Systems and Methods of Physically Unclonable Function (PUF)-Based Key Derivation Function

A device for generating a key for a cryptography algorithm, comprising:

• one or more processing circuitries;
• a memory storing instructions which, when executed by the one or more processing circuitries, cause the device to:
• receive from a client a request to generate a key comprising a defined number, N, of bits for a particular cryptography algorithm;
• responsive to receiving the request, provide a valid key for the particular cryptography algorithm to the client, wherein providing the valid key to the client comprises:
• generating a set of challenges for a Physically Unclonable Function, PUF, wherein the set of challenges comprises one or more challenges from a plurality of challenges in a challenge space of the PUF;
• generating at least one potential key based on a set of responses by the PUF responsive to the set of challenges;
• for each potential key of the at least one potential key:
• determining whether the potential key satisfies one or more predefined criteria for the particular cryptography algorithm;
• and
• if the potential key satisfies the one or more predefined criteria for the particular cryptography algorithm, providing the potential key to the client as the valid key.

A method for providing a cryptographic key to a client, the method comprising:

• receiving from the client a request to recreate a key comprising a defined number, M, of bits for the client for a particular cryptography algorithm;
• responsive to receiving the request, recreating the key for the client for the particular cryptography algorithm, wherein recreating the key for the client for the particular cryptography algorithm comprises:
• providing a set of challenges to a Physically Unclonable Function, PUF, wherein:
• the set of challenges comprises one or more challenges from a plurality of challenges in a challenge space of the PUF,
• wherein the set of challenges is one or more of:
• comprised in the request received from the client, stored in association with a tag or an identifier that is comprised in the request received from the client, generated by a device based on a state that is either comprised in the request received from the client or stored locally in the device, or generated based on a unique token that is comprised in the request received from the client;
• and
• generating the key based on the set of responses by the PUF responsive to the set of challenges;
• and
• providing the key to the client.

A device for generating a key for a cryptography algorithm, comprising:

• one or more processing circuitries;
• and
• a memory storing instructions which, when executed by the one or more processing circuitries, cause the device to:
• receive from a client a request to recreate a key comprising a defined number, M, of bits for the client for a particular cryptography algorithm;
• responsive to receiving the request, recreate the key for the client for the particular cryptography algorithm, wherein recreating the key comprises:
• providing a set of challenges to a Physically Unclonable Function, PUF, wherein:
• the set of challenges comprises of one or more challenges from a plurality of challenges in a challenge space of the PUF, and
• the set of challenges is one or more of:
• comprised in the request received from the client, stored in association with a tag or an identifier that is comprised in the request received from the client, is generated by the device based on a state that is either comprised in the request received from the client or stored locally in the device, or generated based on a unique token that is comprised in the request received from the client, and
• generating the key based on a set of responses by the PUF responsive to the set of challenges;
• and
• provide the key to the client.