Noise Generator Timing for Blockchain Ciphertext Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods are insufficient to protect sensitive information on permanent public platforms like blockchain, as they cannot effectively prevent offline decryption attacks, even with strong algorithms and key rotation, due to the evolving capabilities of computing platforms that can break current encryption over time.
Innovation Solution
A computer-implemented method and system that incorporates a noise generator to mimic ciphertext, using timing signals to output ciphertext and noise data, making it difficult for attackers to distinguish between genuine and noise data, thereby impeding decryption attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ciphertext is permanently published on a public blockchain ledger, then data integrity and transparency are improved, but vulnerability to offline decryption attacks increases
Solution Approach 1:
The patent applies preliminary action by adding authentication tags and integrity verification mechanisms to ciphertext before publication on the blockchain. This pre-protection approach ensures that even if attackers obtain the ciphertext, they cannot perform successful offline decryption attacks because the authentication tags will fail verification. The system prepares defensive measures in advance rather than reacting to attacks after they occur.
Solution Approach 2:
The patent introduces authentication tags as an intermediary element between the ciphertext and the decryption verification process. These tags act as mediators that provide additional security verification - when a decryption attempt is made offline, the authentication tag serves as an intermediary check that will fail for unauthorized decryptions, thereby protecting the actual plaintext even though the ciphertext is publicly available.
2Reliability
If strong encryption algorithms and long keys are used, then encryption strength is improved, but computational overhead and processing time increase
Solution Approach 1:
The patent segments the encryption and verification process into distinct components: ciphertext generation, authentication tag creation, and verification. By separating these functions, the system can use strong encryption algorithms for the actual data protection while using more efficient algorithms for the authentication tags. This segmentation allows strong encryption to be applied only where absolutely necessary, reducing overall computational overhead while maintaining security.
Solution Approach 2:
The patent changes parameters by using different key lengths and algorithm strengths for different parts of the system. Rather than applying uniformly strong (and computationally expensive) encryption to all data, the system uses parameter variations - stronger parameters for critical ciphertext and authentication mechanisms, and optimized parameters for routine processing. This selective parameter application maintains encryption strength where needed while improving overall processing efficiency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed herein are system, method, and computer program product embodiments for mitigating offline decryption attacks of ciphertext. An embodiment operates by inputting plaintext into an encryptor, writing ciphertext output from the encryptor into memory, inputting the ciphertext from memory into a noise generator, outputting ciphertext from memory to an output device in response to receiving a first timing signal from a timer, and outputting noise data generated by the noise generator to the output device in response to receiving a second timing signal from the timer. The output device may be a node in a distributed ledger, in some embodiments. The distributed ledger may include a blockchain, for example. Using techniques disclosed herein, encryption may be strengthened to thwart attempts by un-trusted third-party attackers to crack encryption, e.g., of information that is sensitive and/or confidential, even when they use significant computational resources separate from host computers of legitimate parties.