Signature Cache System for Reducing ECDSA Verification Latency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Asymmetric cryptographic schemes, such as those using elliptic curve digital signature algorithm (ECDSA), are time-consuming and computationally intensive, particularly during signature verification processes critical for secure boot and authentication, posing a challenge in computer system security where speed and efficiency are essential.
Innovation Solution
Implementing a signature library and a signature cache system that stores pre-computed hash results of frequently verified digital signatures, allowing for rapid verification by comparing them with newly computed hash values, thereby reducing repetitive cryptographic computations and improving authentication speed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric cryptographic schemes (e.g., ECDSA) are used for signature verification, then security and reliability are improved, but verification speed deteriorates significantly (up to 20 times slower than RSA)
Solution Approach 1:
The patent pre-computes and stores intermediate values (such as point multiplication results on the elliptic curve) during the signature verification process. These pre-computed values are cached and reused in subsequent verifications, eliminating the need to perform the same computationally intensive cryptographic operations repeatedly, thus significantly reducing verification time while maintaining security
Solution Approach 2:
The patent creates and stores copies of intermediate computational results (cached values) from previous signature verifications. Instead of re-computing these values for each new signature verification, the system retrieves and uses the stored copies, dramatically reducing the computational burden and verification time for frequently verified signatures
2Reliability
If cryptographic primitives are used to enhance security, then reliability is improved, but computational time and resource consumption increase
Solution Approach 1:
The system performs preliminary computation of cryptographic intermediate values and stores them in a cache before they are needed for verification. This advance preparation eliminates the need to re-compute these values during actual verification, reducing authentication time while preserving the full security benefits of the cryptographic primitives
Solution Approach 2:
The patent changes the computational parameters by storing intermediate results in a cached format that allows for faster retrieval and reuse. This parameter change from full recomputation to cached value utilization significantly reduces the time required for cryptographic verification operations
3Device complexity
If ECDSA with shorter key length is used compared to RSA, then device complexity and memory requirements are reduced, but signature verification remains significantly slower
Solution Approach 1:
The patent pre-computes the point multiplication results on the elliptic curve during the signature verification process and caches these intermediate values. This preliminary computation and caching strategy eliminates the need to perform the same complex elliptic curve operations repeatedly, significantly improving verification throughput while maintaining the advantage of shorter key lengths
Data Source
AI summary
Embodiments provide systems and methods to optimize signature verification time for a cryptographic cache. Time is reduced by eliminating at least some of the duplicative application of cryptographic primitives. In some embodiments, systems and methods for signature verification comprise obtaining a signature which was previously generated using an asymmetrical cryptographic scheme, and determining whether an identical signature has previously been stored in a signature cache. If an identical signature has been previously stored in the signature cache, retrieving previously generated results corresponding to the previously stored identical signature, the results a consequence of application of cryptographic primitives of the asymmetrical cryptographic scheme corresponding to the identical signature. The results are forwarded to a signature verifier. In at least some embodiments, at least one of these functions occurs in a secure execution environment.