ZK-Crypt Three-Tier Shift Register for Secure Random Number Generation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional random number generators and stream ciphers are inadequate in ensuring the security and unpredictability of cryptographic keys, particularly in environments where they can be compromised by brute force attacks or quantum computing, and they lack efficient methods for message authentication.

Innovation Solution

The ZK-Crypt system employs a compact hardware and firmware solution that generates high-quality random numbers and encrypts binary data using One to Many feedback shift registers, providing a secure stream cipher and message authentication mechanism, with features like pseudo-Brownian motion and correlation immunization to resist attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional random number generators and stream ciphers are used, then device complexity is reduced, but security and unpredictability of cryptographic keys deteriorate

Engineering Contradiction:

Improvesecurity and unpredictability of cryptographic keysVSAvoiddevice complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system divides cryptographic operations into three independent tiers (first tier with first set of variables, second tier with second set of variables, third tier with third set of variables), each operating with its own state variables and update functions. This segmentation allows each tier to contribute independently to the final cryptographic output, enhancing security through distributed complexity while maintaining manageable individual tier designs.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The same three-tier architecture and update mechanism serves multiple cryptographic functions simultaneously: random number generation, stream cipher encryption, and message authentication code generation. The system universally applies the same complex variable update process across different cryptographic applications, achieving high security and reliability without requiring separate complex systems for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If conventional stream ciphers are used, then ease of operation is improved, but resistance to brute force attacks and quantum computing deteriorates

Engineering Contradiction:

Improveresistance to brute force attacks and quantum computingVSAvoidease of operation

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Each tier incorporates feedback mechanisms where the current state variables influence the next state through non-linear update functions. The system feeds back the results of cryptographic operations into the state variables, creating complex dependent relationships that resist brute force attacks. This feedback structure ensures that even with known plaintext, predicting future states requires solving complex non-linear equations, providing resistance against both classical and quantum attacks.

Inventive Principle:

Principle #23Feedback

3Reliability

If compact hardware is used, then device size and power consumption are reduced, but cryptographic strength may deteriorate

Engineering Contradiction:

Improvecryptographic strengthVSAvoiddevice size and power consumption

Core Design Contradiction:

ReliabilityVSWeight of moving object

Solution Approach 1:

The system merges random number generation, stream cipher encryption, and message authentication code generation into a single unified three-tier hardware architecture. By combining multiple cryptographic functions into one compact device with shared resources (three sets of state variables, common update mechanism), the system achieves strong cryptographic security without requiring separate hardware for each function, thus minimizing device size and power consumption.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS7827223B2Accelerated throughput synchronized word stream cipher, message authenticator and zero-knowledge output random number generator

Publication Date: 2010.11.02 FORTRESS GB LTD

AI summary

Systems and methods are disclosed, especially designed for very compact hardware implementations, to generate random number strings with a high level of entropy at maximum speed. For immediate deployment of software implementations, certain permutations have been introduced to maintain the same level of unpredictability which is more amenable to hi-level software programming, with a small time loss on hardware execution; typically when hardware devices communicate with software implementations. Particular attention has been paid to maintain maximum correlation immunity, and to maximize non-linearity of the output sequence. Good stream ciphers are based on random generators which have a large number of secured internal binary variables, which lead to the page synchronized stream ciphering. The method for parsed page synchronization which is presented is especially valuable for Internet applications, where occasionally frame sequences are often mixed. The large number of internal variables with fast diffusion of individual bits wherein the masked message is fed back into the machine variables is potentially ideal for message authentication procedures.