Tracking hash-based signatures in LMS and XMSS using a distributed ledger
AssigneeDigiCert, Inc.
InventorAvesta Hojjati
Life of this patent
Estimating the term…
Abstract
Tracking hash-based signatures using a distributed ledger includes, subsequent to generating a plurality of one-time signatures (OTSs) organized in a Merkle tree for use in a stateful hash-based digital signature scheme, receiving a request for a digital signature based therein; obtaining an OTS from the plurality of OTSs based on checking the distributed ledger; and creating a transaction on the distributed ledger based on the request to mark the OTS as used. The stateful hash-based digital signature scheme can be Leighton-Micali Signature (LMS) or extended Merkle Signature Scheme (XMSS).
Claims20
A method for tracking hash-based signatures using a distributed ledger, the method comprising steps of:
- subsequent to generating a plurality of one-time signatures (OTSs) organized in a Merkle tree for use in a stateful hash-based digital signature scheme, receiving a request for a digital signature based therein;
- obtaining an OTS from the plurality of OTSs based on checking the distributed ledger;
- and
- creating a transaction on the distributed ledger based on the request to mark the OTS as used, wherein the creating the transaction causes a lock on the OTS to prevent a race condition where there are other attempts to use the OTS prior to the transaction being added to the distributed ledger.
A system for tracking hash-based signatures using a distributed ledger, the system comprising:
- one or more processors and memory storing instructions that, when executed, cause the one or more processors to
- subsequent to generation of a plurality of one-time signatures (OTSs) organized in a Merkle tree for use in a stateful hash-based digital signature scheme, receive a request for a digital signature based therein;
- obtain an OTS from the plurality of OTSs based on checking the distributed ledger;
- and
- create a transaction on the distributed ledger based on the request to mark the OTS as used, wherein, once the transaction is created, there is a lock on the OTS to prevent a race condition there are other attempts to use the OTS prior to the transaction being added to the distributed ledger.
A method for tracking hash-based signatures using a distributed ledger, the method comprising steps of:
- subsequent to generating a plurality of one-time signatures (OTSs) organized in a Merkle tree for use in a stateful hash-based digital signature scheme, receiving a request for a digital signature based therein;
- obtaining an OTS from the plurality of OTSs based on checking the distributed ledger;
- and
- creating a transaction on the distributed ledger based on the request to mark the OTS as used, wherein the transaction includes an identifier associated with the request, and wherein the identifier notes a specific Hardware Security Module (HSM) of a plurality of HSMs and the Merkle tree of a plurality of Merkle trees.
Dependencies are inferred from the claim text.