Generating cryptographic random data from raw random data
AssigneeJuniper Networks, Inc.
InventorsAnna M. Johnston, Purushottam Anant Kulkarni
Life of this patent
Estimating the term…
Abstract
A device may store raw random data in a raw random data store. The raw random data may include a first plurality of data strings. The device may generate, using a quotient ring transform (QRT), cryptographic random data based on the raw random data. The cryptographic random data includes a second plurality of data strings that is transformed from the first plurality of data strings based on an extraction state stored in an extraction state store. The device may store the cryptographic random data in a cryptographic random data store and may use the cryptographic random data for various purposes.
Claims20
A method, comprising:
- storing, by a device, raw random data in a raw random data store,
- wherein the raw random data includes a first plurality of data strings;
- generating, by the device and using a quotient ring transform (QRT), first cryptographic random data based on the raw random data,
- wherein the first cryptographic random data includes a second plurality of data strings, and
- wherein the second plurality of data strings is transformed from the first plurality of data strings based on an extraction state stored in an extraction state store;
- storing, by the device, the first cryptographic random data in a cryptographic random data store;
- determining, by the device, a quantity of times that the first cryptographic random data has been generated since a Shannon level of the raw random data store has been updated;
- updating, by the device, the extraction state based on determining that the quantity of times that the first cryptographic random data has been generated since the Shannon level of the raw random data store was last updated is zero;
- generating, by the device and based on updating the extraction state, second cryptographic random data;
- and
- performing one or more cryptographic and/or network security processes based on the second cryptographic random data.
A device, comprising:
- one or more memories;
- and
- one or more processors, to:
- store raw random data in a first data store,
- wherein the raw random data includes a first plurality of data strings;
- determine whether a Shannon level of the first data store satisfies a Shannon level threshold;
- determine a quantity of times that cryptographic random data has been generated since the Shannon level of the first data store has been updated;
- update, based on determining that the quantity of times that cryptographic random data has been generated since the Shannon level of the first data store was last updated is zero, an extraction state stored in a second data store;
- generate, based on determining that the Shannon level of the first data store satisfies the Shannon level threshold and based on updating the extraction state, cryptographic random data from the raw random data using a quotient ring transform (QRT),
- wherein the cryptographic random data includes a second plurality of data strings, and
- wherein the second plurality of data strings is transformed from the first plurality of data strings based on the updated extraction state stored in a second data store;
- store the cryptographic random data in a third data store;
- and
- perform one or more cryptographic and/or network security processes based on the cryptographic random data.
A non-transitory computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors, cause the one or more processors to:
- store raw random data in a raw random data store,
- wherein the raw random data includes a first plurality of data strings,
- wherein the first plurality of data strings are included in a plurality of registers, and
- wherein the plurality of registers comprise a Galois register;
- generate, based on the raw random data, cryptographic random data using a quotient ring transform (QRT),
- wherein the cryptographic random data includes a second plurality of data strings, and
- wherein the second plurality of data strings is transformed from the first plurality of data strings based on an extraction state stored in an extraction state store;
- store the cryptographic random data in a cryptographic random data store;
- update, based on generating the cryptographic random data:
- a quantity of times that the cryptographic random data has been generated since a Shannon level of the raw random data store was last updated, and
- the Shannon level of the raw random data store;
- shift, based on storing the cryptographic random data, the plurality of registers to step the Galois register to concentrate the raw random data;
- and
- perform one or more cryptographic and/or network security processes based on the cryptographic random data.
Dependencies are inferred from the claim text.