135 results about "Post-quantum cryptography" patented technology

The invention provides a post quantum cryptography and national cryptography algorithm mixed signature and verification method and device, and relates to the technical field of cryptography application. The method comprises the following steps: performing hash operation on a to-be-signed message plaintext by adopting a preset national cryptographic hash algorithm to obtain a first hash value, and performing mixed signature operation on the first hash value and the to-be-signed message plaintext according to a national cryptographic signature private key component and a post-quantum signature private key component in a mixed signature private key of a sender to obtain a second hash value; and obtaining a national secret signature value and a post-quantum signature value, packaging the national secret signature value and the post-quantum signature value to obtain a mixed signature value corresponding to the to-be-signed message plaintext, and sending the mixed signature value and the to-be-signed message plaintext to a receiver. Due to the fact that the mixed signature value sent by the sending party to the receiving party comprises the national secret signature value and the post-quantum signature value, an attacker needs to crack the national secret signature value and the post-quantum signature value at the same time to achieve identity anti-fake attack, and guarantee is provided for integrity and authenticity of message plaintext transmission.

The embodiment of the invention provides a quantum key distribution method based on a cryptographic infrastructure system, relates to the technical field of quantum secret communication, and provides a quantum key distribution method based on fusion of quantum key distribution and post quantum cryptography, which integrates a classical commercial cryptographic algorithm, a PQC post quantum cryptographic algorithm and quantum key distribution. A QKD-based quantum key secure distribution process combining SM2 and PQC mixed signature, SM2 and PQC mixed key packaging, PQC collaborative signature, PQC collaborative decryption, token access and other cryptographic technologies is designed, and anti-quantum cryptographic capability support is provided for voice applications through collaborative signature and collaborative decryption, so that the security of software for realizing a PQC cryptographic algorithm is improved, and the security of the PQC cryptographic algorithm is improved. Moreover, the software implementation mode does not have the inherent security problem of the IP, the dependency on the server is low, and the standardization program is high.

The invention discloses an intelligent system and method for fusing mental health evaluation in an interest scene based on an education robot. The system realizes non-intrusive mental health assessment by constructing a technical architecture of'multi-modal biological feature anonymization-quantum hybrid encryption-federated learning privacy protection-dynamic risk assessment '. The method is characterized by comprising the following steps of: (1) generating irreversible biological characteristic codes by adopting a chaos random number generator, and realizing anonymized association by combining a double hash chain technology; (2) designing a quantum enhanced hybrid encryption system, fusing an SM4 algorithm, NTRU post quantum cryptography and quantum key distribution; (3) developing a dynamic scene generator, and naturally fusing psychological test questions into interest topics by using a generative adversarial network (GAN) and a curiosity engine; (4) constructing a multi-modal emotion analysis system, and combining an LSTM + CNN hybrid model to realize physiology-behavior-voice data fusion analysis; and (5) deploying a federated learning framework, and protecting model training data through differential privacy noise injection (epsilon = 0.5).

The invention discloses a configurable number-theory transformation parallel computing acceleration method and device for a post quantum cryptographic algorithm, and relates to the technical field of cryptographic algorithms. The number theory transformation is a calculation bottleneck in lattice-based post-quantum cryptography and PQC; a hardware accelerator specially designed for number theory transformation (NTT) is an effective solution for improving the execution speed. At present, a mainstream design neglects the influence of the scale of a calculation array, so that the design of an NTT calculation circuit is poor in flexibility and low in memory utilization rate, and a two-dimensional reconfigurable number theory transformation acceleration circuit is provided; the method is applied to a key generation stage, an encryption stage and a decryption stage of the post-quantum cryptographic algorithm. The NTT reconfigurable computing circuit provided by the invention can keep the utilization rate of hardware resources, and is suitable for mobile terminal equipment with limited resources; the NTT circuit adopts a low-complexity memory mapping scheme, so that the address control logic is greatly simplified, and the hardware overhead is reduced.

Disclosed are various examples for managing post quantum cryptography migrations of application services. For example, a system can include a computing device that is configured to identify a uniform resource location associated with source code for an application service and identify a cryptographic primitive in the source code by scanning the source code. The computing device can be configured to generate a large language model prompt for a cryptographic bill of materials based at least in part on the cryptographic primitive. The cryptographic bill of materials for the source code can be generated by inputting the large language model prompt to a large language model application. The cryptographic bill of materials can include a list of cryptographic components.

A computing entity accesses one or more blocks of a blockchain, encrypts the content of the one or more blocks using a first cryptographic technique to generate one or more first encrypted block values, and writes a first side chain block comprising the one or more first encrypted block values and a first signature to a first side chain. The computing entity accesses at least one of (a) at least one block of a particular second set of one or more second sets of the plurality of blocks or (b) one or more first side chain blocks corresponding to blocks of the second set, encrypts the content of the accessed block(s) using a second cryptographic technique to generate at least one second encrypted block value, and writes a second side chain block comprising the at least one second encrypted block value and a second signature to a second side chain.

Embodiments of the present disclosure relate to subscription concealed identifier (SUCI) encryption. In an aspect, a terminal device generates a SUCI of the terminal device based on a subscription permanent identifier (SUPI) of the terminal device. The SUCI comprises a SUPI type indicating that both elliptic curve cryptography (ECC) and post quantum cryptography (PQC) are used in the generating of the SUCI. The terminal device further transmits the SUCI to a network device. As such, a SUCI can be defined to comprise a SUPI type indicating that both the ECC and PQC are used in the generating of the SUCI. With the SUCI generated based on both the ECC and PQC, different kinds of cryptanalytic attacks can be avoided.

The invention provides a post quantum cryptography and national cryptographic algorithm hybrid encryption and decryption method and device, and relates to the technical field of password application. The hybrid encryption method comprises the following steps: acquiring a hybrid encryption public key of a receiver and plaintext data to be encrypted, performing de-encapsulation processing on the hybrid encryption public key to obtain a first national cryptographic encryption public key component and a post-quantum key encapsulation public key component, generating a first national cryptographic encryption ciphertext and a post-quantum key encapsulation ciphertext, and transmitting the first national cryptographic encryption ciphertext and the post-quantum key encapsulation ciphertext to the receiver; generating a first temporary key according to a first random number corresponding to the first national cryptographic encryption ciphertext and a symmetric key corresponding to the post-quantum key encapsulation ciphertext, and encrypting the plaintext data to be encrypted by adopting a second national cryptographic encryption algorithm according to the first temporary key to obtain a second national cryptographic message ciphertext, and performing third national cryptographic algorithm hash operation on the to-be-encrypted plaintext data to obtain a message hash value, and performing packaging processing on the first national cryptographic encrypted ciphertext, the post quantum key packaging ciphertext, the second national cryptographic message ciphertext and the message hash value to obtain a mixed encrypted ciphertext.

The invention relates to the technical field of vehicle-gauge-level password protection, and discloses a vehicle-gauge-level post quantum password acceleration and side channel protection device. The device comprises a quantum key injection unit, a quantum noise analysis unit, a post quantum cryptography acceleration engine, a side channel feature extraction unit and a protection strategy generator. The quantum key injection unit performs format standardization processing on input quantum key information; the quantum noise analysis unit collects a power consumption time sequence signal and an electromagnetic radiation signal of the cryptographic operation chip, and extracts a quantum noise characteristic spectrum through a quantum Fourier transform algorithm; the post quantum cryptographic acceleration engine adopts a lattice-based cryptographic algorithm to implement layered acceleration operation on the target encrypted message data; a side channel feature extraction unit constructs a space-time joint side channel feature tensor according to the quantum noise feature spectrum; the protection strategy generator identifies the physical fragile area according to the tensor and generates a corresponding protection strategy instruction. The device integrates a quantum cryptography acceleration function and a side channel protection function, and is suitable for a vehicle-specification-level scene.

Example embodiments of the present disclosure relate to SUCI encryption based on a post quantum key encapsulation mechanism. In an aspect, a terminal device generates a subscription concealed identifier (SUCI) of the terminal device based on a subscription permanent identifier (SUPI) of the terminal device and a public key of a home network of the terminal device, wherein the public key is generated based on a post quantum cryptography (PQC) key encapsulation mechanism (KEM). The terminal device then transmits the SUCI to a network device. According to some embodiments of the present disclosure, a new fully Post Quantum based SUCI ensures to avoid different kinds of attacks.

The invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) security gateway communication method fused with a post quantum cryptography technology, which comprises the following steps of: S1, in a first-stage main mode of IKE (Internet Key Exchange) key agreement, replacing a traditional single SM2 algorithm and a digital certificate based on an SM2 cryptographic algorithm with an SM2 and PQC mixed algorithm and a mixed PQC digital certificate; s2, the initiator and the responder respectively use the PQC encryption key pair and the PQC signature key pair to carry out key exchange and data signature, and simultaneously use the SM2 encryption key pair and the SM2 signature key pair to carry out key exchange and data signature; s3, in the message 1, the initiator sends a security alliance load containing the attribute of the fused SM2 and PQC algorithm to the responder; s4, in the message 2, the responder feeds back a PQC series hybrid certificate and an SA proposal; and S5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification. According to the invention, the security of the IPSec VPN security gateway can be improved, and quantum computing attacks can be resisted.

Embodiments of the present disclosure provide techniques for providing secure communication for connected systems. The techniques may include receiving a communication session indication associated with a first connected system; authenticating the first connected system based on IAM policy; encrypting a message to generate an encrypted message based on a post quantum cryptography public key associated with the first connected system; and causing transmitting of the encrypted message to a second connected system.

The invention provides a distributed quantum security encryption method, system and device. The method comprises the following steps: monitoring the quality of a quantum key distribution link in real time, and dynamically selecting a quantum key, a post-quantum session key or a fusion key of the quantum key and the post-quantum session key as a working key; and when the node cannot be directly reached, the trusted relay node generates an end-to-end key seed by using a quantum key and a post-quantum cryptography shared key which are respectively established with the two ends, the end-to-end key seed is encrypted and distributed by a public key and then a session key is independently derived by the two communication parties, and the relay node cannot decrypt. The system adopts a distributed Mesh network architecture supporting a terminal / relay dual mode. The device integrates a quantum random number generator, a post quantum cryptography coprocessor and a mixed key engine. The method integrates the advantages of quantum physical security and post quantum cryptography, has high security and availability, and is suitable for constructing a key infrastructure security communication network resisting quantum computing attack.

The embodiment of the invention provides a mixed signature method, a signature verification method, electronic equipment and a computer readable storage medium. In the method, a to-be-signed target message is input into a first trusted execution environment for signature operation based on a traditional cryptographic algorithm to obtain a first digital signature, and then the target message and the first digital signature are input into a second trusted execution environment for signature operation based on post quantum cryptography to obtain a second digital signature. And finally, splicing the first digital signature and the second digital signature to obtain a mixed digital signature. The signature operation is carried out based on different cryptographic algorithms to obtain the mixed digital signature, so that the security of message transmission can be remarkably improved.

The invention provides a data encryption method and device, electronic equipment and a storage medium, and belongs to the technical field of data encryption. Determining the data type of the to-be-encrypted data; if the data type is a first type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the first type; if the data type is a second type, encrypting the to-be-encrypted data by adopting a post quantum cryptography encryption standard corresponding to the second type; wherein the encryption efficiency of the post quantum cryptography encryption standard corresponding to the first type is higher than that of the post quantum cryptography encryption standard corresponding to the second type, and the security of the post quantum cryptography encryption standard corresponding to the second type is higher than that of the post quantum cryptography encryption standard corresponding to the first type. According to the method, the encryption requirements of two types of data requiring encryption efficiency and security can be met at the same time.

The invention provides a Kyber and SM3 fused post quantum cryptography encryption system, method and device. The control logic module controls the execution round number of SM3 in the Hash module according to the random number length required by the NTT module in different modes; the interception unit intercepts the effective length of each round of hash value; the filling unit fills the input message of each round of SM3; the Hash module determines the number of rounds required to be executed by the SM3 according to the lengths of the hash values required by different modes, and intercepts the effective length of each round of hash value; the NTT module is used for calculating polynomial multiplication in the Kyber algorithm; the NTT module comprises a butterfly unit and a control unit, the butterfly unit is used for calculation of modular addition, modular subtraction and modular reduction, and the control unit determines an operation mode of the NTT module; and the sampling module comprises a sampling rejection unit and a central binomial distribution sampling unit, the sampling rejection unit is used for sampling to obtain a public matrix, and the central binomial distribution sampling unit is used for sampling to obtain a noise vector. The scheme meets the safety standard of China and is reliable in safety.

The invention relates to the technical field of information security, in particular to a data processing method, device and equipment based on a post quantum cryptography algorithm and a medium, the method comprises the steps that a cryptographic operation request sent through a target external standard interface module is acquired, and the target external standard interface module can support multiple post quantum cryptography algorithms; determining a target post-quantum cryptographic algorithm identifier, a mechanism type and mechanism parameters according to the cryptographic operation request; according to the target post-quantum cryptographic algorithm identifier, the mechanism type and the mechanism parameters, calling a post-quantum cryptographic algorithm implementation module to perform cryptographic operation to obtain an operation result; and returning the operation result through the target external standard interface module. According to the application, the unified external standard interface module capable of supporting multiple post quantum cryptography algorithms is provided to be matched with different algorithms, so that not only is the post quantum cryptography migration process simplified, but also the post quantum cryptography calling process can be simplified.

The invention discloses an IPSec VPN security gateway communication method based on a post quantum cryptography technology, and the method comprises the following steps: S1, replacing a conventional SM2 algorithm and a certificate with a PQC algorithm and a digital certificate in a first-stage main mode of IKE key negotiation; s2, the initiator and the responder respectively use the PQC key pair to complete key exchange and signature; s3, in the message 1, the initiator sends a security alliance load containing a PQC public key algorithm attribute to the responder; s4, in the message 2, the responder sends an SA load containing a PQC signature certificate and an encryption certificate, and a received SA proposal sent by the initiator is marked; s5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification; and S6, in the message 5 and the message 6, the initiator and the responder encrypt the transmitted information by using a symmetric cryptographic algorithm, and identify the previous exchange process. According to the invention, the security of the IPSec VPN security gateway is improved, and quantum computing attacks can be resisted.

The invention relates to SUCI encryption based on a post quantum key encapsulation mechanism. Example embodiments of the present disclosure relate to SUCI encryption based on a post quantum key encapsulation mechanism. In an aspect, a terminal device generates a subscription hidden identifier (SUCI) of the terminal device based on a subscription permanent identifier (SUPI) of the terminal device and a public key of a home network of the terminal device, where the public key is generated based on a post quantum cryptography (PQC) key encapsulation mechanism (KEM). And then, the terminal equipment sends the SUCI to network equipment. According to some embodiments of the present disclosure, a brand new fully post-quantum based SUCI ensures that different types of attacks are avoided.

The invention discloses a compiling system for a post-quantum cryptography algorithm, and relates to the technical field of post-quantum cryptography, the compiling system receives a C / C + + program compiled according to an algorithm library, generates a software operator intermediate representation through a front-end compiling module, carries out related optimization through a machine-independent optimization module, reduces redundant codes, and then, carries out compiling on the C / C + + program through a machine-independent optimization module. The software operator intermediate representation is converted into a hardware operator intermediate representation through a machine-related optimization module, optimization oriented to a specific hardware architecture is carried out, and finally, the hardware operator intermediate representation selects a corresponding target code generation module according to different target hardware to generate a file which can be executed on the target hardware. Through the system provided by the invention, a programmer can deploy various post quantum cryptography algorithms to different hardware architectures under the condition that a source program is slightly modified.

The invention provides a centralized quantum key relay network and a key distribution method, relates to the technical field of quantum communication, and comprises four steps of relay request initiation and demand analysis, path constraint and decision, cooperative key generation and verification, and monitoring and processing in a transmission process. Through the quantum digital signature, the quantum security MAC check code and the post quantum cryptography signature mechanism, the security of the system facing the quantum computing threat is greatly improved, and meanwhile, the dynamic path selection combining the aging level, the multi-factor dynamic scoring model and the elastic target time window is adopted; according to the method, the optimal path and the target time can be dynamically adjusted according to the timeliness requirement, the path condition and the network state of the request, the path selection is more flexible, different timeliness requirements are met, the integrity and legality of the secret key are ensured by adopting a three-level verification mode, and meanwhile, when the network has a fault, the safety of the network is ensured. A standby path can be automatically switched and a problem node can be isolated.

The invention provides an algorithm-agile post quantum cryptography system and a working method thereof.The system comprises a hardware platform and a software system, the hardware platform comprises a main processor, the main processor comprises a multi-core CPU, a GPU and a PCIe interface, and the software system comprises a password master control module, a PCIe-EP driving module, a PQC algorithm module, a GPU acceleration module and an algorithm upgrading module. The password master control module receives a PQC algorithm request message of an external host through the PCIe-EP driving module, sends the PQC algorithm request message to the PQC algorithm module and the GPU acceleration module for multi-thread asynchronous acceleration processing, and returns a processing result to the external host through the PCIe interface. According to the algorithm-agile post quantum cryptography system and the working method provided by the invention, the problems that a traditional password card cannot quickly support the PQC algorithm and cannot be quickly reconstructed when the PQC algorithm is updated in the process that the password system migrates to the post quantum cryptography can be solved.

The invention discloses a security encryption method, device, equipment and medium for a vehicle-gauge-level HSM, and relates to the technical field of vehicle network security, and the method comprises the steps: obtaining a target algorithm parameter corresponding to a target encryption task in an algorithm parameter register after receiving the target encryption task, and determining a corresponding encryption algorithm type; if the target algorithm type is a post quantum cryptography algorithm type, a true random number generation component of a vehicle gauge level HSM is called through a post quantum cryptography coprocessor to generate a true random seed, and a target encryption task is executed based on the target algorithm parameter and the true random seed; in the process of executing the target encryption task, second-order mask operation is carried out on the fast number theory transformation operation, whether error injection attacks exist or not is continuously detected in the sampling process, and operation results of the key steps are stored through a preset composite register set.

The invention relates to the technical field of post quantum cryptography, and discloses a multi-algorithm collaborative acceleration system for dynamically reconstructing post quantum cryptography. The system comprises a dynamic parameter library, a password graph indexer, a vectorization scheduling engine and a collaborative execution unit. And after dynamic parameter inventory, the quantum cryptography algorithm operates the parameter set in real time, and feedback update is performed according to the collaborative execution unit. A dynamic cryptographic algorithm index graph is constructed by a cryptographic graph indexer, nodes are algorithm instances, edges are in a cooperative relation, and edge weights are fed back and adjusted according to vectorization scheduling engine path weights. The vectorization scheduling engine carries out vectorization coding on a user password task request to generate a task semantic vector, calculates the similarity between the task semantic vector and an index map node embedding vector, and generates an algorithm selection instruction. And the collaborative execution unit receives the instruction, calls a corresponding algorithm instance for operation, and feeds back the parameter change to the dynamic parameter library. According to the system, dynamic optimization and efficient collaboration of the post-quantum cryptography algorithm are realized, and the adaptability to complex scenes is enhanced.

The invention discloses a side channel attack resistant binomial sampling circuit applied to a post quantum cryptography algorithm. The side channel attack resistant binomial sampling circuit comprises a random number generation unit, a binomial sampling unit and a control logic unit, the random number generation unit is used for generating a pseudo-random number according to input data; the pseudo random number comprises true data and false data; the binomial sampling unit is used for synchronously carrying out binomial sampling on true data and false data; and the control logic unit is used for controlling the random number generation unit and the binomial sampling unit to operate according to an external instruction. According to the side channel attack-resistant binomial sampling circuit applied to the post-quantum cryptographic algorithm, the analysis difficulty of an attacker is increased by generating a pseudo-random number, and meanwhile, the attacker is interfered by synchronously sampling true data and false data, so that the protection on the side channel attack is jointly realized, the security of a Kyber cryptographic system is effectively improved, and the security of the Kyber cryptographic system is improved. And the risk of side channel attack is reduced.

The invention discloses a micro-fluidic DNA detection-based security key generation and authentication method, which comprises the following steps: S1, carrying out DNA detection on a biological sample through a micro-fluidic chip to obtain SNP and STR feature data; s2, performing unified coding on the SNP and STR feature data to form stable bit string representation; s3, processing the bit string representation by using a fuzzy extraction mechanism, and generating a consistent key material under the condition of permitting a detection error; s4, deriving a final symmetric key from the key material by using a key derivation function; and S5, performing security packaging, transmission and authentication on the final symmetric key by adopting a post-quantum cryptography mechanism. According to the security key generation and authentication method based on microfluidic DNA detection, a set of key generation and identity authentication scheme with instantaneity, high specificity and anti-quantum security is constructed.

The invention belongs to the technical field of post-quantum cryptography, and particularly relates to a post-quantum key encapsulation method based on modular lattices and lattice coding. The method disclosed by the invention comprises a scale nested lattice code encoding and decoding method based on a Barnes-Wall lattice; an IND-CPA security public key encryption method is adopted; an IND-CCA security key packaging method is adopted; according to the method, a scale nested lattice code encoding and decoding method based on Barnes-Wall lattices is constructed, and a novel error correction mechanism and a ciphertext compression technology are introduced, so that the limitation of an existing lattice-based secret key packaging algorithm on bandwidth performance is broken through, the decryption error rate is reduced, and the communication efficiency and safety are improved. Besides, the method has flexible parameter selection capability, and adaptive parameter configuration can be provided for different security levels so as to meet security requirements of various application scenes.

The invention discloses an Internet data analysis system and method, and relates to the technical field of data analysis, and the method comprises the steps: collecting the original data of the Internet, carrying out the encryption through quantum key distribution and a post-quantum cryptography algorithm, and generating an encryption-protected data package; decrypting the data packet through a decryption engine, recovering an original data format by using a quantum key, cleaning, and generating a structured data set; based on the data set, loading an adversarial generative network model, creating a virtual sample, and generating an extended data set; performing feature extraction on the extended version data set by adopting a deep learning framework to form a feature vector; building an analysis model through a vector machine according to the feature vectors; the analysis model is applied to predict to-be-analyzed data, a conversion result is in a visual form, and visual display is generated. By integrating the quantum security technology and the artificial intelligence algorithm, the efficiency and accuracy of data analysis are remarkably improved while the data security is ensured.

The disclosure relates to a fifth generation (5G) communication system or a sixth generation (6G) communication system for supporting higher data rates beyond a fourth generation (4G) communication system such as long term evolution (LTE). The disclosure provides techniques for performing client credential assertion based authentication and authorization in a wireless communication system. A method performed by a network entity for performing client credential assertion (CCA) based authentication and authorization of the network entity is provided. The method includes sending, by the network entity to a network repository function (NRF), a first service request, wherein the sending of the first service request includes encrypting, by the network entity, a CCA token using a key encapsulation mechanism (KEM), wherein the KEM is based on a predefined post quantum cryptography (PQC) mechanism, signing, by the network entity, the encrypted CCA token using a digital signature to generate a quantum secure CCA token, wherein the quantum secure CCA token is a digitally signed encrypted CCA token and the digital signature is based on the predefined PQC mechanism, and sending, by the network entity to the NRF, the quantum secure CCA token with the first service request, and receiving, by the network entity from the NRF, a service response to the first service request.

Devices, systems, and methods for secure modular addition and subtraction are provided. A modular adder and subtractor circuit with masking circuit includes an arithmetic to Boolean (A2B) conversion operator configured to convert (i) a second sum and (ii) a value determined based on a first sum, to Boolean resulting in first and second Boolean values, a shifter configured to (i) make a most significant bit of the first Boolean value a least significant bit resulting in a shifted first Boolean value and (ii) make the most significant bit of the second Boolean value a least significant bit resulting in a shifted second Boolean value, and a Boolean to arithmetic (B2A) conversion operator, configured to convert a representation of the shifted first Boolean value and a representation of the shifted second Boolean value to arithmetic representation resulting in first and second arithmetic values, respectively.