Identifier-Derived Cryptographic Algorithms Against Hidden-Channel Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic algorithms deployed across multiple communication devices are vulnerable to hidden channel attacks and fault attacks, allowing attackers to reverse engineer and extract cryptographic keys, compromising security.
Innovation Solution
A method for generating a unique cryptographic algorithm for each communication device based on its identifier, using a sequence of functions derived from the device's intrinsic identifier, ensuring each algorithm is distinct and resistant to reverse engineering.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same cryptographic algorithm is deployed across multiple communication devices, then ease of operation is improved, but security deteriorates due to vulnerability to hidden channel attacks and fault attacks
Solution Approach 1:
The cryptographic algorithm is segmented into multiple functions, each associated with a different portion of the plaintext or ciphertext. This segmentation ensures that compromising one function does not reveal information about other functions, thereby maintaining security while allowing the algorithm to be deployed across multiple devices.
Solution Approach 2:
Each communication device is assigned a unique identifier that determines the specific sequence of functions in its cryptographic algorithm. This local quality differentiation ensures that while the overall algorithm structure remains consistent across devices (maintaining ease of operation), the specific functional sequences are unique to each device (improving security).
2Reliability
If a unique cryptographic algorithm is generated for each communication device based on its identifier, then security is improved by limiting damage to a single hacked algorithm, but device complexity increases
Solution Approach 1:
The unique cryptographic algorithm for each device is generated in advance during device initialization or provisioning. The sequence of functions is determined by the device's unique identifier and stored locally. This preliminary action eliminates the need for real-time generation during cryptographic operations, thereby maintaining security through uniqueness while avoiding increased operational complexity.
Solution Approach 2:
Each communication device independently generates or derives its own unique cryptographic algorithm using its own identifier. This self-service approach allows each device to have a unique algorithm without requiring complex centralized management or coordination, thereby improving security through uniqueness while keeping device complexity manageable.
Data Source
Figure 1
Figure 2
Figure 3~5
AI summary
A method (100) for generating a cryptographic algorithm for secure communication between at least two communication devices (CD1, CD2), the method (100) comprising: - sending (101), by a communication device (CL1) among the at least two communication devices (CD1, CD2), an identifier (ID) assigned to the communication device (CD1) to a cryptographic algorithm generation device (GD) ; and - receiving (105), by the communication device (CD1), a cryptographic algorithm generated by the cryptographic algorithm generation device (GD), the cryptographic algorithm comprising a sequence of functions (SEQU_FUNC) derived from the identifier (ID).