US 2018/0324175 A1 · IMPLICIT CERTIFICATES USING RING LEARNING WITH ERRORS

Abstract

An implicit certificate is based on a ring learning with errors (“RLWE”) public keys that are, in some examples, resistant to quantum-based computing attacks. Various methods are described that request, generate, verify, and use the implicit certificates. In some examples, the system provides an implicit certificate that enables communication between two parties that are identified at the time of certificate generation. In another example, the system provides a certificate that may be used to communicate with a variety of different parties. The implicit certificate generation algorithm yields a public key purportedly bound to U. Confirmation that the public key is bound to U is obtained after use of the corresponding private key. Binding of an entity to its associated public key and accessibility to the private key, are verified as a result of successful key use.

Claims20

Dependent claims

A computer-implemented method, comprising:

acquiring a set of domain parameters, the domain parameters including a ring of integers, a hash function, and a domain polynomial;
acquiring, from a requesting entity, a certificate request and information that identifies the requesting entity, the certificate request based at least in part on a first sample from the ring of integers, the first sample selected by the requesting entity;
acquiring a second sample from the ring of integers;
determine a public contribution value based at least in part on the certificate request, the second sample, and the domain polynomial;
generating a certificate from the public contribution value and the information that identifies the requesting entity;
generating a requester-specific contribution value associated with the requester based at least in part on a private key of a public/private key pair associated with a certificate authority, a hash of the certificate determined in accordance with the hash function, and the second sample;
and
transmitting, to the requester, the certificate.

5 more elements

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

acquire a set of domain parameters, the domain parameters including a ring of integers, a hash function, and a domain polynomial;
select a sample from the ring of integers;
generate a certificate request based at least in part on the domain polynomial and the sample;
acquire a certificate, a requester-specific contribution value, and a public contribution value, from a certificate authority in exchange for providing the certificate request;
generate a private key based at least in part on the requester-specific contribution value, a hash of the certificate in accordance with the hash function, and the sample;
and
perform a cryptographic operation using the private key.

4 more elements

Dependencies are inferred from the claim text.

Implicit certificates using ring learning with errors

Life of this patent

Implicit certificates using ring learning with errors

Life of this patent

Abstract

Claims20