Hash-Linked Public-Key Blocks for Quantum-Resistant Message Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing quantum computing-resistant asymmetric cryptography schemes for message authentication are computationally expensive, require large storage space, or both, making them impractical for lightweight devices like IoT devices.
Innovation Solution
A hash chain of blocks of one-time signature (OTS) public keys is used, where each block is linked to the previous one and includes a payload hash of the message, allowing authentication of subsequent messages using only a single OTS public key generated in advance, with out-of-band authentication of the origin block.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If quantum computing-resistant asymmetric cryptography schemes are used for message authentication, then security against quantum attacks is improved, but computational cost and storage requirements increase
Solution Approach 1:
The patent segments the authentication process into blocks, where each block contains a limited number of OTS public keys. Instead of managing all keys at once, the system processes them in manageable segments, reducing the computational burden on lightweight devices while maintaining quantum-resistant security through the hash chain structure that links blocks together.
Solution Approach 2:
The patent applies preliminary action by pre-generating OTS public keys and organizing them into blocks before deployment. The hash chain is constructed in advance, allowing lightweight devices to simply follow the pre-computed chain without performing complex cryptographic operations during runtime, thus reducing their computational cost while maintaining security.
2Reliability
If quantum computing-resistant asymmetric cryptography schemes are used for message authentication, then security against quantum attacks is improved, but storage space requirements increase
Solution Approach 1:
The patent divides the large set of OTS public keys into smaller blocks, where each block contains a manageable number of keys. This segmentation allows lightweight devices to store only the current block in memory rather than the entire key set, significantly reducing storage requirements while maintaining quantum-resistant authentication capability through the hash chain structure.
Solution Approach 2:
The system performs preliminary organization of OTS public keys into blocks with pre-computed hash chain links before deployment. This allows lightweight devices to store compact block structures rather than raw key data, reducing storage space requirements while preserving the ability to verify quantum-resistant signatures through the pre-established hash chain relationships.
3Adaptability or versatility
If traditional asymmetric cryptography is used with multiple private keys for multiple messages, then message authentication flexibility is improved, but security against quantum attacks deteriorates
Solution Approach 1:
The patent creates a universal hash chain structure that can authenticate multiple messages using a single pre-generated OTS public key. Each block in the chain serves multiple authentication purposes, allowing the system to maintain message authentication flexibility for multiple messages while relying on the quantum-resistant properties of the underlying OTS scheme. The hash chain universally applies to all messages in the sequence without requiring additional private keys.
Solution Approach 2:
The system performs preliminary generation of the hash chain structure containing multiple OTS public keys before message authentication begins. This pre-computed chain enables flexible authentication of multiple messages in sequence, where each message can be authenticated using the appropriate public key from the chain without requiring the device to generate new cryptographic key pairs, thus maintaining both flexibility and quantum resistance.
4Measurement precision
If a receiving device individually authenticates each public key, then authentication accuracy is improved, but operational complexity increases
Solution Approach 1:
The patent introduces the hash chain structure as an intermediary mechanism that connects multiple OTS public keys in a verifiable sequence. Instead of requiring the receiving device to individually authenticate each public key through complex verification processes, the hash chain acts as a mediator that provides cryptographic proof of the relationship between consecutive keys. The receiving device only needs to verify the hash link between the current and previous block, significantly reducing operational complexity while maintaining authentication accuracy through the cryptographic guarantees of the hash chain structure.
Data Source
AI summary
A block to be added to a hash chain is generated. The block is for a message to be sent and includes a link hash of a prior block previously added to the hash chain. The prior block includes a public key corresponding to a private key to be used to digitally sign the block. The block includes a payload hash of a payload of the message, and a next public key corresponding to a next private key to be used to digitally sign a next block to be added to the hash chain after the block. The next block is for a next message to be sent after the message. The block is digitally signed with the private key and added to the hash chain. The link hash links the block to the prior block in the hash chain. The message is sent.