Implicit Certificates Using RLWE for Quantum-Resistant Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cryptographic techniques, such as those relying on asymmetric mathematical problems, may become vulnerable to advances in technology, necessitating the development of stronger cryptographic methods to maintain data security, especially in protecting sensitive information like financial and medical data.
Innovation Solution
The implementation of implicit certificates using Ring Learning With Errors (RLWE) public keys, which are resistant to quantum-based computing attacks, enables secure communication by generating and verifying cryptographic key pairs through a certificate authority, ensuring the authenticity of public keys and verified access to private keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional asymmetric cryptographic techniques are used, then current data security requirements are met, but vulnerability to quantum computing attacks increases
Solution Approach 1:
The patent changes the cryptographic parameter foundation from traditional asymmetric mathematics to lattice-based mathematics (RLWE problem). This parameter change enables quantum resistance while maintaining cryptographic functionality, directly resolving the vulnerability to quantum computing attacks
2Reliability
If digital certificates are used to verify identity, then authentication is provided, but computational resource consumption increases
Solution Approach 1:
The patent extracts the certificate verification functionality into the key generation process itself. The implicit certificate scheme allows verification to be performed during key pair generation without requiring separate certificate validation, reducing computational overhead while maintaining authentication capability
Solution Approach 2:
The system enables self-verification through the mathematical structure of implicit certificates. The verification of authentication capability is performed automatically as part of the key generation process without requiring external certificate authority intervention, reducing computational resource consumption
Data Source
AI summary
Two parties to a communication establish public and private keys through the use of implicit certificates. Each party establishes a new static key pair, and determines a difference between the new static key pair and the previously established keys. The differences are exchanged and used to determine new public static keys. Each party generates an ephemeral key pair from the static key pair, and a shared secret is derived from a combination of the ephemeral keys and the new static keys.