Forward secrecy QSL
AssigneeQuSecure, Inc
InventorsChris Cap, Sarah McCarthy
Life of this patent
Estimating the term…
Abstract
A method for forward security Quantum Secure Layer (QSL), where the method causing a server to hold long-term public/private Key Encapsulation Mechanism (KEM) keypair; uses KEM to establish a pre-master shared secret; causing the server to send ephemeral KEM public key to the client; uses KEM to establish master shared secret; and generates a session key by the server and encrypted to the client using the master shared secret. A method for forward secrecy Quantum Secure Layer (QSL), where the method causing a server to hold a pre-shared ephemeral public/private Key Encapsulation Mechanism (KEM) keypair; uses KEM to establish a master shared secret; and generates a session key by the server and encrypted to the client using the master shared secret.
Claims20
A method for forward secrecy Quantum Secure Layer (QSL), wherein the method comprises:
- causing a server to hold a long-term public/private Key Encapsulation Mechanism (KEM) keypair based on one or more post-quantum algorithms;
- using the post-quantum KEM to establish a pre-master shared secret;
- causing a client to send an ephemeral post-quantum KEM public key to the server;
- using the post-quantum KEM to establish a master shared secret;
- and
- generating a session key by the server and establishing encryption to the client using the master shared secret.
A method for forward secrecy Quantum Secure Layer (QSL), wherein the method comprises:
- causing a server to hold a pre-shared public/private Key Encapsulation Mechanism (KEM) keypair based on a post-quantum cryptographic algorithm;
- using the post-quantum KEM to establish a master shared secret;
- and
- generating a session key by the server and establishing encryption to a client using the master shared secret.
A server computer system for forward secrecy Quantum Secure Layer (QSL), the server computer system comprising a memory and at least one processor coupled to the memory, wherein:
- the server computer system is configured to cause a server to hold a long-term public/private post-quantum cryptographic algorithm Key Encapsulation Mechanism (KEM) keypair;
- the server uses the post-quantum KEM to establish a pre-master shared secret;
- a client computing device is configured to cause a client to send an ephemeral post quantum KEM public key to the server;
- and
- the server uses the post-quantum KEM to establish a master shared secret, wherein a session key is generated by the server and establishes encryption to the client using the master shared secret.
Dependencies are inferred from the claim text.