Methods and apparatus for efficient computation of one-way chains in cryptographic applications
DCFirst Claim
1. A method comprising:
- storing a first subset of values of a one-way chain in a memory, the first subset of values being a first distribution of values of the one-way chain determined based at least in part on a length of the one-way chain;
utilizing at least one value of the one-way chain; and
responsive to utilizing said at least one value, storing a second subset of remaining values of the one-way chain in the memory, the second subset of values being a second distribution different than the first distribution;
wherein storing the first subset, utilizing said at least one value and storing the second subset are performed by at least one processing device comprising a processor coupled to a memory.
2 Assignments
Litigations
0 Petitions
Accused Products
Abstract
Techniques are disclosed for efficient computation of consecutive values of one-way chains and other one-way graphs in cryptographic applications. The one-way chain or graph may be a chain of length s having positions i=1, 2, . . . s each having a corresponding value vi associated therewith, wherein the value vi is given by vi=h (vi+1), for a given hash function or other one-way function h. An initial distribution of helper values may be stored for the one-way chain of length s, e.g., at positions given by i=2j for 0≦j≦log2 s. A given one of the output values vi at a current position in the one-way chain may be computed utilizing a first helper value previously stored for another position in the one-way chain between the current position and an endpoint of the chain. After computation of the given output value, the positions of the helper values are adjusted so as to facilitate computation of subsequent output values. Advantageously, a storage-computation product associated with generation of the output values of the one-way chain has a complexity O((log s)2).
8 Citations
20 Claims
-
1. A method comprising:
-
storing a first subset of values of a one-way chain in a memory, the first subset of values being a first distribution of values of the one-way chain determined based at least in part on a length of the one-way chain; utilizing at least one value of the one-way chain; and responsive to utilizing said at least one value, storing a second subset of remaining values of the one-way chain in the memory, the second subset of values being a second distribution different than the first distribution; wherein storing the first subset, utilizing said at least one value and storing the second subset are performed by at least one processing device comprising a processor coupled to a memory. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. An apparatus comprising:
-
a processor; and a memory coupled to the processor; the processor being configured; to store a first subset of values of a one-way chain in the memory, the first subset of values being a first distribution of values of the one-way chain determined based at least in part on a length of the one-way chain; to utilize at least one value of the one-way chain; and responsive to utilizing said at least one value, to store a second subset of remaining values of the one-way chain in the memory, the second subset of values being a second distribution different than the first distribution. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A non-transitory machine-readable medium for storing one or more programs for use by a processor coupled to a memory, the one or more programs when executed causing the processor:
-
to store a first subset of values of a one-way chain in the memory, the first subset of values being a first distribution of values of the one-way chain determined based at least in part on a length of the one-way chain; to utilize at least one value of the one-way chain; and responsive to utilizing said at least one value, to store a second subset of remaining values of the one-way chain in the memory, the second subset of values being a second distribution different than the first distribution. - View Dependent Claims (18, 19, 20)
-
Specification