Physically Unclonable Functions for Quantum-Resistant Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing public key infrastructures (PKIs) are vulnerable to advanced computing technologies and side channel attacks, requiring secure storage of private keys and relying on mathematical equations, which can be compromised, especially with the threat of quantum computing.
Innovation Solution
The proposed solution utilizes physically unclonable functions (PUFs) to generate unique lookup tables with challenge-response pairs, where each user device creates its own PUFs, and these are used to derive private keys for secure communication, eliminating the need for stored private keys and providing dynamic key exchange resistant to quantum attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing public key infrastructures (PKIs) are used, then secure communication can be established, but the system becomes vulnerable to quantum computing attacks and side channel attacks
Solution Approach 1:
The patent replaces traditional mathematical equation-based cryptographic systems (RSA, ECC) with a physically-based system using Physically Unclonable Functions (PUFs). Instead of relying on mathematical hardness assumptions that are vulnerable to quantum attacks, the system uses physical manufacturing variations in hardware circuits to generate cryptographic keys, making the security foundation resistant to both classical and quantum computational attacks.
Solution Approach 2:
The patent changes the fundamental parameter of cryptographic key generation from mathematical computation to physical measurement. By measuring physical properties (such as resistance, capacitance, or propagation delay) of uniquely manufactured circuit paths, the system generates cryptographic keys based on physical parameters rather than mathematical parameters, thereby achieving quantum resistance.
2Ease of operation
If private keys are stored securely, then encryption/decryption can be performed, but the system becomes vulnerable to side channel attacks and key extraction
Solution Approach 1:
The patent extracts the cryptographic key material from storage and replaces it with a key generation mechanism. Instead of storing private keys that could be targeted by side channel attacks, the system extracts cryptographic functionality directly from the PUF's physical properties at the moment of need, eliminating the vulnerable storage component while maintaining encryption capability.
Solution Approach 2:
The PUF-based system provides self-service key generation, where the cryptographic keys are generated on-demand by measuring the unique physical characteristics of the hardware itself. The system serves its own key generation needs without external key management infrastructure, and the keys are derived from the device's own physical identity, making them inherently secure against extraction.
3Adaptability or versatility
If mathematical equations are used for key generation, then public key infrastructure can be implemented, but the system becomes vulnerable to advanced computing technologies
Solution Approach 1:
The patent substitutes mathematical computation with physical measurement for key generation. Instead of using mathematical equations (RSA factorization, ECC discrete logarithms) that can be solved by advanced computing including quantum computers, the system uses physical measurements of manufacturing variations in circuit paths, which are inherently unpredictable and resistant to computational attacks.
Solution Approach 2:
The patent changes the domain of cryptographic security from mathematical parameters to physical parameters. By measuring physical quantities (resistance, capacitance, propagation delay) of uniquely manufactured circuit paths, the system generates cryptographic keys based on physical parameters that cannot be computed or predicted, providing versatility in cryptographic functionality with reliability against computational attacks.
Data Source
AI summary
The present disclosure relates to implementations of physically unclonable functions (PUFs) for cryptographic and authentication purposes. Specifically, the disclosure describes implementations of systems using PUFs that may replace existing public key infrastructures (PKIs).