Just-in-time PQC Key Expansion Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional post-quantum cryptography (PQC) architectures face challenges with increased memory and processing overhead due to the need to store large expanded keys, which is particularly problematic in embedded applications where memory and configuration overhead are costly.
Innovation Solution
The proposed solution involves an accelerator and expander architecture that generates expanded key data fragments sequentially, allowing for reduced memory usage and processing overhead by reusing memory and minimizing interactions between the processing block and expander, enabling efficient key expansion for PQC algorithms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional PQC algorithms are used to ensure quantum security, then security against quantum attacks is improved, but key size and memory requirements increase significantly
Solution Approach 1:
The patent segments the expanded key into multiple data fragments that are generated sequentially rather than storing the entire expanded key at once. The expander generates only the necessary fragments on-demand, reducing memory requirements while maintaining the full functionality of the expanded key for cryptographic operations.
2Adaptability or versatility
If expanded keys are stored in memory for PQC operations, then cryptographic functionality is maintained, but memory footprint and processing overhead increase
Solution Approach 1:
The system performs preliminary key expansion to generate data fragments in advance, but only expands the necessary portions when needed rather than pre-expanding the entire key. This allows the system to maintain cryptographic functionality while minimizing memory footprint by expanding keys just-in-time before they are required for operations.
Solution Approach 2:
The patent implements a dynamic key expansion approach where the expander operates on-demand based on the processing block's needs. The system transitions from static key storage to dynamic key generation, where memory is allocated and deallocated as needed, reducing overall memory footprint while maintaining full cryptographic adaptability.
3Reliability
If the entire expanded key is generated at once, then key availability is ensured, but processing time and memory usage increase
Solution Approach 1:
The patent segments key generation into smaller units by generating data fragments sequentially rather than producing the entire expanded key at once. This segmentation allows the system to maintain key availability for cryptographic operations while significantly reducing processing time and memory usage by only generating the necessary fragments when needed.
Data Source
AI summary
The described techniques address issues associated with current post-quantum cryptography (PQC) algorithms by providing a more efficient means of key expansion. Architectures are provided for both an accelerator and an expander, which may be implemented in accordance with any suitable type of cryptographic algorithm that utilizes key expansion, such as PQC algorithms, a key encapsulation mechanism (KEM) algorithm, a Digital Signature Algorithm (DSA), etc. The accelerator architecture enables portions of the expanded key to be generated only when required by a processing block, allowing for the reuse of memory, which allows for a reduction in memory size and thus a smaller footprint (i.e. physical size) compared to conventional architectures. The expander architecture reduces the required interactions and data transfers between the processing block and the key expansion block, thereby reducing the load on the processing block and system components, such as shared buses and bridges.