63 results about "Quantum codes" patented technology

The application discloses an encryption method fusing quantum key and post-quantum cryptographic algorithm, and belongs to the technical field of data encryption. The original quantum key is generated by a BB84 protocol QKD device, and a post-quantum key generation seed, a lattice noise scaling factor and a quantum enhanced session base key are obtained through hash derivation; quantum derived mask is generated by combining the original quantum key and the operation data characteristics of the water and power terminal; the quantum mask protection data is obtained by performing XOR preprocessing on the data to be encrypted; based on the post-quantum encryption algorithm, the two-part basic ciphertext is generated by using the above-mentioned seed, parameters and protection data; the original quantum key is divided into pieces to obtain quantum enhanced encryption values, and the two-part ciphertext is subjected to secondary disturbance encryption and XOR processing, thereby forming enhanced ciphertext; and finally, the enhanced ciphertext and the check code are spliced and transmitted to the central control room. Through multi-level encryption and key enhancement, the security and attack resistance of data transmission in the water and power terminal and the like are significantly improved.

An illustrative transmitter can achieve improvement in SN ratio and stability of the signal output under control at the transmission side, even in the case of an optical transmission line having the propagation characteristics susceptible to environmental changes. The transmitter includes: an optical transmission section configured to generate weak signal light and reference light from a transmission light pulse, and transmit the signal light and the reference light to the optical transmission line; and a controller configured to modulate pulse intensity and pulse width of the transmission light pulse according to a transmission line state of probe light having propagated through the optical transmission line.

The application provides a vehicle security starting method and system based on post-quantum cryptography, and relates to the technical fields of vehicle electronic control and vehicle network security. The method is applied to an ECU of a vehicle, the ECU is pre-stored with public key information based on a post-quantum cryptographic algorithm and stores an image package containing a post-quantum cryptographic digital signature; the method comprises the following steps: in response to the power-on of the ECU, loading the image package, separating original image data and the digital signature therefrom; determining a cryptographic hash value of the original image data; based on the public key information, performing a signature verification operation of the post-quantum cryptographic algorithm on the hash value and the digital signature; and controlling the starting process of the ECU according to the result of the signature verification operation. The application reconstructs the trust chain of the vehicle by using the post-quantum cryptographic algorithm, and implements quantum security signature verification at the vehicle end, which effectively ensures that the software integrity and authenticity can still be effectively verified under the quantum computing environment, thereby providing full-life-cycle security protection for intelligent networked vehicles.

This invention provides a VPN communication system and method based on a quantum server cryptography machine and post-quantum cryptography, comprising: a cloud platform and a VPN terminal encryption device; the VPN terminal encryption device is connected to the cloud platform via a network; the cloud platform includes a quantum server cryptography machine, a key management service platform, and a quantum key service platform; the quantum server cryptography machine is used to generate quantum true random numbers and generate quantum keys based on the quantum true random numbers; the key management service platform is used to store and manage quantum keys; the quantum key service platform is used to support the secure distribution of quantum keys to the VPN terminal encryption device through a post-quantum cryptography algorithm; the VPN terminal encryption device is used to obtain quantum keys from the cloud platform as session keys and establish a VPN communication tunnel with the peer VPN terminal encryption device based on the session keys.

This invention proposes a hybrid quantum-resistant security enhancement method for IPSec VPNs. The method includes: intercepting Internet Key Exchange (ITE) packets and adding a proxy header between the transport layer header and the ISE payload of the packets; obtaining a quantum key from a key pool using quantum key distribution technology and generating a first-stage session key based on the quantum key; protecting the ISE key negotiation process using a quantum-resistant cryptographic algorithm to generate a second-stage session key; and using the first-stage and second-stage session keys as input parameters for a key derivation function to generate a final session key for encrypted data transmission. This invention, without modifying the original IPSec negotiation process, supports dynamic key combinations of different security levels, enhancing the quantum security protection capability of VPN data transmission while maintaining system flexibility and performance.

This invention discloses a hardware optimization method for shared NTT in a hybrid application scenario of quantum-resistant cryptography ML-KEM and ML-DSA. For the three core basic operators in the NTT module—modular addition, modular subtraction, and modular multiplication—this invention redesigns the corresponding hardware implementation structure. Based on the design of ML-KEM with a smaller modulus bit length, it supports large-bit-width NTT operations by time-division multiplexing small-width arithmetic units, effectively reducing the hardware overhead of the underlying operators. For ML-DSA NTT operations, this invention proposes a dedicated pipeline structure that matches the improved operators. This structure optimizes register overhead through reasonable design of data flow paths and multiplexing mechanisms, further reducing system resource costs. This invention achieves compatibility support for multiple NTT parameters, thereby enabling the simultaneous completion of NTT operation tasks under different algorithms or parameter sets on the same hardware platform.

The application discloses a kind of security cryptographic chip authentication methods and systems supporting post-quantum cryptographic algorithm, belong to information security and cryptographic chip technical field, including integrated in the security cryptographic chip inside security cryptographic chip end and with the authentication server end of security cryptographic chip end communication connection;Security cryptographic chip end includes hardware root of trust module, for generating chip unique identity identifier and hardware root key;Security coprocessor;Post-quantum cryptographic hardware acceleration engine is used to carry out hardware acceleration operation to post-quantum cryptographic algorithm;Anti side channel protection module is used to provide mask operation protection, random power compensation and timing disturbance;Secure storage module is used to store the post-quantum cryptographic private key material and equipment certificate encrypted by hardware root key;The application is while resisting quantum computing attack, with hardware level anti-cloning and anti-physical detection ability, applicable to high security level chip authentication scene.

This invention discloses a secure transmission method for satellite constellation communication based on post-quantum cryptography, relating to the fields of satellite communication and information security technology. The method includes: analyzing the satellite constellation topology to determine the latency sensitivity level of the secure handshake; pre-screening a set of candidate PQC algorithms based on the sensitivity level; sensing the channel and extracting non-stationary features such as fading depth, duration, and Doppler rate of change; constructing a multi-dimensional joint optimization model with algorithm identifier, fragmentation granularity, redundancy, and modulation and coding scheme as joint decision variables, aiming to maximize the handshake probability within the expected duration; solving the model to generate an adaptive transmission strategy, and performing adaptive non-uniform fragmentation and fountain code encoding on PQC protocol data units; predicting link trends based on Doppler rate of change and dynamically scheduling symbol transmission. This invention achieves deep coupling optimization of network topology, cryptographic algorithms, and channel characteristics, improving the transmission reliability of PQC in dynamic satellite networks.

This invention discloses a quantum-resistant intention-aware agent hierarchical resource control system and method, comprising: performing local semantic analysis on the target resource requested by the agent, dynamically classifying the target resource into multiple security sensitivity levels based on a preset semantic hierarchical strategy; concatenating the agent's execution instructions, target object, and specific operation purpose, and generating an operation intention digest using a hash algorithm; calling a preset algorithm vector according to the security level to perform identity and intention binding signature; verifying the signature at the agent gateway, and authorizing execution only when the operation intention digest is consistent, the anti-replay identifier is verified, and the hybrid signature is verified. This invention ensures that identity and authorization information possess quantum attack resistance characteristics through hybrid quantum cryptography, strongly binds the execution instructions, target resource, and operation purpose through the operation intention digest to prevent obfuscation proxy attacks, and achieves instantaneous erasure of the authorization key after the task is completed through physical anchoring.

The present disclosure provides a sampling circuit, a control method and a hardware accelerator applied to a lattice cryptography algorithm, and relates to the technical field of post-quantum cryptography. The sampling circuit comprises a padding module configured to pad a seed according to a hash padding rule; a hash operation module configured to perform a hash operation on the padded seed to generate a pseudo-random sequence; a cache module configured to store the pseudo-random sequence generated by the hash operation module; and a sampling module configured to sample the pseudo-random sequence stored in the cache module to obtain a sampling result. The present disclosure provides the cache module, and in the sampling process, the cache module provides data for sampling to the sampling module without relying on the hash operation module to provide data. Therefore, the sampling module and the hash operation module in the present disclosure are independent of each other and can work simultaneously, thereby improving the operation efficiency of the sampling circuit and effectively accelerating the calculation process of the lattice cryptography algorithm.

This invention discloses a post-quantum cryptographic encryption communication device for a satellite constellation communication network, belonging to the field of satellite communication security technology. It includes a constellation link management module, a post-quantum authentication module, a post-quantum key negotiation module, a data encryption processing module, a secure key storage module, and a hardware acceleration and power consumption control module. The constellation link management module is communicatively connected to the post-quantum key negotiation module, the post-quantum authentication module, and the data encryption processing module. The post-quantum authentication module is communicatively connected to the post-quantum key negotiation module and the secure key storage module. The post-quantum key negotiation module is communicatively connected to the data encryption processing module, the secure key storage module, and the hardware acceleration and power consumption control module. This invention uses the above device to achieve real-time perception of the satellite communication link status through the constellation link management module, enabling key negotiation to be dynamically triggered according to constellation topology changes, thereby improving communication security.

This application discloses a matrix operation processor and data processing method for quantum-resistant cryptographic algorithms, belonging to the field of quantum-resistant cryptography. The matrix operation processor includes a control module and an operation module. The control module is configured to receive an operation request containing a target matrix, allocate a storage address, control a matrix generator to generate and store data to the corresponding address; in response to a trigger signal indicating that a row of data in the target matrix has been generated, it reads the data from the corresponding address and sends it to the operation module, and controls the matrix generator to generate the next row of data in the target matrix; the operation module includes multiple parallel multiply-accumulate units, configured to perform multiplication and accumulation operations on the data sent by the control module according to the operation rules corresponding to the linear transformation operation type between the target matrix and the first matrix; the number of multiply-accumulate units is determined by the bit width of a single data read. Applying this application aims to improve the efficiency of matrix operations.

This application discloses a lightweight hardware implementation method and related apparatus for SHA-3, belonging to the field of post-quantum cryptography. The lightweight hardware implementation method of this application includes initializing a state matrix and absorbing input data into the state matrix; initiating a round function calculation process: when the current round number is less than or equal to a preset round number, reading target data from the state matrix and sequentially performing write-back operations of θ transformation, χ transformation, ι transformation, fused ρ transformation, and π transformation on the target data to obtain the transformed state matrix; when the current round number is greater than the preset round number, calculating and outputting the hash result based on the transformed state matrix. Using this application helps reduce the consumption of logical and storage resources.

The application discloses a cross-domain quantum key distribution method of an optical transport network, an OTN device and a system. The method comprises the following steps: sending cross-domain session key application information to a corresponding first quantum cryptography service platform; receiving session key information returned by the first quantum cryptography service platform, wherein the session key information comprises a working key KeyValue and a cross-platform key request field, the cross-platform key request field comprises a working key identifier KeyID, a key identifier key_tag and a cross-platform session key application value Keyblock; and delivering the cross-platform key request field to a peer OTN device through an overhead byte of an ODUk, so that the peer OTN device requests a corresponding second quantum cryptography service platform to acquire the working key KeyValue based on the cross-platform key request field. The application realizes cross-domain distribution of quantum keys of an OTN transmission network.

The application relates to the technical field of document processing, in particular to an open format document electronic seal method, device, medium and equipment. The method comprises the following steps: a seal maker uses a seal maker post-quantum cryptography algorithm private key to perform digital signature on seal information, and generates a secure electronic seal according to a seal maker certificate of the seal maker, so that the secure electronic seal is sent to a sealer; the sealer generates seal information according to the received secure electronic seal and an open format document to be sealed; the sealer uses a sealer post-quantum cryptography algorithm private key to perform digital signature on the seal information, and generates secure electronic seal data according to a sealer certificate; and the sealer embeds the secure electronic seal data into the open format document to be sealed, so as to generate a sealed open format document. The open format document is sealed by using the post-quantum cryptography algorithm, and long-term security risks caused by the traditional algorithm which is vulnerable to quantum computing attacks such as SM2 are fundamentally eliminated.

A computing device and framework are disclosed for secure local artificial-intelligence inference. A semiconductor module stores encrypted neural-network parameters for large language models and includes a hardware enclave implementing post-quantum cryptography to authenticate model ownership. The enclave decrypts and executes the model entirely within the device, producing signed results while preventing external access to parameters or intermediate data. The system enables offline, owner-verifiable inference of trillion-parameter models with strong resistance to key extraction and tampering.

This invention discloses a reconfigurable circuit for public-key cryptography algorithms. This circuit combines coarse / sub-coarse-grained reconfigurable circuits with microcontroller circuits. The sub-coarse-grained reconfigurable unit array employs a reconfigurable multiplier array from a multi-level reconfigurable NTT circuit to support NTT's underlying modular arithmetic. The coarse-grained reconfigurable units, through parameter configuration and data interconnection configuration, are used to implement large integer modular exponentiation and elliptic curve scalar multiplication. Based on the novel multi-level reconfigurable NTT circuit provided in this invention, quantum-resistant cryptographic algorithms can be implemented while also supporting traditional public-key cryptographic algorithms, thus offering advantages such as a small algorithm engine area and high flexibility.

The present disclosure relates to a method, a device, and a computer program for constructing a quantum cryptographic communication network. More specifically, the present disclosure provides a method for constructing, in a device, a quantum cryptographic communication network including multiple unit nodes which include multiple quantum cryptographic communication unit nodes, including application nodes and quantum key distribution nodes, and one or more relay unit nodes configured to relay between the quantum key distribution nodes, the method including: calculating, for one or more target unit nodes among the multiple unit nodes, a weight reflecting a quantum key demand at the target unit nodes according to communication between the application nodes among the multiple quantum cryptographic communication unit nodes; and selecting one or more unit nodes, which are to be provided with cache servers for the communication between the application nodes, from among the target unit nodes based on the calculated weight.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

The application provides a business-oriented post-quantum cryptography migration risk determination method and device, equipment and medium, comprising: matching the dependency of the configuration file of the business software with the traditional password library feature library to determine the password library set to be analyzed; querying the password algorithm knowledge base based on the password library set to be analyzed to identify and determine the initial risk seed set, and performing seed call point positioning processing on the initial risk seed set based on the abstract syntax tree to determine a plurality of effective risk seed nodes; performing context-enhanced call chain reverse propagation processing based on the abstract syntax tree and the plurality of effective risk seed nodes to determine the reverse propagation path; performing dynamic confidence evaluation processing, pruning processing and risk path aggregation processing on each reverse propagation path to output a migration priority report. The post-quantum cryptography dependence of the business software is accurately identified, risk quantification and priority sorting are performed, and finally a decision report directly driving the migration action is generated.

This invention discloses a method for detecting algebraic confusion characteristics and anti-attack boundaries of cryptographic systems based on topological homology invariants, belonging to the field of cryptographic security technology. The aim is to address the technical problems of existing anti-attack capability detection methods, which rely on empirical testing, cannot quantify algebraic structure characteristics, and cannot predict security boundaries. The method includes: constructing a chain complex topological model of the algebraic structure of the cryptographic system; numerically solving for the homology group and the topological invariant Betti number; determining algebraic confusion characteristics and anti-attack capabilities based on the Betti number; scanning and locating critical points of the anti-attack boundary; and hierarchical triggering of early warning and adaptive structural optimization. This invention provides an independent and controllable quantitative evaluation scheme for compliance testing of national cryptographic algorithms, enabling early prediction and closed-loop protection of the anti-attack boundary of cryptographic systems. It can be modularly embedded into domestic cryptographic testing platforms, adapting to various scenarios such as national cryptographic algorithms and post-quantum cryptography, and has strong engineering applicability.

This invention relates to the field of information security technology, specifically disclosing a method and system for full-domain computation of encrypted data using post-quantum homomorphic algebra. The method includes: constructing a homomorphic algebraic structure based on a post-quantum cryptographic difficulty problem; the data owner encrypting the original plaintext data using the public key of this structure to generate ciphertext data; the computer directly performing at least one homomorphic operation on the ciphertext data according to the homomorphic algebra rules without decryption, obtaining the resulting ciphertext; and the data owner decrypting the resulting ciphertext using a private key, with the result being consistent with the result of performing the corresponding operation on the plaintext. This invention combines the mathematical difficulty problem of post-quantum cryptography with a customized homomorphic algebraic mapping to achieve fully homomorphic computation resistant to quantum computing attacks. While ensuring the confidentiality of data throughout its entire lifecycle, it supports complex processing of ciphertext data, providing a quantum-secure solution for privacy and security in cloud environments and distributed collaborations.

According to one embodiment, a key management device includes an acquiring circuitry and a processor. The acquiring circuitry is configured to: acquire identity verification data of a remote QKD key generated by a remote QKD device, and remote QKD device identification information identifying the remote QKD device, from another key management device via a classical communication channel. The processor is configured to: collect a local QKD key generated by a local QKD device and local QKD device identification information identifying the local QKD device; generate identity verification data of the local QKD key; and map, when the identity verification data of the remote QKD key matches the identity verification data of the local QKD key, the remote QKD device identification information to the local QKD device identification information.

A co-processor, chip, electronic device and key generation method for implementing lattice-based quantum-resistant cryptographic algorithms, the co-processor comprising: a processor core comprising at least two operation cores capable of implementing all operations of the lattice-based quantum-resistant cryptographic algorithm; a register for storing configuration information required for calling functions in the operation core; a memory controller for calling data in the memory according to the configuration information under the control of the at least two operation cores, so that the at least two operation cores can operate in parallel with each other. The co-processor of the application realizes the full hardware design of the operation function in the lattice-based quantum-resistant cryptographic algorithm, can greatly improve the operation speed of the overall algorithm process, in addition, part of the cryptographic functions can be processed in parallel, which not only further improves the operation performance, but also greatly improves the utilization rate of system and hardware resources, and can be applied to medium and high-end products with higher algorithm operation performance.