Chip Debug Authentication Using AEAD and Key Encapsulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current SSL/TLS authentication methods in chip debugging are not quantum-resistant, leading to potential quantum attacks and high resource consumption, and existing enhanced challenge-response and digital signature schemes have long public key lengths and high latency.
Innovation Solution
Implement an identity authentication method using an unsigned algorithm and a protection mechanism, employing Authenticated Encryption with Associated Data (AEAD) to encrypt user credentials and utilize key encapsulation mechanisms to ensure secure debugging rights, reducing resource consumption and latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL/TLS is used to establish a secure channel between client and server, then data transmission security is improved, but quantum resistance is lost and resource consumption increases
Solution Approach 1:
The patent changes the cryptographic parameters from classical SSL/TLS algorithms to post-quantum cryptographic algorithms. Specifically, it uses lattice-based cryptography schemes (such as CRYSTALS-Kyber for key encapsulation and CRYSTALS-Dilithium for digital signatures) which provide quantum resistance by relying on the hardness of lattice problems that are resistant to quantum computer attacks.
2Reliability
If enhanced challenge response and digital signature authentication is adopted, then authentication security is improved, but public key length becomes too long and latency increases
Solution Approach 1:
The patent performs key generation and encapsulation in advance during the debugging interface initialization phase. The server generates key pairs beforehand, and the client performs key encapsulation during the authentication process, which reduces the computational latency during actual authentication. The challenge-response mechanism is also pre-configured with necessary cryptographic parameters.
Solution Approach 2:
The authentication process is divided into distinct phases: key generation phase, key encapsulation phase, challenge-response phase, and debugging authorization phase. This segmentation allows each phase to be optimized independently, reducing overall authentication latency while maintaining security.
3Object-affected harmful factors
If PQC signature algorithm is used for authentication, then quantum resistance is achieved, but resource consumption becomes too high
Solution Approach 1:
The patent introduces a key encapsulation mechanism as an intermediary between the client and server for secure key exchange. Instead of directly using resource-intensive PQC signatures for all communications, the system first establishes a shared secret through key encapsulation, which then enables more efficient symmetric encryption for subsequent data transmission, reducing overall resource consumption.
Data Source
AI summary
A debugging method includes: sending an ID of a debugged device to a client in response to receiving a debugging request from the client; receiving credential information from the client and receiving a public key corresponding to the ID of the debugged device from the client, obtaining target encrypted information by using an Authenticated Encryption with Associated Data (AEAD) encryption algorithm based on the received public key and the received credential information, and sending the target encrypted information to the client, wherein the received credential information is generated based on a user credential and a challenge value corresponding to the received public key; and enabling a debugging right in response to receiving encrypted debugging control information from the client, wherein the encrypted debugging control information is generated based on the target encrypted information.