Technologies for provisioning cryptographic keys
AssigneeIntel Corporation
InventorsXiaoyu Ruan, Vincent Von Bokern, Daniel Nemiroff
Life of this patent
Estimating the term…
Abstract
Technologies for provisioning cryptographic keys include hardcoding identical cryptographic key components of a Rivest-Shamir-Adleman (RSA) public-private key pair to each compute device of a plurality of compute devices. A unique cryptographic exponent that forms a valid RSA public-private key pair with cryptographic key components hardcoded into each compute device is provided to each compute device so that each compute device has a unique public key. The public key of each compute device may be used to provision unique secrets to the corresponding compute device.
Claims25
A cryptographic key server for provisioning cryptographic keys to a plurality of compute devices, the cryptographic key server comprising:
- a cryptographic component generator to determine (i) cryptographic key components of a Rivest-Shamir-Adleman (RSA) public-private key pair to be hardcoded into each compute device of the plurality of compute devices, wherein the cryptographic key components comprises a pair of different prime numbers, p and q, and a modulus, n, of the determined pair of prime numbers, p and q and (ii) a plurality of cryptographic exponents, wherein each cryptographic exponent forms a valid RSA public-private key pair with cryptographic key components hardcoded into each compute device of the plurality of compute devices;
- and
- a key provisioner to transmit, to each compute device of the compute devices of the plurality of compute devices, a different cryptographic exponent of the determined plurality of cryptographic exponents to be stored on the corresponding compute device.
A method for provisioning cryptographic keys to a plurality of compute devices, the method comprising:
- determining, by a cryptographic key server, cryptographic key components of a Rivest-Shamir-Adleman (RSA) public-private key pair to be hardcoded into each compute device of the plurality of compute devices, wherein the cryptographic key components comprises a pair of different prime numbers, p and q, and a modulus, n, of the determined pair of prime numbers, p and q;
- determining, by the cryptographic key server, a plurality of cryptographic public exponents, e, wherein each cryptographic public exponent forms a valid RSA public-private key pair with the cryptographic key components hardcoded into each compute device of the plurality of compute devices;
- and
- transmitting, by the cryptographic key server and to each compute device of the compute devices of the plurality of compute devices, a different cryptographic exponent of the determined plurality of cryptographic exponents to be stored on the corresponding compute device.
One or more machine-readable storage media comprising a plurality of instructions stored thereon that, when executed, causes a cryptographic key server to:
- determine cryptographic key components of a Rivest-Shamir-Adleman (RSA) public-private key pair to be hardcoded into each compute device of the plurality of compute devices, wherein the cryptographic key components comprises a pair of different prime numbers, p and q, and a modulus, n, of the determined pair of prime numbers, p and q;
- determine a plurality of cryptographic public exponents, e, wherein each cryptographic public exponent forms a valid RSA public-private key pair with the cryptographic key components hardcoded into each compute device of the plurality of compute devices;
- and
- transmit, to each compute device of the compute devices of the plurality of compute devices, a different cryptographic exponent of the determined plurality of cryptographic exponents to be stored on the corresponding compute device.
Dependencies are inferred from the claim text.