Symmetric Cryptography With Deterministic Key Regeneration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Symmetric cryptography systems face challenges in key management, including secure storage, sharing, and scalability due to the need for large numbers of unique, genuinely random keys, which is particularly difficult for server applications and endpoint devices.
Innovation Solution
A symmetric cryptographic system that generates and regenerates keys using deterministic algorithms based on unique inputs, such as tokens and entropy bit strings, eliminating the need for storage and sharing by reproducibly creating keys for encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If genuinely random keys are used for optimal security, then security strength is improved, but key management complexity increases due to the need to store and distribute large numbers of unique keys
Solution Approach 1:
The key management system is segmented into key generation functions and key storage functions. Each user device generates its own genuine random keys locally, eliminating the need for centralized key distribution. The system divides the key management burden from a centralized authority to distributed individual devices, reducing overall system complexity while maintaining security.
Solution Approach 2:
Public key infrastructure acts as an intermediary that enables secure communication without requiring direct sharing of secret keys. The patent uses public key cryptography as a mediator to establish secure channels, allowing parties to communicate securely without manually managing and distributing symmetric keys between each pair of users.
2Reliability
If a different random key is used for each piece of information, then security is optimized, but the number of keys required increases significantly
Solution Approach 1:
The system dynamically generates keys as needed rather than pre-distributing a large static set of keys. Each piece of information can be encrypted with a freshly generated genuine random key, and the key is discarded after use. This dynamic approach maintains optimal security for each information piece without requiring permanent storage of大量 keys.
Solution Approach 2:
The system changes the parameter of key lifetime from permanent to transient. Keys are generated with specific purpose and time-bound usage, then destroyed after decryption. This parameter change allows the system to use different keys for different information pieces without accumulating a large permanent key inventory, as keys are reused through secure key derivation from master secrets.
3Reliability
If traditional random number generators are used to generate genuinely random keys, then key randomness is improved, but the need for secure key storage arises because keys cannot be regenerated
Solution Approach 1:
The system performs preliminary action by establishing master secrets and public key pairs in advance through secure key generation. These preliminary cryptographic materials are then used to derive individual session keys when needed. The preliminary setup eliminates the need for ongoing secure key storage, as all operational keys can be regenerated from the preliminary master secrets through deterministic key derivation functions.
Data Source
AI summary
Cryptographic system, method and communication network comprising thereof are disclosed, including numerous industry applications. Embodiments of the present invention can generate and regenerate the same symmetric key. The cryptographic systems and methods include a key generator configured to use two or more inputs to reproducibly generate the symmetric key and a cryptographic engine configured to use the symmetric key for encrypting and decrypting data.