53 results about "Quantum cryptography" patented technology

This invention discloses a quantum-resistant method and system based on stateless signatures and execution isomorphism, belonging to the field of quantum-resistant cryptography. First, the sender generates an mKEM broadcast payload based on a modulus error rounding algorithm and signs it using a stateless hash signature algorithm. The receiver performs microsecond-level verification of the signature at the network card driver layer; if verification fails, the signature is silently discarded. After successful verification, a dedicated PQC hardware engine decapsulates the signature, implicitly outputting a pseudo-random scrap key if verification fails. The operating system executes an I / O-aware microarchitecture with isomorphic execution, forcing subsequent processes to maintain physical isomorphism in system calls, memory accesses, and peripheral bus activities, regardless of whether the key is real or scrap. This invention eliminates the risk of private key leakage caused by cloud-based state management through stateless signatures and completely eliminates distinguishable side-channel fingerprints across the entire link through physical-level execution isomorphism, achieving system-level quantum-resistant security in high-concurrency scenarios.

Embodiments of the present application provide a hybrid signature method, a signature verification method, an electronic device and a computer readable storage medium. In the method, the target message to be signed is input into the first trusted execution environment to perform a signature operation based on a traditional cryptographic algorithm, to obtain a first digital signature, and then the target message and the first digital signature are input into the second trusted execution environment to perform a signature operation based on a post-quantum cryptography, to obtain a second digital signature, and finally the first digital signature and the second digital signature are spliced to obtain a hybrid digital signature. Based on different cryptographic algorithms, the signature operation is performed to obtain a hybrid digital signature, which can significantly improve the security of message transmission.

The application provides a vehicle security starting method and system based on post-quantum cryptography, and relates to the technical fields of vehicle electronic control and vehicle network security. The method is applied to an ECU of a vehicle, the ECU is pre-stored with public key information based on a post-quantum cryptographic algorithm and stores an image package containing a post-quantum cryptographic digital signature; the method comprises the following steps: in response to the power-on of the ECU, loading the image package, separating original image data and the digital signature therefrom; determining a cryptographic hash value of the original image data; based on the public key information, performing a signature verification operation of the post-quantum cryptographic algorithm on the hash value and the digital signature; and controlling the starting process of the ECU according to the result of the signature verification operation. The application reconstructs the trust chain of the vehicle by using the post-quantum cryptographic algorithm, and implements quantum security signature verification at the vehicle end, which effectively ensures that the software integrity and authenticity can still be effectively verified under the quantum computing environment, thereby providing full-life-cycle security protection for intelligent networked vehicles.

This invention provides a VPN communication system and method based on a quantum server cryptography machine and post-quantum cryptography, comprising: a cloud platform and a VPN terminal encryption device; the VPN terminal encryption device is connected to the cloud platform via a network; the cloud platform includes a quantum server cryptography machine, a key management service platform, and a quantum key service platform; the quantum server cryptography machine is used to generate quantum true random numbers and generate quantum keys based on the quantum true random numbers; the key management service platform is used to store and manage quantum keys; the quantum key service platform is used to support the secure distribution of quantum keys to the VPN terminal encryption device through a post-quantum cryptography algorithm; the VPN terminal encryption device is used to obtain quantum keys from the cloud platform as session keys and establish a VPN communication tunnel with the peer VPN terminal encryption device based on the session keys.

A method of enabling custom cryptography is provided. The method can include sending, by a first computing device and to a second computing device, instructions to initiate a proxy. The proxy can be configured to intercept a message of a user agent. The user agent may be associated with the second computing device. The proxy can be further configured to perform custom cryptography based on the message to obtain a modified message. The custom cryptography may comprise post-quantum cryptography. The proxy can be further configured to send the modified message to at least one of the user agent, a reverse proxy, or a third computing device. The post-quantum custom encryption and / or decryption can comprise Quantum Secure Layer (QSL), Post-Quantum Transport Layer Security (PQTLS), Kyber, SABER, Enhanced McEliece, RLCE, or a National Institute of Standards and Technology (NIST) candidate post-quantum algorithm.

This invention discloses a secure transmission method for satellite constellation communication based on post-quantum cryptography, relating to the fields of satellite communication and information security technology. The method includes: analyzing the satellite constellation topology to determine the latency sensitivity level of the secure handshake; pre-screening a set of candidate PQC algorithms based on the sensitivity level; sensing the channel and extracting non-stationary features such as fading depth, duration, and Doppler rate of change; constructing a multi-dimensional joint optimization model with algorithm identifier, fragmentation granularity, redundancy, and modulation and coding scheme as joint decision variables, aiming to maximize the handshake probability within the expected duration; solving the model to generate an adaptive transmission strategy, and performing adaptive non-uniform fragmentation and fountain code encoding on PQC protocol data units; predicting link trends based on Doppler rate of change and dynamically scheduling symbol transmission. This invention achieves deep coupling optimization of network topology, cryptographic algorithms, and channel characteristics, improving the transmission reliability of PQC in dynamic satellite networks.

This invention discloses a quantum-resistant intention-aware agent hierarchical resource control system and method, comprising: performing local semantic analysis on the target resource requested by the agent, dynamically classifying the target resource into multiple security sensitivity levels based on a preset semantic hierarchical strategy; concatenating the agent's execution instructions, target object, and specific operation purpose, and generating an operation intention digest using a hash algorithm; calling a preset algorithm vector according to the security level to perform identity and intention binding signature; verifying the signature at the agent gateway, and authorizing execution only when the operation intention digest is consistent, the anti-replay identifier is verified, and the hybrid signature is verified. This invention ensures that identity and authorization information possess quantum attack resistance characteristics through hybrid quantum cryptography, strongly binds the execution instructions, target resource, and operation purpose through the operation intention digest to prevent obfuscation proxy attacks, and achieves instantaneous erasure of the authorization key after the task is completed through physical anchoring.

The present disclosure provides a sampling circuit, a control method and a hardware accelerator applied to a lattice cryptography algorithm, and relates to the technical field of post-quantum cryptography. The sampling circuit comprises a padding module configured to pad a seed according to a hash padding rule; a hash operation module configured to perform a hash operation on the padded seed to generate a pseudo-random sequence; a cache module configured to store the pseudo-random sequence generated by the hash operation module; and a sampling module configured to sample the pseudo-random sequence stored in the cache module to obtain a sampling result. The present disclosure provides the cache module, and in the sampling process, the cache module provides data for sampling to the sampling module without relying on the hash operation module to provide data. Therefore, the sampling module and the hash operation module in the present disclosure are independent of each other and can work simultaneously, thereby improving the operation efficiency of the sampling circuit and effectively accelerating the calculation process of the lattice cryptography algorithm.

This application discloses a lightweight hardware implementation method and related apparatus for SHA-3, belonging to the field of post-quantum cryptography. The lightweight hardware implementation method of this application includes initializing a state matrix and absorbing input data into the state matrix; initiating a round function calculation process: when the current round number is less than or equal to a preset round number, reading target data from the state matrix and sequentially performing write-back operations of θ transformation, χ transformation, ι transformation, fused ρ transformation, and π transformation on the target data to obtain the transformed state matrix; when the current round number is greater than the preset round number, calculating and outputting the hash result based on the transformed state matrix. Using this application helps reduce the consumption of logical and storage resources.

The application discloses a cross-domain quantum key distribution method of an optical transport network, an OTN device and a system. The method comprises the following steps: sending cross-domain session key application information to a corresponding first quantum cryptography service platform; receiving session key information returned by the first quantum cryptography service platform, wherein the session key information comprises a working key KeyValue and a cross-platform key request field, the cross-platform key request field comprises a working key identifier KeyID, a key identifier key_tag and a cross-platform session key application value Keyblock; and delivering the cross-platform key request field to a peer OTN device through an overhead byte of an ODUk, so that the peer OTN device requests a corresponding second quantum cryptography service platform to acquire the working key KeyValue based on the cross-platform key request field. The application realizes cross-domain distribution of quantum keys of an OTN transmission network.

The application relates to the technical field of document processing, in particular to an open format document electronic seal method, device, medium and equipment. The method comprises the following steps: a seal maker uses a seal maker post-quantum cryptography algorithm private key to perform digital signature on seal information, and generates a secure electronic seal according to a seal maker certificate of the seal maker, so that the secure electronic seal is sent to a sealer; the sealer generates seal information according to the received secure electronic seal and an open format document to be sealed; the sealer uses a sealer post-quantum cryptography algorithm private key to perform digital signature on the seal information, and generates secure electronic seal data according to a sealer certificate; and the sealer embeds the secure electronic seal data into the open format document to be sealed, so as to generate a sealed open format document. The open format document is sealed by using the post-quantum cryptography algorithm, and long-term security risks caused by the traditional algorithm which is vulnerable to quantum computing attacks such as SM2 are fundamentally eliminated.

A computing device and framework are disclosed for secure local artificial-intelligence inference. A semiconductor module stores encrypted neural-network parameters for large language models and includes a hardware enclave implementing post-quantum cryptography to authenticate model ownership. The enclave decrypts and executes the model entirely within the device, producing signed results while preventing external access to parameters or intermediate data. The system enables offline, owner-verifiable inference of trillion-parameter models with strong resistance to key extraction and tampering.

The application provides a routing processing method of a quantum cryptography network and related equipment. In the method, a source node sends a routing query request to a primary server at a trigger time of the source node reaching a key relay service. The primary server performs relay routing search upon receiving the routing query request, so that a node in need of relay can search for a routing path, the routing search workload is reduced, and thus the calculation resources and network bandwidth can be saved.

This invention discloses a secure communication method and system for power distributed terminals based on post-quantum cryptography. With the development of quantum computing technology, traditional secure communication mechanisms based on elliptic curve cryptography face potential vulnerabilities. In existing secure communication systems for power distributed terminals, the terminal device and the secure access gateway typically use the SM2 elliptic curve cryptography algorithm for session key negotiation, which poses security risks in a quantum computing environment. This invention replaces the SM2 algorithm with a lattice-based post-quantum cryptography algorithm for session key negotiation and doubles the key length of the SM4 algorithm used for symmetric encryption services. While maintaining the original power communication system architecture and business processes, this invention achieves a quantum security upgrade for the power distributed terminal communication system, improving the system's long-term security in future quantum computing environments.

The application provides a business-oriented post-quantum cryptography migration risk determination method and device, equipment and medium, comprising: matching the dependency of the configuration file of the business software with the traditional password library feature library to determine the password library set to be analyzed; querying the password algorithm knowledge base based on the password library set to be analyzed to identify and determine the initial risk seed set, and performing seed call point positioning processing on the initial risk seed set based on the abstract syntax tree to determine a plurality of effective risk seed nodes; performing context-enhanced call chain reverse propagation processing based on the abstract syntax tree and the plurality of effective risk seed nodes to determine the reverse propagation path; performing dynamic confidence evaluation processing, pruning processing and risk path aggregation processing on each reverse propagation path to output a migration priority report. The post-quantum cryptography dependence of the business software is accurately identified, risk quantification and priority sorting are performed, and finally a decision report directly driving the migration action is generated.

This invention discloses a method for detecting algebraic confusion characteristics and anti-attack boundaries of cryptographic systems based on topological homology invariants, belonging to the field of cryptographic security technology. The aim is to address the technical problems of existing anti-attack capability detection methods, which rely on empirical testing, cannot quantify algebraic structure characteristics, and cannot predict security boundaries. The method includes: constructing a chain complex topological model of the algebraic structure of the cryptographic system; numerically solving for the homology group and the topological invariant Betti number; determining algebraic confusion characteristics and anti-attack capabilities based on the Betti number; scanning and locating critical points of the anti-attack boundary; and hierarchical triggering of early warning and adaptive structural optimization. This invention provides an independent and controllable quantitative evaluation scheme for compliance testing of national cryptographic algorithms, enabling early prediction and closed-loop protection of the anti-attack boundary of cryptographic systems. It can be modularly embedded into domestic cryptographic testing platforms, adapting to various scenarios such as national cryptographic algorithms and post-quantum cryptography, and has strong engineering applicability.

This disclosure relates to enhancements to post-quantum cryptography (PQC) for authentication and key negotiation (AKA) processes used in communication networks, and particularly to a PQC adaptation for 6G AKA processes. Aspects of this disclosure include: the use of a pre-shared post-quantum key (PPK), or a PPK selected from a list of PPKs, or the use of a home network public key (pk) and private key (sk) derived using a post-quantum cryptography (PQC) key generation function, to define PQC-based pk and PQC-based sk for authentication processes between user equipment and network entities. Aspects of this disclosure also include the use of PQC-based pk and PQC-based sk for the generation of shared PQC-based keys.

This invention relates to the field of information security technology, specifically disclosing a method and system for full-domain computation of encrypted data using post-quantum homomorphic algebra. The method includes: constructing a homomorphic algebraic structure based on a post-quantum cryptographic difficulty problem; the data owner encrypting the original plaintext data using the public key of this structure to generate ciphertext data; the computer directly performing at least one homomorphic operation on the ciphertext data according to the homomorphic algebra rules without decryption, obtaining the resulting ciphertext; and the data owner decrypting the resulting ciphertext using a private key, with the result being consistent with the result of performing the corresponding operation on the plaintext. This invention combines the mathematical difficulty problem of post-quantum cryptography with a customized homomorphic algebraic mapping to achieve fully homomorphic computation resistant to quantum computing attacks. While ensuring the confidentiality of data throughout its entire lifecycle, it supports complex processing of ciphertext data, providing a quantum-secure solution for privacy and security in cloud environments and distributed collaborations.

According to one embodiment, a key management device includes an acquiring circuitry and a processor. The acquiring circuitry is configured to: acquire identity verification data of a remote QKD key generated by a remote QKD device, and remote QKD device identification information identifying the remote QKD device, from another key management device via a classical communication channel. The processor is configured to: collect a local QKD key generated by a local QKD device and local QKD device identification information identifying the local QKD device; generate identity verification data of the local QKD key; and map, when the identity verification data of the remote QKD key matches the identity verification data of the local QKD key, the remote QKD device identification information to the local QKD device identification information.

A device and a network can authenticate using a subscription concealed identifier (SUCI). The device can store (i) a plaintext subscription permanent identifier (SUPI) for the device, (ii) a network static public key, and (iii) a key encapsulation mechanism (KEM) for encryption using the network static public key. The network can store (i) a device database with the SUPI, (ii) a network static private key, and (iii) the KEM for decryption using the network static private key. The device can (i) combine a random number with the SUPI as input into the KEM to generate a ciphertext as the SUCI, and (ii) transmit the ciphertext / SUCI to the network. The network can (i) decrypt the ciphertext using the KEM to read the SUPI, (iii) select a key K from the device database using the SUPI, and (iv) conduct an Authentication and Key Agreement (AKA) with the selected key K.

This application discloses a coprocessor, hardware acceleration method, device, and medium for post-quantum cryptography algorithms, applied to cloud chips and relating to the field of chip design technology. It includes: a register set divided into a first storage area and a second storage area; a parameter memory for storing auxiliary calculation parameters; multiple parallel butterfly operation units for performing butterfly operations in number-theoretical transformations or inverse number-theoretical transformations to obtain the calculation results; and an access control module connected to the register set, parameter memory, and butterfly operation units, used to simultaneously read the target coefficients of the data to be calculated from the first and second storage areas, and read the corresponding auxiliary calculation parameters from the parameter memory; distribute the target coefficients and auxiliary calculation parameters to multiple butterfly operation units for calculation, and write the calculation results back to the first and second storage areas to update the coefficients. This approach reduces resource consumption and improves computational efficiency while maintaining high parallelism.

The present disclosure relates to post quantum cryptography (PQC) enhancement of authentication and key agreement (AKA) procedures for use in communication networks. Aspects of the disclosure include use of a pre-shared post quantum key (PPK), or a selected PPK from a list of PPKs, or use of a home network public key (pk) and private key (sk) derived using a post-quantum cryptography (PQC) key generation function, defining PQC-based pk and sk, for authentication procedures between user equipment and a network entity. Aspects of the disclosure further include use of the PQC-based pk and sk for key generation of shared PQC-based keys.

The described techniques address issues associated with current post-quantum cryptography (PQC) algorithms by providing a more efficient means of key expansion. Architectures are provided for both an accelerator and an expander, which may be implemented in accordance with any suitable type of cryptographic algorithm that utilizes key expansion, such as PQC algorithms, a key encapsulation mechanism (KEM) algorithm, a Digital Signature Algorithm (DSA), etc. The accelerator architecture enables portions of the expanded key to be generated only when required by a processing block, allowing for the reuse of memory, which allows for a reduction in memory size and thus a smaller footprint (i.e. physical size) compared to conventional architectures. The expander architecture reduces the required interactions and data transfers between the processing block and the key expansion block, thereby reducing the load on the processing block and system components, such as shared buses and bridges.

This invention relates to the field of cryptographic communication, specifically to a dynamic post-quantum cryptography implementation method based on reconfigurable logic units, comprising: establishing a fixed parameter library including the NIST standardized PQC algorithm with full security levels; matching a unique target parameter set after receiving a service instruction to generate a hardware-executable parameter configuration frame; completing the physical isolation between the fixed static control domain and the independently reconfigurable dynamic computation domain within the device; the static domain sends the parameter configuration frame, the dynamic domain configures divisible or cascaded modular multiplication operation channels according to the target bit width, configures modular reduction simple elements with boundary checks according to the target modulus, matches the computation bit width throughout, and eliminates overflow and truncation errors; configures a full-link synchronous pipeline for polynomial operations, configures conflict-free memory access rules according to the target parameters, and achieves bubble-free continuous operation of the computation link; performs independent reconfiguration on subdomains with mismatched parameters in the dynamic domain, while the remaining subdomains continue to run, and starts a new computation process after the reconfiguration verification passes.

The application belongs to the technical field of quantum cryptography, and discloses a hybrid state data storage and retrieval method combining classical encryption and quantum walk. The original data is classically encrypted to generate ciphertext, and the auxiliary quantum state marker is generated on the predefined graph structure by quantum walk, which is combined with the ciphertext to form the hybrid state ciphertext. The hybrid state ciphertext is stored in the data medium. When receiving the retrieval request, the system separates the quantum state marker from the hybrid state ciphertext and performs measurement and analysis to verify the ciphertext integrity and the legality of the access request. The quantum state marker is generated based on the fingerprint information of the encrypted data and the access credential, and its distribution characteristics correspond to the ciphertext one by one. The verification is performed through interference pattern analysis, superposition state reconstruction or feature distribution comparison. The application combines the unique characteristics of quantum states and classical encryption methods, improves the security and tamper resistance of data, and is suitable for data storage and access control scenarios.

The application discloses an IEC104 protocol communication method based on QRNG and PQC fusion, and aims to solve how to realize post-quantum cryptography communication for a device group using IEC104 communication on the basis of QRNG and PQC fusion. A quantum random number generator (QRNG) service is only deployed at a master station, PQC key negotiation is performed between the master station and a slave station through an IEC protocol, a public key and ciphertext of a PQC key encapsulation mechanism are transmitted in fragments, so that both sides obtain a PQC session key, a quantum key is generated by a security adaptation layer of the master station and then transmitted to the slave station, and the slave station and the master station respectively use the quantum key to generate a service key for IEC104 communication encryption through a key derivation function. Through dynamic reloading of an existing IEC104 protocol, transmission of super-long data is realized, and post-quantum modification of an existing device is realized.

A federated learning system and method among medical institutions, and a disease prognosis prediction system including the same. The federated learning system and method are configured to apply a hierarchical clustering-based learning method during federated learning using medical data, and to transmit weights generated based on machine learning results by applying quantum cryptography and timestamp-based encryption techniques. The system and method enable resolution of data heterogeneity among medical institutions, thereby improving the performance of the learning model, and ensures stability by providing protection of personal medical data.