Key agreement in wireless networks with active adversaries

1. A network of computers with error correction code configured to transmit keys secretly and securely comprising:

a first computer-based workstation operating as a source node and configured to encode a key into a plurality of distinct encoded source files, encoding being operatively implemented in one of: a) hardware, b) software, and c) a combination of a) and b);

a plurality of computer-based workstations operating as a plurality of intermediate nodes and configured to each receive a distinct encoded source file of the plurality of distinct encoded source files and transmit, to a receiver node, the distinct encoded source file when requested by the receiver; and

a second computer-based workstation operating as the receiver node and configured to decode the plurality of distinct encoded source files and retrieve the key, decoding being operatively implemented in one of: a) hardware, b) and/or software, and c) a combination of a) and b);

wherein the encoding, transmitting and decoding of the key comprise the following steps:

generating the key to be transmitted from the source node to the receiver node,

generating one or more random packets independently and uniformly within the source node,

generating a distinct encoded file for each intermediate node in the network, the encoded file comprising a linear combination of the key, the one or more random packets that were independently and uniformly generated and corresponding error detection information,

forwarding each of the distinct encoded files generated by the source node to each corresponding intermediate node of the plurality of intermediate nodes within the network via a first plurality of intermediate transmission links,

forwarding each of the distinct encoded files, upon request by the receiver node, from the corresponding intermediate node via a second plurality of intermediate transmission links, and

decoding the key from the plurality of encoded files, the error detection information used to determine if an error was present in either the intermediate transmission link and/or the intermediate node for a particular encoded file.

2. The network of computers of claim 1 , wherein the encoded source files comprise linearly independent combinations of the following:

one or more randomly generated packets, and

a source message, the source message comprising a set or subset of keys and corresponding error detection information.

3. The network of computers of claim 2 , wherein the error detection information comprises hash information from each of the other encoded files, the hash information being defined in terms of random parameters generated by the source node.

4. The network of computers of claim 1 , wherein the network is a distributed wireless network.

5. A network of computers with error correction code configured to transmit a key pool secretly and securely comprising:

(i) a plurality of computer-based workstations operating as a plurality of intermediate nodes and configured to each:

receive one or more, but not all, individual keys of the key pool, the key pool comprising a plurality of individual keys,

encode the one or more individual keys, encoding being operatively implemented in one of: a) hardware, b) software, and c) a combination of hardware and software, and

transmit the encoded one or more individual keys to a receiver node, when requested; and

(ii) a computer-based workstation operating as the receiver node and configured to decode encoded one or more individual keys received from a subset of the intermediate nodes, using a decoding algorithm to retrieve a specified subset of the key pool, decoding being operatively implemented in one of: a) hardware, b) software, and c) a combination of hardware and software;

wherein the decoding of the encoded keys to retrieve, the key pool in the receiver node comprises the following steps:

identifying two or more distinct groupings of intermediate nodes of the plurality of nodes, wherein each intermediate node within a particular distinct grouping of intermediate nodes shares a same set of individual keys of the key pool,

requesting each of the intermediate nodes of the two or more distinct groupings of intermediate nodes to forward their respective encoded files,

using error detection information to identify a number of compromised nodes within the two or more distinct grouping of intermediate nodes,

decoding each of the encoded files forwarded by each of the intermediate nodes,

determining a number of consistent decoded keys forwarded by the intermediate nodes within a particular grouping of the two or more distinct groupings of intermediate nodes, the number of consistent decoded keys is based on the number of compromised nodes, and

extracting the key pool by retrieving an error-free subset of the key pool from each of two or more distinct grouping of intermediate nodes.