Key Sharing Device Asymmetric SIDH Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Diffie-Hellman (DH) key sharing scheme is not quantum-resistant, and there is no known method to convert the supersingular isogeny DH (SIDH) key sharing scheme, which has asymmetricity, into a key sharing scheme with an authentication function.
Innovation Solution
A key sharing device that selects one static key out of two static keys and generates a shared key using the selected static key, enabling conversion of an asymmetric key sharing scheme into a scheme with an authentication function.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the SIDH key sharing scheme is used, then quantum resistance is achieved, but authentication function is lost due to asymmetricity
Solution Approach 1:
The scheme segments the key sharing process into two distinct phases: key generation using asymmetric SIDH for quantum resistance, and key selection using symmetric NAXOS technique for authentication. This segmentation allows each phase to optimize for its specific function while combining to achieve both quantum resistance and authentication capability.
Solution Approach 2:
The invention merges the asymmetric SIDH key sharing scheme with the symmetric NAXOS authentication technique. By combining these two previously separate approaches, the system achieves both quantum resistance (from SIDH) and authentication functionality (from NAXOS), resolving the contradiction between these two features.
2Device complexity
If traditional DH key sharing is used, then simplicity is maintained, but quantum resistance is lost
Solution Approach 1:
The invention changes the mathematical parameters and structures used in key sharing from traditional DH to SIDH-based isogeny calculations. This parameter change enables quantum resistance while maintaining a relatively simple two-stage process structure that builds upon familiar key sharing concepts.
3Reliability
If authentication function is added to key sharing, then security is improved, but reciprocal communication is required
Solution Approach 1:
The NAXOS authentication components are prepared and configured in advance during the key generation phase. This preliminary action allows authentication to be embedded in the initial key exchange without requiring additional reciprocal communication rounds, as the authentication capability is pre-established through the key selection mechanism.
Data Source
AI summary
An objective is to enable conversion of a key sharing scheme having asymmetricity into a key sharing scheme with an authentication function. In a key sharing device, a key selection unit selects, out of two static keys of different classifications, one static key being different from a static key of a key-sharing counterpart. A temporary key generation unit generates a temporary key of the same classification as the static key selected by the key selection unit. A shared key generation unit generates a shared key using the static key selected by the key selection unit and a temporary key generated by the counterpart.


