Protocol Key Negotiation Quantum-Safe Handshake Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional encryption protocols are vulnerable to quantum attacks, particularly those using public-key cryptography systems like Diffie-Hellman and elliptic curve Diffie-Hellman, which require significant modifications or double encryption to enhance security, resulting in performance overhead and reduced data throughput.

Innovation Solution

Implementing a protocol that double encrypts only the handshake portion of an encrypted communication session while keeping the bulk encryption portion singly encrypted, using quantum-safe algorithms like supersingular isogeny Diffie Hellman for the handshake and a quantum-safe symmetric algorithm for bulk encryption, thereby protecting against quantum-enabled adversaries with minimal impact on throughput.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If double encryption is used to protect against quantum attacks, then security is improved, but data throughput and processing efficiency deteriorate

Engineering Contradiction:

ImprovesecurityVSAvoiddata throughput

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent segments the encryption process into two distinct parts: a handshake portion using quantum-safe algorithms (SIDH/SIKE) and a bulk encryption portion using conventional algorithms. This segmentation allows each part to use the most appropriate encryption method, achieving quantum safety where needed while maintaining efficiency in data transmission.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies quantum-safe encryption only partially - specifically to the handshake portion where key exchange occurs - rather than encrypting all data. This partial application provides sufficient security against quantum attacks on the critical key exchange while avoiding the performance overhead of double encrypting all bulk data.

Inventive Principle:

Principle #16Partial or excessive action

2Loss of time

If conventional public-key cryptography is used for handshake, then setup efficiency is improved, but vulnerability to quantum attacks increases

Engineering Contradiction:

Improvesetup delayVSAvoidquantum attack vulnerability

Core Design Contradiction:

Loss of timeVSObject-affected harmful factors

Solution Approach 1:

The patent changes the cryptographic parameters used in the handshake portion from conventional algorithms (RSA, ECDH) to quantum-safe algorithms (SIDH, SIKE). This parameter change maintains the handshake functionality and speed while providing resistance against quantum attacks, effectively addressing both the efficiency and security requirements.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20220294609A1Protocol Key Negotiation

Publication Date: 2022.09.15 ISARA CORP

AI summary

In some aspects, a cryptography method includes executing, by operation of a first computing device associated with a first entity, a first handshake process with a second entity according to a first handshake protocol to establish a first symmetric encryption key for a first encryption protocol; executing, by operation of the first computing device, a second handshake process with the second entity to establish a second symmetric encryption key for a second encryption protocol. Executing the second handshake process includes: generating second handshake data according to a second handshake protocol; encrypting the second handshake data using the first symmetric encryption key with the first encryption protocol; and sending the encrypted second handshake data to a second computing device associated with the second entity; and using the second symmetric encryption key and the second encryption protocol for single-encrypted communication over a communication channel between the first and second entities.