Deterministic Key Generation via Nonce Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in generating secure and efficient shared private keys, particularly in preventing the 'bag-of-keys' problem and single point-of-failure issues, especially when deriving deterministic keys from a master key.
Innovation Solution
A computer-implemented method for generating shares of a shared private key, where each participant uses a hash value generated by hashing a nonce value to derive child keys, allowing for deterministic re-generation of shared private keys without exposing the master private key, thus preventing key reuse and single point-of-failure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If deterministic keys are derived from a master key, then key generation efficiency is improved and bag-of-keys problem is prevented, but single point of failure risk increases
Solution Approach 1:
The patent segments the master key into multiple independent key shares distributed among different participants. Each share is essential for key derivation, eliminating the single point of failure while maintaining deterministic key generation. The segmentation allows the system to require multiple participants (threshold) to reconstruct the master key, preventing catastrophic loss from a single compromised share.
Solution Approach 2:
The patent introduces key shares as intermediaries between the master key and the derived keys. Instead of directly accessing the master key, participants use their individual shares combined with public information (nonce, chain code) to derive keys. This intermediary structure distributes trust and prevents any single point of failure while enabling efficient deterministic key generation.
2Reliability
If multiple shared private keys are generated for different protocols, then security and privacy are improved, but key management complexity increases
Solution Approach 1:
The patent creates a universal key derivation function that can generate multiple shared private keys from a single master key using different nonces. This multi-functional approach allows the same key structure to serve multiple protocols and purposes, improving security through key isolation while reducing management complexity through a unified derivation mechanism.
Solution Approach 2:
The patent performs preliminary key setup by distributing key shares among participants before actual key generation is needed. This preliminary action establishes the foundation for efficient subsequent key derivation, reducing on-demand complexity. The pre-distributed shares enable participants to independently derive keys without complex coordination, simplifying ongoing key management.
3Reliability
If random key generation is used for each protocol execution, then security is improved through key isolation, but usability deteriorates due to bag-of-keys problem
Solution Approach 1:
The patent implements dynamic key generation where keys are derived on-demand using a deterministic process based on public information (nonce, chain code) and private key shares. This dynamic approach provides key isolation security similar to random generation but with the advantage of being computationally efficient and reproducible, eliminating the need to store multiple pre-generated keys and improving usability.
Data Source
AI summary
A computer-implemented method of generating a share of a shared private key, wherein each participant of a group of participants has a respective share of a master private key, and wherein the method is performed by a first participant of the group and comprises: generating a first share of a first shared private key based on a first share of the master private key and a first hash value, wherein the first hash value is generated by hashing a nonce value one or more times.