Cryptographic ASIC with autonomous onboard permanent storage
A cryptographic ASIC and method for autonomously storing data into a one-time programmable memory in isolation. Internal circuitry provides programming pulses of a given voltage magnitude and duration for changing the state of selected memory elements. Use of internal circuitry reduces pin count and increases reliability and security over devices relying on external circuitry to provide programming pulses. In one embodiment, the stored data comprises cryptographic data for enforcing a derivative key hierarchy for managing an information stream, such as a blockchain.
1. A non-transitory machine-readable storage medium storing a set of instructions that, when executed by at least one processor, causes the at least one processor to perform operations for managing an information stream, the operations comprising:
deriving a transform key from a temporary copy of a user passphrase;
storing the transform key in a one-time programmable memory in isolation using programming pulses from internal circuitry;
processing an input message from the information stream by:
hashing the input message to obtain an input message hash;
performing a customized transforming of the input message hash using the transform key, to obtain a transformed hash; and
hashing the transformed hash into an output result; and
creating the information stream with the output result, based on the user passphrase.
2. The non-transitory machine-readable storage medium of claim 1 , wherein the information stream is a blockchain.
3. The non-transitory machine-readable storage medium of claim 1 , wherein the transforming comprises at least one of bit inversion and bit transposition.
4. The non-transitory machine-readable storage medium of claim 1 , wherein the transform key is derived by processing the user passphrase through at least one one-way function (OWF).
5. The non-transitory machine-readable storage medium of claim 4 , wherein the transform key is derived from the user passphrase by a sequential application of at least two one-way functions (OWFs) to the user passphrase.
6. The non-transitory machine-readable storage medium of claim 1 , with the operations further comprising identifying the information stream using an identifier generated by processing a predetermined input message.
7. The non-transitory machine-readable storage medium of claim 1 , wherein knowledge of the transform key enables replication of the operations of claim 1 .
8. The non-transitory machine-readable storage medium of claim 1 , wherein the user passphrase enables creation of the information stream.
9. The non-transitory machine-readable storage medium of claim 1 , wherein the transform key is derived and stored during manufacture of the at least one processor that executes the operations.
10. The non-transitory machine-readable storage medium of claim 1 , wherein the transform key is derived and stored after manufacture of the at least one processor that executes the operations.
11. The non-transitory machine-readable storage medium of claim 1 , wherein the transform key enables processing an input message from the information stream into the output result.
12. A cryptographic integrated circuit for managing operations on an information stream, comprising:
a transform key generator configured to derive a transform key from a temporary copy of a user passphrase using a sequential application of at least two one-way functions (OWFs) to the user passphrase;
a one-time programmable memory configured to store the transform key in isolation using programming pulses from internal circuitry;
a first one-way function (OWF) circuit block configured to generate a hash of an input message;
a programmable transformation function circuit ck configured to be customized by the transform key and transform the hash into a transformed hash; and
a second OWF circuit block configured to generate a second hash of the transformed hash as an output result.
13. A system for managing operations on a blockchain information stream, the system comprising:
means for deriving a transform key from a temporary copy of a user passphrase;
means for storing the transform key in a one-time programmable memory in isolation using programming pulses from internal circuitry;
means for processing an input message from the blockchain information stream by:
hashing the input message to obtain an input message hash;
performing a customized transforming of the input message hash using the transform key, to obtain a transformed hash; and
hashing the transformed hash into an output result; and
means for creating the blockchain information stream with the output result based on the user passphrase.
14. The system of claim 13 , wherein the transforming comprises at least one of bit inversion and bit transposition.
15. The system of claim 13 , wherein the transform key is derived by processing the user passphrase through at least one one-way function (OWF).
16. The system of claim 15 , wherein the transform key is derived from the user passphrase by a sequential application of at least two one-way functions (OWFs) to the user passphrase.
17. The system of claim 13 , further comprising means for identifying the blockchain information stream using an identifier generated by processing a predetermined input message.
18. The system of claim 13 , wherein knowledge of the transform key enables replication of the system.
19. The system of claim 13 , wherein the transform key is derived and stored during manufacture of a circuit that executes the system operations.
20. The system of claim 13 , wherein the transform key is derived and stored after manufacture of a circuit that executes the system operations.
21. The system of claim 13 , wherein the user passphrase enables creation of the blockchain information stream.