Resilent cryptographic scheme

• US 8,688,998 B2
• Filed: 07/18/2012
• Issued: 04/01/2014
• Est. Priority Date: 01/20/1999
• Status: Expired due to Term

• Current Assignee: Blackberry Limited
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: Johnson, Donald B., Vanstone, Scott A.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US13/552,373
• Publication Number:
  US 20120281826A1
• Time in Patent Office: 622 Days
• Field of Search: None
• US Class Current: 713/176
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme

Abstract

A system and method are provided for enabling a symmetric key to be derived, the method comprising: obtaining a plurality of key parts, wherein the plurality of key parts when combined equal the symmetric key; encrypting a first of the key parts using a first cryptographic algorithm to generate a first encrypted value; encrypting one or more remaining key parts of the plurality of key parts using respective cryptographic algorithms to generate one or more additional encrypted values, wherein each key part encrypted is encrypted using a different cryptographic algorithm; and providing the first encrypted value and the one or more additional encrypted values to an other entity to enable the other entity to derive the symmetric key.

Claims

1. A method of protecting information to be communicated in a data communication system, the method comprising:

obtaining a message;

applying a first signature algorithm to the message to generate a first set of processed information, the first set of processed information including a first signature; and

applying a second signature algorithm to the first set of processed information to generate a further set of processed information, the further set of processed information including a second signature.

2. The method according to claim 1, further comprising transmitting the second signature to a recipient to enable the recipient to recover the first set of processed information from the second signature, and to recover the message from the first set of processed information.

3. The method according to claim 1, wherein the first signature algorithm is an elliptic curve (EC) signature algorithm, and the second signature algorithm is an Rivest-Shamir-Adleman (RSA) signature algorithm.

4. The method according to claim 3, the RSA signature algorithm comprising message recovery.

5. A cryptographic unit for protecting information to be communicated in a data communication system, the cryptographic unit comprising a processor configured to:

obtain a message;

apply a first signature algorithm to the message to generate a first set of processed information, the first set of processed information including a first signature; and

apply a second signature algorithm to the first set of processed information to generate a further set of processed information, the further set of processed information including a second signature.

6. The cryptographic unit according to claim 5, wherein the processor is further configured to transmit the second signature to a recipient to enable the recipient to recover the first set of processed information from the second signature, and to recover the message from the first set of processed information.

7. The cryptographic unit according to claim 5, wherein the first signature algorithm is an elliptic curve (EC) signature algorithm, and the second signature algorithm is an Rivest-Shamir-Adleman (RSA) signature algorithm.

8. The cryptographic unit according to claim 7, the RSA signature algorithm comprising message recovery.

9. A non-transitory computer-readable medium comprising computer executable instructions for protecting information to be communicated in a data communication system, the computer executable instructions comprising instructions for:

obtaining a message;

applying a first signature algorithm to the message to generate a first set of processed information, the first set of processed information including a first signature; and

applying a second signature algorithm to the first set of processed information to generate a further set of processed information, the further set of processed information including a second signature.

10. A method of verifying a data communication, the method comprising:

receiving a first signature, the first signature having been generated by applying a first signature algorithm to a first set of processed information to generate a further set of processed information corresponding to the first signature, the first set of processed information having been generated by applying a second signature algorithm to a message;

recovering the first set of processed information from the first signature; and

recovering the message from the first set of processed information.

11. The method of claim 10, the first set of processed information being recovered from the first signature by verifying the first signature, and the message being recovered from the second signature by verifying the second signature.

12. The method of claim 10, wherein the first signature algorithm is an Rivest-Shamir-Adleman (RSA) signature algorithm, and the second signature algorithm is an elliptic curve (EC) signature algorithm.

13. The method according to claim 12, the RSA signature algorithm comprising message recovery.

14. A cryptographic unit for verifying a data communication, the cryptographic unit comprising a processor operable to:

receive a first signature, the first signature having been generated by applying a first signature algorithm to a first set of processed information to generate a further set of processed information corresponding to the first signature, the first set of processed information having been generated by applying a second signature algorithm to a message;

recover the first set of processed information from the first signature; and

recover the message from the first set of processed information.

15. The cryptographic unit of claim 14, the first set of processed information being recovered from the first signature by verifying the first signature, and the message being recovered from the second signature by verifying the second signature.

16. The cryptographic unit of claim 14, wherein the first signature algorithm is an Rivest-Shamir-Adleman (RSA) signature algorithm, and the second signature algorithm is an elliptic curve (EC) signature algorithm.

17. The cryptographic unit according to claim 16, the RSA signature algorithm comprising message recovery.

18. A non-transitory computer readable medium comprising computer executable instructions for verifying a data communication, the computer executable instructions comprising instructions for:

receiving a first signature, the first signature having been generated by applying a first signature algorithm to a first set of processed information to generate a further set of processed information corresponding to the first signature, the first set of processed information having been generated by applying a second signature algorithm to a message;

recovering the first set of processed information from the first signature; and

recovering the message from the first set of processed information.