obtain a second digital signature. And finally, splicing the first digital signature and the second digital signature to obtain a mixed digital signature. The signature operation is carried out based on different cryptographic algorithms to obtain the mixed digital signature, so that the security of message transmission can be remarkably improved.

The invention provides a data encryption method and device, electronic equipment and a storage medium, and belongs to the technical field of data encryption. Determining the data type of the to-be-encrypted data; if the data type is a first type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the first type; if the data type is a second type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the second type; wherein the encryption efficiency of the post quantum cryptography encryption standard corresponding to the first type is higher than that of the post quantum cryptography encryption standard corresponding to the second type, and the security of the post quantum cryptography encryption standard corresponding to the second type is higher than that of the post quantum cryptography encryption standard corresponding to the first type. According to the method, the encryption requirements of two types of data requiring encryption efficiency and security can be met at the same time.

The invention discloses a security encryption method, device, equipment and medium for a vehicle-gauge-level HSM, and relates to the technical field of vehicle network security, and the method comprises the steps: obtaining a target algorithm parameter corresponding to a target encryption task in an algorithm parameter register after receiving the target encryption task, and determining a corresponding encryption algorithm type; if the target algorithm type is a post quantum cryptography algorithm type, a true random number generation component of a vehicle gauge level HSM is called through a post quantum cryptography coprocessor to generate a true random seed, and a target encryption task is executed based on the target algorithm parameter and the true random seed; in the process of executing the target encryption task, second-order mask operation is carried out on the fast number theory transformation operation, whether error injection attacks exist or not is continuously detected in the sampling process, and operation results of the key steps are stored through a preset composite register set.

The invention relates to the technical field of post quantum cryptography, and discloses a multi-algorithm collaborative acceleration system for dynamically reconstructing post quantum cryptography. The system comprises a dynamic parameter library, a password graph indexer, a vectorization scheduling engine and a collaborative execution unit. And after dynamic parameter inventory, the quantum cryptography algorithm operates the parameter set in real time, and feedback update is performed according to the collaborative execution unit. A dynamic cryptographic algorithm index graph is constructed by a cryptographic graph indexer, nodes are algorithm instances, edges are in a cooperative relation, and edge weights are fed back and adjusted according to vectorization scheduling engine path weights. The vectorization scheduling engine carries out vectorization coding on a user password task request to generate a task semantic vector, calculates the similarity between the task semantic vector and an index map node embedding vector, and generates an algorithm selection instruction. And the collaborative execution unit receives the instruction, calls a corresponding algorithm instance for operation, and feeds back the parameter change to the dynamic parameter library. According to the system, dynamic optimization and efficient collaboration of the post-quantum cryptography algorithm are realized, and the adaptability to complex scenes is enhanced.

The invention discloses a micro-fluidic DNA detection-based security key generation and authentication method, which comprises the following steps: S1, carrying out DNA detection on a biological sample through a micro-fluidic chip to obtain SNP and STR feature data; s2, performing unified coding on the SNP and STR feature data to form stable bit string representation; s3, processing the bit string representation by using a fuzzy extraction mechanism, and generating a consistent key material under the condition of permitting a detection error; s4, deriving a final symmetric key from the key material by using a key derivation function; and S5, performing security packaging, transmission and authentication on the final symmetric key by adopting a post-quantum cryptography mechanism. According to the security key generation and authentication method based on microfluidic DNA detection, a set of key generation and identity authentication scheme with instantaneity, high specificity and anti-quantum security is constructed.

Devices, systems, and methods for secure modular addition and subtraction are provided. A modular adder and subtractor circuit with masking circuit includes an arithmetic to Boolean (A2B) conversion operator configured to convert (i) a second sum and (ii) a value determined based on a first sum, to Boolean resulting in first and second Boolean values, a shifter configured to (i) make a most significant bit of the first Boolean value a least significant bit resulting in a shifted first Boolean value and (ii) make the most significant bit of the second Boolean value a least significant bit resulting in a shifted second Boolean value, and a Boolean to arithmetic (B2A) conversion operator, configured to convert a representation of the shifted first Boolean value and a representation of the shifted second Boolean value to arithmetic representation resulting in first and second arithmetic values, respectively.

A method and apparatus for securing a device to operate in a post quantum computing environment is disclosed. In one embodiment, the method comprises a first stage of performing a secure boot of the processor, using the pre-provisioned, protected symmetric boot key, a second stage of generating, by the processor, at least one post quantum cryptography (PQC) key pair having a PQC private key and a PQC public key; encrypting the PQC private key according to the pre-provisioned protected symmetric key, storing the encrypted PQC private key in the secure memory, generating a request having the PQC public key; and transmitting the request to an agency external to the processor. A third stage of deploying PQC safe applications is also disclosed.

The application discloses a dual-mode multiplier number theory transformation system and method based on an FPGA platform, relates to the field of post-quantum cryptography, and comprises a control module, eight butterfly execution units and 24 storage units, wherein each butterfly execution unit is equipped with three storage units and is connected with the control unit, and has two modular multiplication modules which are selectable for common modulus and special modulus. A host computer generates relevant data and sends the data to the 24 storage units of the FPGA, different modular multiplication modules are selected according to different requirements, and each butterfly execution module reads data and executes data conversion calculation. The application has the advantages of flexibility, high efficiency and reusability, can improve the efficiency of NTT execution, and further improve the efficiency of post-quantum cryptography execution, can be used in various encryption schemes which need to execute NTT, can also be used in identity authentication, key management and other cryptographic products, and effectively resists the threat brought by quantum computing.

The present disclosure relates to a 5th-Generation (5G) communication system or a 6th-Generation (6G) communication system for supporting higher data rates beyond a 4th-Generation (4G) communication system such as Long Term Evolution (LTE). The present disclosure provides techniques for performing authentication and authorization based on client credential assertion in a wireless communication system. A method performed by a network entity for performing client credential assertion (CCA)-based authentication and authorization of the network entity is provided. In one embodiment, a method includes sending, by a network entity, a first service request to a network repository function (NRF), where sending of the first service request includes encrypting, by the network entity, a CCA token using a Key Encapsulation Mechanism (KEM), where the KEM is based on a predefined post-quantum cryptography (PQC) mechanism, where the KEM is based on the PQC mechanism. The encrypted CCA token is signed by the network entity using a digital signature to generate a quantum-secure CCA token, where the quantum-secure CCA token is a digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism, and sending, by the network entity, the quantum-secure CCA token to the NRF along with the first service request, where the quantum-secure CCA token is the digitally signed encrypted CCA token and the digital signature is based on a predefined PQC mechanism. And receiving, by the network entity, a service response to the first service request from the NRF.

A digital circuit for including a scalar product between two vectors (a0, a1, . . . , ai, . . . , aN-1) and (s0, s1, . . . , si, . . . , sN-1). The digital circuit includes a multiplier, an accumulator including at least one adder and a register, as well as a control circuit of the accumulator. At a clock tick of index i, the multiplier is configured to compute the result ri of the multiplication ai×si, and the accumulator is configured to add ri with the current value of the register. Afterwards, the result of the addition is memorised in the register. The control circuit is configured to control the accumulator so as to perform the addition in an approximate manner for at least one addition amongst the N additions of the computation of the scalar product. In particular, the digital circuit is intended to be used in an electronic device implementing a cryptographic algorithm based on a “Learning With Errors” (LWE) technology.

The application provides a centralized quantum key relay network and key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in the transmission process.The application greatly improves the security of the system when facing quantum computing threats through quantum digital signature, quantum secure MAC check code and post-quantum cryptography signature mechanism, simultaneously adopts dynamic path selection combined with time limit level, a multi-factor dynamic scoring model and an elastic target time window, can dynamically adjust the optimal path and the target time according to the timeliness requirement of the request, the path condition and the network state, is more flexible in path selection, meets different timeliness requirements, and further adopts a three-level verification mode to ensure the integrity and legality of the key, and when a network fault occurs, can automatically switch to a standby path and isolate a problem node.

The invention relates to the technical field of data encryption, and discloses a post quantum cryptography algorithm adaptive optimization method based on AI driving. According to the method, multi-source password parameter data are collected, and a standardized password parameter set is generated through self-adaptive noise injection and parameter normalization preprocessing; constructing a dynamic optimization network model based on multi-head attention and reinforcement learning, adopting adversarial evolution strategy training, simulating a quantum attack scene, and screening an anti-quantum parameter combination; utilizing a differentiable parameter space mapping algorithm to convert into optimal encryption protocol configuration and correcting conflicts; and through iterative optimization of a meta-learning framework, local parameter sensitivity and global anti-attack capability are fused, and an adaptive post-quantum cryptographic algorithm is output. According to the method, the performance and the security of the post-quantum cryptography algorithm are effectively improved, the algorithm can be optimized according to different scene requirements, and a reliable technical scheme is provided for coping with quantum computing threats.

The application belongs to the field of post-quantum cryptography and information security technology, and relates to a lattice polynomial operation acceleration method and system based on fusion accumulation and recursive divide-and-conquer and a storage medium. The method comprises the following steps: obtaining a to-be-operated polynomial, determining the polynomial operation type, selecting a corresponding operation method according to the determination result, generating a corresponding type of synthetic long polynomial, and continuously writing the synthetic long polynomial into a shared accumulation buffer. The synthetic long polynomial is read from the shared accumulation buffer, polynomial folding and modulus reduction are performed, a polynomial operation result component is generated, and the polynomial operation result component is output to a next-level storage unit. The application solves the technical problems of high memory read-write bandwidth consumption and redundant algorithm power consumption caused by modulus reduction and folding immediately after multiplication of each sub-polynomial in the existing traditional matrix-vector multiplication, and the strict limitation of the existing NTT acceleration scheme to a specific modulus structure and poor algorithm agility.

Example embodiments of the present disclosure are directed to mixing pre-shared keys with post-quantum cryptography. A method comprises sending a key exchange request to a second apparatus, wherein the key exchange request comprises at least a first public key generated using a post-quantum cryptography (PQC) key generation mechanism (KEM), and information indicating that a post-quantum pre-shared key (PPK) is used; receiving a response from the second apparatus, wherein the response to the key exchange request comprises at least a first responder ciphertext generated based on the first public key using the PQC KEM by the second apparatus and information indicating that a PPK is used; and generating a seed key based on a first PQC KEM shared secret extracted from the first responder ciphertext, wherein the seed key is used to derive one or more intermediate cryptographic keys which are then mixed with the PPK using a pseudorandom function to derive one or more cryptographic keys used for security and authenticity of the communication between the first apparatus and the second apparatus.

The invention provides a quantum key distribution management method based on post quantum cryptography, a communication node and a system, relates to the field of quantum communication and information security, is applied to a quantum communication network comprising a first communication node and a second communication node, is executed by the first communication node, and comprises the following steps: in a first quantum key distribution QKD session, sending a quantum key to the second communication node; completing a QKD negotiation process with the second communication node based on post quantum cryptography (PQC) authentication, and generating a first final key; extracting a part of the first final key as a symmetric authentication key; and in a second QKD session established with the second communication node, using the symmetric authentication key to determine whether the final keys of the current sessions held by the first communication node and the second communication node are consistent, the second QKD session being any QKD session after the first QKD session. A part of a final key is used as a symmetric key for encryption on the basis of using PQC for authentication, so that the flexibility of the QKD network is greatly improved on the basis of ensuring the security.

The invention relates to a block cipher algorithm architecture, an algorithm calling method and device and electronic equipment. The algorithm architecture comprises a quantum security layer which is used for taking a quantum true random number generator as a key entropy source and generating an unpredictable initialization vector and a dynamic key seed based on a quantum optical effect; the hybrid encryption layer is used for encrypting a session key by adopting a hybrid encryption mechanism of post quantum cryptography and SM4 and using a public key algorithm based on lattice cryptography, generating a master key through an anti-quantum algorithm, and generating a sub-key sequence in combination with an SM4 round key expansion algorithm; the core algorithm layer is used for optimizing a round function, dynamically generating an S-box replacement table based on quantum random numbers through an implicit coding technology of dynamic S-box generation and white-box protection, carrying out implicit coding on XOR and shift operations in the round function and injecting redundant noise data; and the protocol adaptation layer is used for integrating a dynamic defense protocol. The encryption security can be improved, and the algorithm efficiency can be remarkably improved.

A real-time cognitive processor architecture for AGI / ASI applications is disclosed, integrating symbolic execution, multimodal arbitration, and embedded ethics enforcement at the hardware level. The chip comprises a symbolic execution unit that processes semantically weighted instructions using transformer-aligned kernels and symbolic memory indexing. A multimodal arbitration layer fuses EEG, audio, visual, and tactile inputs through trust scoring, while a runtime ethics gate enforces lawful behavior via embedded circuits. EEG signals are transformed into symbolic primitives and routed through intention-hashed protected memory. The processor supports redundant arbitration cores, post-quantum cryptography, and real-time cognitive OS upgrades. This architecture enables secure, ethics-compliant symbolic cognition with sub-microsecond latency and resilience against adversarial input, hardware exploits, and ethical drift.

The invention discloses an implementation method for fusing a quantum key and a post-quantum cryptographic algorithm, and belongs to the technical field of data encryption. The method comprises the following steps of: generating an original quantum key through BB84 protocol QKD equipment, and generating a seed, a lattice noise scaling factor and a quantum enhancement session base key by a post-quantum key obtained through Hash derivation; generating a quantum derived mask in combination with hydroelectric terminal operation data characteristics and an original quantum key, and performing XOR preprocessing on to-be-encrypted data to obtain quantum mask protection data; based on a post-quantum encryption algorithm, generating two parts of basic ciphertexts by using the seeds, the parameters and the protection data; fragmenting the original quantum key to obtain a quantum enhanced encryption value, and respectively performing secondary disturbance encryption and XOR processing on the two parts of ciphertexts to form enhanced ciphertexts; and finally, the enhanced ciphertext and the check code are spliced and then transmitted to a central control room. According to the invention, through multi-stage encryption and key enhancement, the security and anti-attack capability of data transmission in scenes such as a hydropower terminal and the like are significantly improved.

Techniques are disclosed for a post-quantum encrypted trusted execution environment on an edge device. The edge computing device includes a trusted execution environment that includes at least some SIMD processing units, such as a graphics processing unit (GPU). Data records, such as machine learning inferences from machine learning or artificial intelligence models, are generated on the edge computing device in the trusted execution environment and encrypted with post-quantum encryption (such as lattice-based encryption) using the SIMD processing units in the trusted execution environment. Workloads received for the trusted execution environment, also encrypted with post-quantum encryption, are decrypted using the SIMD processing units in the trusted execution environment.

A method of mixing pre-shared keys with post-quantum cryptography (PQC) comprises sending by a first apparatus a key exchange request to a second apparatus, wherein the key exchange request comprises

The invention provides a data communication method based on post-quantum cryptography, electronic equipment and a storage medium, and relates to the technical field of communication. The data transmission process is optimized, when the server transmits the data to the client, chain encryption can be performed through the two encryption algorithms, and the two encryption algorithms are configured to be the encryption algorithm based on the post-quantum cryptography and the classical encryption algorithm respectively. Therefore, the encrypted data can have the theoretical security of a classical encryption algorithm, and meanwhile, the encrypted data has the capability of resisting decryption of a quantum computer based on a post-quantum encryption algorithm. Besides, during chain encryption, encrypted data is processed based on a fixed hash function, and a reproducible encryption seed is determined, so that the client can verify an encryption result through re-encryption of decrypted data, verification data does not need to be additionally provided for verification of a decryption result, and the security of a data transmission process is further ensured.

The invention belongs to the technical field of cryptographic algorithm hardware implementation, and particularly discloses a post quantum cryptographic algorithm acceleration method and device based on an ASIP architecture, and the method comprises the steps: obtaining a program code of a Kyber algorithm; continuously executing the microcode instruction of the Kyber algorithm until the Kyber algorithm is completely executed; executing the microcode instruction of the Kyber algorithm, wherein the microcode instruction to be executed is obtained; analyzing the microcode instruction to be executed to obtain instruction analysis information; acquiring data of a source operand address as source data; on the basis of the operation code, an operation object is determined in hardware resources, input of the operation object is configured on the basis of the source data, and the hardware resources comprise an ALU and a Hash and sampling module; and configuring the data of the target operand address based on the data output by the operation object. According to the method and the device, the operation efficiency of the Kyber algorithm can be improved through hardware acceleration.

A system includes a memory configured to store a post quantum cryptography (PQC) key and sensitive data to be transmitted to a computing device over a communication channel and a processor operably coupled to the memory and configured to access the PQC key and the sensitive data. The processor is further configured to determine, based at least in part on the sensitive data, an expiration time beyond which the sensitive data is rendered unreadable. The expiration time is identified based on an estimated future time at which a quantum computing based decryption process can be utilized to read the sensitive data. The processor is further configured to encode the sensitive data based on the PQC key. The PQC key is associated with the expiration time. The processor is further configured to transmit, over the communication channel, the encoded sensitive data to the computing device.

The invention relates to the technical field of chip security management, in particular to a post quantum cryptography chip security management method and system based on multi-party computing clamping. According to the method, post-quantum security disturbance is carried out on the confidential service data of the participants in the controlled environment, and the master key is divided into a plurality of root key seed shares which are dispersedly stored in the independent hardware security modules of the participants, so that single-point failure and key leakage are avoided. And writing the security policy template, the white list domain and the certificate chain hash into a non-fallback register, and establishing a virtual key signature model through fingerprint matching analysis to realize operation self-test. A session key is generated based on Kyber post-quantum decapsulation, session request monitoring is achieved in combination with a volatile memory base station and a hardware audit counter array, and dynamic security management is conducted according to key change abnormity. According to the invention, full-link post-quantum security protection of the cryptographic chip based on multi-party computing is realized, and the security autonomy and trusted computing capability of the cryptographic chip in a complex application environment are improved.

Method and systems for decentralized confirmation of entries in a directed acyclic graph (DAG) for confirming as authentic ledger entries without centralized arbitration of authenticity are provided. Access is provided to a user account by applying Shamir Secret Sharing, the user account being accessible to a user and to combined efforts of multiple authorized third-party users appointed by the user. An identity of the user account is obfuscated using post-quantum cryptography. A DAG communication having data is transmitted from the user account to the DAG. DAG communications are weighted via proof-of-work hashing conducted on randomly-selected third-party DAG users, and are recorded and reconciled at nodes that compete to achieve consensus using SABRPaxos protocol, thereby confirming entries in the DAG made with an API. Nodes are incentivized by rewarding tokens that are variably determined by calculating the number of communications in a fixed time period and a total number of communications.

An encryption unit (403) that an encryption apparatus (400) includes, when a user secret key SKΓ is generated using a secret key MSK of attribute based encryption and a set of attributes Γ corresponding to a decryption-possible condition L, generates a key K and a ciphertext P corresponding to the key K by encrypting the decryption-possible condition L using, as an encryption key of the attribute based encryption, a key PK consisting of a public key MPK corresponding to the secret key MSK and a public key PQCPK of post quantum cryptography, regards a part of the ciphertext P where the decryption-possible condition L is encrypted based on a secret value as P-D, regards a part of the ciphertext P where the secret value that is shared is encrypted as P-SS, and generates K′ and P′-D by randomizing each of the key K and the P-D using a random number R, and generates a ciphertext C by encrypting data consisting of the P-D and the random number R using the public key PQCPK. Here, the P-SS, the P′-D, and the K′ are decryption-possible verification parameters corresponding to the user secret key SKΓ.