Compile-Time Cryptographic Tables for Boot-Time Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing complexity of machine learning models and data production, particularly in cloud computing environments, leads to significant latency and security risks due to the time-consuming process of cryptographic signature verification, especially during system boot and update periods.
Innovation Solution
Generating lookup tables with cryptographic information during compile time, encrypting them with a secret key, and storing the key in secure storage accessible only to a secure engine, allowing for pre-emptive decryption and evaluation of decrypted data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic signature verification is performed using conventional methods during system boot, then security is maintained, but compute latency increases significantly
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic lookup tables (containing public keys, signatures, and verification data) in secure storage before system boot. During boot, the system performs a root signature verification using these pre-prepared tables, dramatically reducing the time required for cryptographic verification while maintaining security through the use of secure storage and verified cryptographic algorithms
2Reliability
If more cryptographic verification checks are performed, then security is improved, but processing overhead and latency increase
Solution Approach 1:
The patent pre-computes cryptographic verification data including public keys, signatures, and lookup tables before system operation. This allows multiple verification checks to be performed efficiently by referencing pre-prepared data rather than performing computationally intensive cryptographic operations in real-time, thus improving both security through multiple checks and productivity by reducing processing overhead
Solution Approach 2:
The patent creates and stores copies of cryptographic verification data (public keys, signatures, lookup tables) in secure storage for rapid access during verification operations. These pre-copied cryptographic artifacts enable multiple verification checks to be performed efficiently without repeatedly accessing or regenerating the underlying cryptographic material, thereby improving processing throughput while maintaining security
Data Source
AI summary
A computer-implemented method, according to one approach, includes: generating lookup tables for signatures during compile time, the lookup tables having cryptographic information. A secret key is used to encrypt the lookup tables, and the secret key is stored in a secure storage which is accessible only to a secure engine. Moreover, in response to experiencing an initial boot: the lookup tables are decrypted using the secret key, and the decrypted lookup tables are stored in the secure storage. Other systems, methods, and computer program products are described in additional approaches.