Cryptographic Agility with One-Time Signatures for Secure Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The transition from quantum-vulnerable cryptography to post-quantum cryptography is challenging due to the lack of mature and trusted cryptographic schemes, increased memory/bandwidth requirements, and the difficulty of ensuring backwards compatibility, necessitating a secure mechanism for critical updates without relying on vulnerable cryptography.
Innovation Solution
A method utilizing one-time signatures and symmetric encryption for critical updates, combined with a tamper-proof counter to ensure integrity and confidentiality, and attestation mechanisms for new keys, minimizing device footprint and avoiding reliance on vulnerable cryptographic schemes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional cryptographic schemes (ECC, RSA) are used for device updates, then the updates can be performed with existing mature algorithms, but the updates become vulnerable to quantum computer attacks
Solution Approach 1:
The patent introduces a hybrid cryptographic approach where classical cryptography (ECC/RSA) and post-quantum cryptography (PQC) schemes work together during a transition period. The classical schemes serve as an intermediary bridge, allowing devices to gradually adopt PQC while maintaining backward compatibility and security against quantum attacks without requiring immediate full migration to unproven PQC schemes.
Solution Approach 2:
The patent implements dynamic cryptographic agility, allowing the device to switch between different cryptographic schemes based on the update type and security requirements. Critical updates use PQC schemes for quantum resistance, while non-critical updates may use classical schemes, enabling flexible adaptation without fixed cryptographic constraints.
2Reliability
If post-quantum cryptographic schemes are adopted for quantum resistance, then security against quantum attacks is improved, but memory and bandwidth requirements increase
Solution Approach 1:
The patent applies post-quantum cryptographic schemes selectively only to critical updates that require quantum resistance, while non-critical updates continue to use classical cryptographic schemes with lower resource requirements. This localized application of PQC minimizes the overall memory and bandwidth burden while providing quantum security where absolutely necessary.
3Reliability
If post-quantum cryptographic schemes are implemented, then quantum security is achieved, but backwards compatibility with existing systems becomes difficult
Solution Approach 1:
The patent creates a universal update mechanism that can handle multiple cryptographic schemes through a single unified interface. The update system is designed to accommodate both classical and post-quantum cryptographic schemes, allowing the same update infrastructure to work with existing classical cryptography while supporting new PQC schemes, thus maintaining backwards compatibility.
4Reliability
If cryptographic schemes are updated to resist quantum attacks, then security is improved, but the transition process becomes complex and challenging
Solution Approach 1:
The patent performs preliminary cryptographic scheme provisioning during device manufacturing or initial setup. Multiple cryptographic key pairs (both classical and post-quantum) are pre-generated and stored in the device, along with the necessary code to verify signatures from both scheme types. This preliminary preparation eliminates the need for complex real-time cryptographic transitions during updates, simplifying the overall transition process.
Data Source
AI summary
A method for updating a device, including: receiving, by the device, a public one-time signature key; receiving, by the device, a secret encryption key; receiving an encrypted update package and signature from an update provider; verifying the signature using the public one-time signature key; decrypting the encrypted update package using the secret encryption key; and updating the device using the decrypted update package.