Blinded Lattice Public Keys for Quantum-Secure Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic techniques, such as those based on the Discrete Logarithm problem, are vulnerable to quantum computers, which can solve these problems in polynomial time, compromising data security.
Innovation Solution
Implement lattice-based blinding techniques to obfuscate quantum-secure public keys by combining them with blinding parameters, allowing secure communication without revealing the original key, and using lattice-based key encapsulation mechanisms for encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic techniques (e.g., Discrete Logarithm problem) are used, then data security is maintained for classical computers, but security is compromised by quantum computers that can solve these problems in polynomial time
Solution Approach 1:
The patent changes the mathematical parameters from classical cryptographic problems (Discrete Logarithm) to lattice-based problems (Learning With Errors). This parameter change results in a cryptographic system that is secure against quantum computers, as lattice problems cannot be solved efficiently by Shor's algorithm or other quantum algorithms.
Solution Approach 2:
The patent creates a blinded copy of the public key by combining it with a blinding parameter (random lattice element). This blinded public key is used for encryption instead of the original public key. The blinding process creates a new cryptographic instance that maintains security properties while preventing direct association with the original key, thereby protecting against quantum computational attacks.
2Productivity
If the static public key is sent in clear for communication establishment, then communication efficiency is improved, but key exposure increases vulnerability to quantum attacks and tracking
Solution Approach 1:
The patent introduces a blinding parameter as an intermediary element between the static public key and the communication process. The blinding parameter combines with the static public key to create a blinded public key that is sent during communication. This intermediary protects the original key information while enabling efficient communication, as the blinded key can be used directly in encryption operations without revealing the static key.
Solution Approach 2:
The patent performs the blinding operation in advance before communication begins. The static public key is combined with a randomly generated blinding parameter to create the blinded public key that will be used for all subsequent communications. This preliminary action ensures that the key is protected from the start of communication while maintaining efficiency, as the blinded key is ready for immediate use in encryption and decryption operations.
3Reliability
If blinding parameters are applied to public keys, then security against quantum computers is enhanced, but computational complexity increases
Solution Approach 1:
The patent changes the parameter space to lattice-based structures, where the blinding operation involves multiplying lattice elements. While this increases computational complexity compared to simple modular exponentiation, the lattice-based approach provides quantum security. The complexity is managed by using efficient lattice multiplication algorithms and optimizing the blinding parameter generation process.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Blinding techniques can be used to obfuscate or otherwise modify a quantumsecure public key (and the corresponding private, or secret, key) such as a lattice-based public key. Blinding of a public key can include selecting a blinding parameter, which can be a vector or matrix, and applying the blinding parameter to the public key. A corresponding modification can be applied to the private key such that data encrypted using the blinded public key can be decrypted using the blinded public key. When a device needs to send a public key in the clear, e.g., in the course of establishing a secure communication session, the device can generate a blinded public key from its static public key and send the blinded key instead of the static public key.