Key Schedule Isolation in Cryptographic Co-processor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptography programs face security issues due to the potential for Trojan Horse insertion through key schedule algorithms loaded from outside sources, compromising the security of computers by accessing sensitive data and devices.
Innovation Solution
A system and method for secure and flexible cryptographic key schedule generation, where the key schedule algorithm is loaded into a separate virtual machine, and the cryptographic algorithm is executed on a cryptographic co-processor, ensuring isolation and protection from malicious operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If key schedule algorithm is loaded from outside sources, then flexibility and adaptability are improved, but security and reliability deteriorate due to potential Trojan Horse insertion
Solution Approach 1:
The system divides the cryptographic execution environment into separate virtual machines. The key schedule algorithm executes in an isolated virtual machine environment, while the cryptographic algorithm runs in a different virtual machine. This segmentation allows flexible loading of algorithms from external sources while containing potential security threats within isolated boundaries, preventing Trojan Horses from accessing sensitive data in other parts of the system.
Solution Approach 2:
A host device acts as an intermediary between external algorithm sources and the cryptographic execution environment. The host device loads algorithms into appropriate virtual machines and manages the execution process, providing a security layer that verifies and controls algorithm execution without preventing flexibility in algorithm selection.
2Reliability
If key schedule algorithm is isolated in a separate virtual machine, then security is improved, but device complexity increases
Solution Approach 1:
The virtual machine infrastructure provides multiple functions simultaneously: it isolates the key schedule algorithm for security, enables flexible loading from external sources, and manages algorithm execution. This universal approach consolidates what would otherwise require multiple separate security mechanisms into a single platform that handles both security and flexibility requirements.
Data Source
AI summary
The present invention is a method for secure and flexible key schedule generation, which includes loading a key schedule algorithm and a cryptographic algorithm into a cryptographic engine. The method further includes loading the cryptographic algorithm, when selected, into a cryptographic co-processor. The method further includes loading the key schedule algorithm into a separate virtual machine.