Firmware Signature Switching for Cryptographic Algorithm Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptographic devices face difficulties in verifying firmware using new cryptographic algorithms during updates, making it challenging to switch from existing to new cryptographic algorithms.
Innovation Solution
A device and method for switching encryption algorithms by verifying a first signature using a first public key and hash value, followed by writing a second public key into memory upon successful verification, enabling the use of the new cryptographic algorithm for firmware verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a cryptographic device uses an existing cryptographic algorithm for firmware verification, then firmware verification can be performed reliably, but the device cannot verify firmware using new cryptographic algorithms
Solution Approach 1:
The cryptographic device dynamically switches between different cryptographic algorithms based on the verification results. The device maintains multiple cryptographic algorithms (first and second algorithms) and can transition from using the first algorithm to the second algorithm after successful verification, enabling adaptability to new algorithms while maintaining verification reliability through the established first algorithm
Solution Approach 2:
The device performs preliminary verification using the first cryptographic algorithm before accepting firmware signed with the second algorithm. By verifying the first signature (generated with the first algorithm) before verifying the second signature (generated with the new algorithm), the device ensures reliability is maintained during the transition to new algorithms
2Reliability
If a new firmware verification algorithm is required to replace the existing firmware, then cryptographic security can be improved, but it becomes difficult for the cryptographic device to verify firmware using the new algorithm
Solution Approach 1:
The first cryptographic algorithm and first signature act as an intermediary mechanism that bridges the gap between old and new cryptographic systems. The device uses the first algorithm to verify the first signature, which then enables the use of the second algorithm for verifying the second signature, making the transition to new cryptographic security operational
Solution Approach 2:
The firmware verification process is segmented into two distinct verification stages: first verifying the first signature using the first cryptographic algorithm, then verifying the second signature using the second cryptographic algorithm. This segmentation allows the device to adopt new cryptographic security measures while maintaining ease of operation through a structured, step-by-step verification process
3Device complexity
If the cryptographic device supports only one cryptographic algorithm, then the verification process is simple, but the device cannot switch to new cryptographic algorithms
Solution Approach 1:
The cryptographic device is designed with multi-functionality to support multiple cryptographic algorithms (first and second algorithms). The device can perform verification using either algorithm depending on the verification stage and signature type, achieving adaptability while managing complexity through a unified verification framework that handles both algorithms systematically
Data Source
AI summary
A device includes a memory and a processor configured to receive, from a host, a first signature that is based on a first cryptographic algorithm, a second signature that is based on a second cryptographic algorithm, and firmware, verify the first signature based on a first public key for decrypting the first signature and a hash value associated with the firmware, and write a second public key that is included in the firmware into the memory in response to successful verification of the first signature.