Self-Encrypting Storage Key Generation Using Cyclic Counter Entropy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encrypted storage devices rely on factory-generated encryption keys with uncertain entropy and trustworthiness, which are not sufficient to thwart brute force attacks, and lack the ability to create a virtually unlimited supply of keys with maximum entropy.
Innovation Solution
A mass storage device with an integrated input mechanism electrically connected to a micro-controller equipped with a cyclic counter generates entropy through user-defined PIN entry and optional vibration sensor inputs, seeding a deterministic random number generator to produce encryption keys with sufficient entropy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If factory-generated encryption keys are used, then device complexity is reduced, but entropy and security are insufficient
Solution Approach 1:
The storage device generates its own encryption keys using built-in entropy sources (vibration sensor, temperature sensor, cyclic counter) and a deterministic random number generator, eliminating dependence on factory programming and external key management infrastructure
Solution Approach 2:
The system dynamically changes physical parameters (vibration patterns, temperature fluctuations, timing intervals) to generate entropy, transforming static factory keys into dynamically generated high-entropy keys
2Reliability
If user passwords are used for key generation, then ease of operation is improved, but entropy is insufficient against brute force attacks
Solution Approach 1:
The system uses a deterministic random number generator as an intermediary that transforms low-entropy user input (password/PIN) into high-entropy encryption keys by combining it with entropy from physical sensors and cyclic counters
Solution Approach 2:
The system changes the entropy contribution from multiple sources (sensor readings, timing, cyclic counters) and combines them with user input through cryptographic functions to achieve high overall entropy
3Reliability
If factory programming is used, then manufacturing precision is improved, but trustworthiness and entropy verification are compromised
Solution Approach 1:
The device autonomously generates and verifies its own encryption keys using built-in entropy sources, eliminating the need for external factory programming and key distribution infrastructure
Solution Approach 2:
The system incorporates entropy verification mechanisms that monitor and validate the entropy quality from sensor sources before finalizing key generation, providing trust verification without external intervention
4Reliability
If deterministic random number generators are used, then key reproducibility is improved, but entropy sufficiency must be carefully managed
Solution Approach 1:
The entropy management system is segmented into independent components: vibration sensor, temperature sensor, cyclic counter, and deterministic random number generator, each contributing to overall entropy through modular integration
Solution Approach 2:
The system implements entropy monitoring and verification feedback loops that ensure sufficient entropy quality from multiple sources before proceeding with key generation
Data Source
AI summary
A system and method of generating an encryption key in a self-encrypting mass storage device that includes using a manual input device as input for a micro-controller that contains a cyclic counter. An input device event triggers the micro-controller to read the current state of the cyclic counter. An accumulation of cyclic counter values is used as a source of entropy to seed a deterministic random number generator. The output of the deterministic random number generator is used as an encryption key for encryption/decryption processes within the mass storage device.