Root of Trust Firmware Authentication Quantum Safety
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Root of Trust (RoT) hardware designs that rely on cryptographic algorithms for authenticating external firmware updates are vulnerable to quantum computing attacks, as large-key-size RSA and ECC digital signatures can be defeated by quantum computers, posing a risk to the security of trusted computing devices over time.
Innovation Solution
A hardware design that enables crypto-agility by allowing the implementation of quantum-safe cryptographic algorithms, such as LMS hash-based signatures, in Root of Trust devices, enabling the optional phase-in of these algorithms without modifying the device design. This allows for the deployment of updates to devices in the field, enhancing firmware authentication security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If large-key-size RSA and ECC digital signatures are used for firmware authentication, then security against classical computing attacks is improved, but vulnerability to quantum computing attacks increases
Solution Approach 1:
The patent implements dynamic cryptographic algorithm selection by introducing a runtime parameter that allows the system to switch between classical (RSA/ECC) and quantum-resistant (hash-based) signature schemes. This enables the firmware authentication mechanism to adapt its security approach based on threat models and computational capabilities, resolving the contradiction by making the security posture flexible rather than static.
Solution Approach 2:
The patent changes the cryptographic parameter set by allowing dynamic selection of different signature algorithms and key sizes. The system can adjust the authentication parameters at runtime, switching from traditional large-key-size RSA/ECC to quantum-resistant hash-based signatures with smaller key sizes, thereby maintaining security while reducing quantum vulnerability.
2Reliability
If quantum-safe cryptographic algorithms are implemented in RoT devices, then long-term security against quantum attacks is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal firmware authentication framework that can handle multiple cryptographic signature types through a single unified interface. The authentication mechanism is designed to work with both classical and quantum-resistant algorithms without requiring separate implementation paths, thereby reducing device complexity while maintaining quantum-safe capabilities.
Solution Approach 2:
The patent introduces an intermediary authentication layer that mediates between the firmware and the cryptographic verification process. This intermediary component handles the complexity of multiple algorithm support, parameter management, and key handling, shielding the rest of the system from cryptographic complexity while enabling quantum-safe authentication.
3Speed
If cryptographic algorithms are hardcoded in RoT hardware, then authentication speed is improved, but adaptability to new quantum-safe algorithms decreases
Solution Approach 1:
The patent transforms the static, hardcoded cryptographic algorithm implementation into a dynamic system that can load and execute different algorithm implementations at runtime. The authentication mechanism selects and executes the appropriate algorithm based on configured parameters, maintaining high processing speed while enabling adaptability to quantum-safe algorithms without requiring hardware redesign.
Data Source
AI summary
An example computing device comprises a memory to store control instructions, and a processor to: perform a first authentication of the control instructions using a first key; and in response to receipt of a command to enable a second authentication of the control instructions, add a second key to a one-time programmable portion of the memory, wherein the command is signed using the first key, the second key to perform a second authentication of the control instructions with the first key to perform the first authentication of the control instructions.