Symmetric Key Generation Using Static and Dynamic Seeds
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for generating and establishing symmetric cryptographic keys in untrusted environments face challenges such as reliance on sensed wireless signals, which are not always available, produce keys with insufficient entropy, and are vulnerable to attacks, especially with the advent of quantum computing.
Innovation Solution
A system that generates symmetric cryptographic keys using a combination of static and dynamic seeds, where static seeds provide constant entropy and dynamic seeds contribute freshness, ensuring keys are geographically and temporally limited, and are never stored except in volatile memory, with protocols that allow devices to securely generate and manage keys without relying on sensed data transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If asymmetric cryptography is used to establish symmetric keys, then key establishment is achieved, but the process becomes slow and complex with operations like arithmetic exponentiation
Solution Approach 1:
Static seeds are pre-shared between devices during manufacturing or initial setup, eliminating the need for complex asymmetric operations during actual key establishment. The preliminary distribution of static seeds allows for fast symmetric key generation when needed.
Solution Approach 2:
Environmental sensors act as intermediaries that provide shared contextual data between devices. Both devices sense the same environmental signals (light, sound, temperature) which serve as a common reference point for generating matching symmetric keys without direct communication.
2Adaptability or versatility
If keys are based on sensed wireless signals, then key generation is achieved, but the technique is vulnerable to attackers who may sense similar signals and generate the same key
Solution Approach 1:
The patent combines multiple independent sources of entropy: static seeds (pre-shared secrets), dynamic seeds (environmental sensor data), and device identifiers. This merging creates a composite key material that is both available in various conditions and secure against attacks, as an attacker would need to compromise all components simultaneously.
Solution Approach 2:
The key generation process uses composite entropy sources by combining static seed material with dynamic environmental data. This composite approach creates keys that are resistant to attacks because the static portion provides cryptographic strength while the dynamic portion provides freshness and context-specific security.
3Reliability
If sensed signals are used for key generation, then key establishment is achieved, but the technique is not always available due to environmental conditions limiting sensor ability
Solution Approach 1:
Static seeds are distributed in advance during device manufacturing or initial provisioning, ensuring that devices always have the foundational material needed for key generation regardless of environmental conditions. This preliminary action guarantees availability.
Solution Approach 2:
The system dynamically adapts by optionally incorporating environmental sensor data when available, but falls back to using only static seeds when environmental conditions prevent reliable sensing. This dynamic approach maintains versatility while ensuring reliability.
4Reliability
If asymmetric cryptography is used for key establishment, then symmetric keys are generated, but the technique is not quantum resistant as efficient algorithms exist for quantum computers to break asymmetric ciphers
Solution Approach 1:
Devices self-generate symmetric keys using their own static seeds and sensed environmental data without requiring interaction with certificate authorities or execution of quantum-vulnerable asymmetric protocols. This self-service approach eliminates dependency on quantum-breakable cryptographic infrastructure.
Data Source
AI summary
A system for generating symmetric cryptographic keys for communications between hosts. Hosts use associated devices to generate secret keys. Each key is generated based on a static seed and a dynamic seed. The dynamic seed is created from sensor data or auxiliary data. The secret key allows host machines to encrypt, or decrypt, plaintext messages sent to, or received from, other host machines.