White-Box Cryptography Using GNSS Navigation Data Entropy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In white-box cryptography, ensuring the integrity and randomness of navigation data used to generate random values is crucial, as attackers can control the system and tamper with software, compromising key distribution and cryptographic functions, leading to vulnerabilities in digital rights management systems.
Innovation Solution
A method and system that verify the integrity of navigation data from a GNSS using an integrity device, ensuring the data is not spoofed, and calculate the entropy of random samples to ensure sufficient randomness, encrypting or hashing these samples with a secret key for secure use in white-box cryptography operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If navigation data is used to generate random values in white-box cryptography, then randomness is improved, but integrity and susceptibility to spoofing deteriorate
Solution Approach 1:
An integrity device is introduced as an intermediary between the navigation data source and the random value generation process. This device verifies the integrity of navigation data using authentication codes and timestamps, ensuring that only authenticated data contributes to random value generation, thereby preventing spoofing while maintaining randomness quality
Solution Approach 2:
The system performs preliminary integrity verification of navigation data before using it to generate random values. By checking authentication codes and timestamps in advance, the system ensures data integrity is confirmed prior to cryptographic use, preventing compromised data from affecting randomness
2Reliability
If entropy calculation is performed on random samples, then randomness verification is improved, but processing time increases
Solution Approach 1:
The system calculates entropy as a specific parameter to quantify and verify randomness quality. By using entropy calculation as a measurable parameter, the system can objectively verify randomness without requiring more complex or time-consuming verification methods
Solution Approach 2:
The system performs entropy calculation on a sufficient number of random samples to ensure verification reliability. By processing an appropriate quantity of samples, the system achieves reliable randomness verification without performing excessive processing that would unnecessarily increase time consumption
3Reliability
If encryption or hashing is applied to random samples with a secret key, then security is improved, but computational complexity increases
Solution Approach 1:
The system replaces physical or manual security mechanisms with cryptographic operations (encryption or hashing) using secret keys. This substitution provides strong security guarantees through mathematical principles rather than relying on complex physical security measures, achieving high security with manageable computational requirements
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for verifying the integrity of navigation data used to produce random values for a white-box cryptography system including: receiving information from a navigation system; verifying the integrity of the received navigation information; extracting random information from the received navigation information; and performing a white-box cryptography operation using the extracted random information. Also, a method for determining that the random information samples used to produce random values for a white-box cryptography system have sufficient entropy, including: determining a number of random samples to initially collect; collecting the number of random samples from an external random number generator; calculating the entropy of the collected random samples; encrypting or hashing the collected random samples using the white-box cryptography system and a secret key; and performing a white-box cryptography operation using the encrypted collected random samples.