Authenticated Lattice-Based Key Agreement Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key agreement protocols in cryptography lack authentication, making them vulnerable to man-in-the-middle attacks and requiring additional security measures like digital signatures, which are resource-intensive and not suitable for lightweight protocols.
Innovation Solution
A cryptographic method and device configuration that computes a final seed from a pre-shared secret to derive a common object, allowing for authenticated key agreement without requiring secret public keys and reducing the number of hash computations, while maintaining quantum resistance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signatures are added to key agreement protocols to prevent man-in-the-middle attacks, then security is improved, but computational overhead and resource consumption increase
Solution Approach 1:
The patent combines key agreement and authentication into a single integrated protocol. The authenticated key agreement mechanism merges the key exchange process with mutual authentication, eliminating the need for separate digital signature operations while maintaining security against man-in-the-middle attacks. This reduces computational overhead by performing both functions simultaneously rather than sequentially.
Solution Approach 2:
The patent creates a multi-functional cryptographic protocol that simultaneously achieves key agreement, mutual authentication, and resistance to man-in-the-middle attacks. The protocol serves multiple security purposes within a unified framework, reducing the need for multiple separate cryptographic operations and thereby lowering overall computational complexity.
2Reliability
If digital signatures are used for authentication in key agreement protocols, then resistance to man-in-the-middle attacks is improved, but resource consumption increases
Solution Approach 1:
The patent merges authentication and key agreement into a single efficient protocol flow. By integrating mutual authentication directly into the key exchange process, the protocol eliminates the need for separate signature verification operations, thereby reducing resource consumption while maintaining resistance to man-in-the-middle attacks.
3Reliability
If the strength of the shared key depends on the secrecy of the pre-shared secret, then security is improved, but the protocol becomes more restrictive and less adaptable
Solution Approach 1:
The patent segments the security derivation process by introducing intermediate values (x and y) that are derived from the pre-shared secret but are themselves exchanged openly. The final shared key is computed as a function of these intermediate values and private keys, separating the secrecy requirement from the key derivation process. This allows the protocol to work with weaker pre-shared secrets while maintaining strong shared key security.
Solution Approach 2:
The patent changes the parameters of key derivation by introducing public intermediate values (x, y) that replace the direct use of the pre-shared secret in key computation. This transformation allows the system to maintain security based on private key secrecy rather than pre-shared secret strength, thereby improving protocol flexibility and adaptability.
Data Source
AI summary
Some embodiments are directed to a system with a first cryptographic device (10) and second cryptographic device (20). The devices may compute a final seed from a preshared secret known to the devices, and on a pre-seed that exchanged between them. The final seed may be used to derive a common object (a).