Cryptographic Key Cache Indexing via Identifier Addresses
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for locating cryptographic keys in a cache are time-consuming and complex due to the need for frequent application of hash functions, which slows down the encryption and decryption processes.
Innovation Solution
The use of cryptographic key identifiers as addresses to directly locate and retrieve cryptographic keys from a cache, eliminating the need for additional calculations such as hash functions, thereby enabling fast access and minimizing exposure of cryptographic keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If hash functions are applied to locate cryptographic keys in cache, then cryptographic keys can be located, but the process becomes time-consuming and complex
Solution Approach 1:
The patent pre-computes and stores hash values of cryptographic keys alongside the keys themselves in the cache. When a key is needed, the system performs a direct comparison of the computed hash with stored hash values rather than computing hashes dynamically, significantly reducing retrieval time while maintaining accurate key location capability
Solution Approach 2:
The patent creates and stores copies of hash values in the cache memory alongside the cryptographic keys. These pre-stored hash copies enable rapid key location through simple comparison operations, eliminating the need for time-consuming hash computations during key retrieval operations
2Measurement precision
If hash functions are applied for every lookup of cryptographic information, then cryptographic keys can be located accurately, but the overall encryption and decryption process slows down
Solution Approach 1:
The system pre-computes hash values and stores them in the cache along with the cryptographic keys. During encryption and decryption operations, the system retrieves keys by comparing pre-stored hash values rather than computing new hashes, maintaining accurate key identification while dramatically improving cryptographic operation speed
Solution Approach 2:
The patent maintains continuous cryptographic operations by keeping hash values readily available in cache memory. This eliminates interruptions caused by repeated hash computations, allowing encryption and decryption processes to proceed continuously at high speed without periodic slowdowns for key lookup operations
3Speed
If cryptographic keys are stored in a cache for fast access, then retrieval speed improves, but security exposure increases
Solution Approach 1:
The patent introduces hash values as intermediary elements between the cryptographic keys and the lookup process. The cache stores both keys and their corresponding hash values, allowing the system to work with the less sensitive hash representations during retrieval operations while maintaining secure access to the actual cryptographic keys when needed
Solution Approach 2:
The patent applies different security measures to different parts of the cached data. Hash values are stored in a more accessible format for fast comparison, while the actual cryptographic keys maintain stricter access controls. This local differentiation of security properties enables fast access through hash comparison while protecting the sensitive key material
Data Source
AI summary
Example embodiments provide various techniques for locating cryptographic keys stored in a cache. The cryptographic keys are temporarily stored in the cache until retrieved for use in a cryptographic operation. The cryptographic key may be located or found through reference to its cryptographic key identifier. In an example, a particular cryptographic key may be needed for a cryptographic operation. The cache is first searched to locate this cryptographic key. To locate the cryptographic key, the cryptographic key identifier that is associated with this cryptographic key is provided. In turn, the cryptographic key identifier may be used as an address into the cache. The address identifies a location of the cryptographic key within the cache. The cryptographic key may then be retrieved from the cache at the identified address and then used in the cryptographic operation.