Trust framework against systematic cryptographic
AssigneeAmazon Technologies, Inc.
InventorsDalton James Nikitas, Steve Preston Lightner Norum, Avni Harilal Rambhia
Life of this patent
Estimating the term…
Abstract
A computing system receives encrypted data that can be decrypted by a first secret to obtain data, wherein the first secret is securely stored by the system, determines that the data encodes a second secret and executable code usable to perform cryptographic operations, and run the executable code to perform the cryptographic operations. The first secret may be a one-time pad.
Claims16
A non-transitory computer-readable storage medium storing executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:
- determine a secret associated with a device that securely stores at least part of the secret;
- generate a digital signature based on the secret and an update to enable the device to perform operations, wherein the instructions to generate the digital signature include instructions to:
- generate data that comprises the update and at least a first portion of the secret;
- generate a hash output of a cryptographic hash function by using the data as an input to the cryptographic hash function;
- and encrypt the hash output using at least a second portion of the secret, thereby generating the digital signature;
- and provide the digital signature to the device to cause the device to use the secret to verify the digital signature and to perform operations according to the update, wherein the secret comprises a one-time pad and a cryptographic secret, wherein the instructions to determine the secret include instructions to cause a hardware security module (HSM) to access the one-time pad, and wherein the at least the second portion of the secret has a first bit-length and the hash output has a second bit-length, wherein the first bit-length is greater than or equal to the second bit-length.
A computer-implemented method, comprising:
- determining a secret associated with a device that securely stores at least part of the secret;
- generating a digital signature based on the secret and an update to enable the device to perform operations, wherein the secret comprises a one-time pad and generating the digital signature comprises, and wherein the update comprises executable instructions to generate a root certificate using the cryptographic key:
- obtaining data, the data comprising the update and a cryptographic key;
- generating a hash output of a cryptographic hash function by using the data as an input to the cryptographic hash function;
- and encrypting the hash output using the one-time pad, thereby generating the digital signature;
- and providing the digital signature to the device to cause the device to use the secret to verify the digital signature and to perform operations according to the update.
A system, comprising memory to store instructions that, as a result of execution by one or more processors, cause the system to:
- determine a secret associated with a device that securely stores at least part of the secret;
- generate a digital signature based on:
- (a) a one-time pad and a cryptographic secret determined from the secret and (b) an update to enable the device to perform operations;
- and provide the digital signature to the device to cause the device to use the secret to verify the digital signature and to perform operations according to the update.
Dependencies are inferred from the claim text.