Dynamic Perpetual Encryption Cryptosystem
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cryptographic systems face challenges in generating unpredictable infinite-length random number sequences, secure key distribution, and managing keys to maintain perfect secrecy, particularly with single independent pseudo-random number generators and symmetric cryptosystems, which are prone to equivocation attacks and key reuse issues.
Innovation Solution
A cryptographic system utilizing multiple independent random number generators (RNGs) to produce random keystreams and entropy updates, ensuring perpetual key generation and distribution without exposing keys, using Hi-Generate RNGs and Hi-Encrypt super-encryption to maintain perfect secrecy and ideal secrecy characteristics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single independent pseudo-random number generator is used, then the system is simpler to manage, but the security is weakened due to equivocation attacks and key reuse issues
Solution Approach 1:
The patent divides the single RNG into multiple independent pseudo-random number generators (RNG1, RNG2, etc.). Each RNG generates separate keystreams that are combined through encryption layers. This segmentation prevents equivocation attacks because an attacker cannot determine which keystream segment corresponds to which plaintext segment, and eliminates key reuse issues by ensuring each RNG produces unique keystream material.
Solution Approach 2:
The patent implements nested encryption where multiple keystreams from different RNGs are encrypted in layers. The first keystream encrypts the plaintext, then a second keystream encrypts the result, and so on. This nested structure provides progressive security where each layer adds independent entropy, making the overall system more secure than the sum of individual components.
2Reliability
If keys are distributed frequently to maintain security, then security is improved, but key distribution overhead and system complexity increase
Solution Approach 1:
The patent enables each party to generate their own keystreams locally using independent RNGs seeded with shared secret material. Instead of requiring frequent key distribution from a central authority, the system allows parties to self-generate encryption material continuously. The only distribution requirement is the initial seed material, after which the system is self-sustaining.
Solution Approach 2:
The patent changes the parameter from distributing complete keys to distributing only seed values. The seed values are much shorter and can be distributed securely once, then used to generate indefinitely long keystreams through the RNG process. This transforms the key distribution problem from an ongoing burden to a one-time operation.
3Reliability
If longer initial keys are used, then encryption strength is improved, but the ciphertext length exceeds the unicity distance making the system insecure
Solution Approach 1:
The patent implements continuous keystream generation through multiple RNGs operating in parallel. Instead of using a finite key that is eventually exhausted, the system continuously generates new random material through the RNGs. This ensures the encryption stream never repeats and maintains security indefinitely, unlike traditional approaches where security degrades after the key length is exceeded.
Solution Approach 2:
The patent combines multiple independent keystreams from different RNGs into a composite encryption stream. Each keystream contributes independent entropy, and their combination through nested encryption creates a composite security property that exceeds any single component. This composite approach allows the system to maintain high encryption strength without exceeding unicity distance limitations.
Data Source
AI summary
A dynamic computer communication security encryption method or system using an initial seed key and multiple random number generators of a specific design, whereby a sequence of independent random entropy values is produced by one set of random number generators and encrypted along with the message stream using the initial seed key, or the output of a second set of random number generators initialized with the initial seed key, and following the subsequent transmission of the variable encrypted entropy/message block, the entropy values are used to symmetrically or identically augment or increase the current uncertainty or entropy of the cryptosystem at both the sender and the receiver, prior to the next encryption block operation. The encryption process effectively entailing the use of multiple encryption ciphers, and the entropy augmentation process entailing the encryption or application of various logical mathematical operations on the already dynamic but deterministic internal state values of the second set of random number generators, effectively altering their deterministic outputs in a random probabilistic manner.Random length message value sequences from one or more data sources is combined with one or more random length entropy value sequences from an independent source, following which the entropy “updates” may also be used to alter, or change any cryptosystem variable, value or component in a randomly determined manner. In addition, while ensuring synchronization, the random entropy sequences also serve to “pollute” the cipher-stream and thereby hinder most current forms of cryptanalysis, while simultaneously injecting additional entropy into the cryptographic system and allowing for its propagation to affect any connected system nodes, and thereby introducing unpredictable entropy into the system pseudorandom number generator outputs, and thereby ensuring the perpetual generation of unpredictable random numbers.Super-encryption mechanics are independent of the user data, simple, fast and efficient, and can incorporate compression, error correction and asymmetric encryption authentication routines. But most importantly, super-encryption ensures resistance to brute force attacks (not possible to verify if a message was even sent), an ability to exceed “perfect secrecy” requirements, and an improvement on previous super-encipherment design, since overhead can be dramatically reduced from 100% overhead.Communication links previously established by system nodes with central authorities may be used for secure node authentication and registration, while allowing the central authority to broker and synchronize communication channels and providing mutual authentication and other security functions between the system nodes.