Computer-implemented system and method for highly secure, high speed encryption and transmission of data
The present disclosure relates to highly secure, high speed encryption methodologies suitable for applications such as media streaming, streamed virtual private network (VPN) services, large file transfers and the like. For example, encryption methodologies as described herein can provide stream ciphers for streaming data from, for example, a media service provider to a plurality of users. Certain configurations provide wire speed single use encryption. The methodologies as described herein are suited for use with blockchain (e.g. Bitcoin) technologies.
1. A computer-implemented method of encrypting and transmitting data from a first node to a second node over a network, the method comprising:
deriving, at the first node, a secret key from a common secret which is known by the first and second nodes, wherein:
the first node is associated with a first asymmetric cryptography key pair and the second node is associated with a second asymmetric cryptography key pair, and the common secret is derived at the first and second nodes from the respective first and second asymmetric cryptography key pairs without transmitting the common secret between the first and second nodes;
deriving the secret key includes combining the common secret, or a symmetric key resulting from conversion of the common secret, with additional data for transmission of the encrypted data; and
the additional data includes a time variable or a cryptographic function of a time variable;
utilizing the secret key as a seed for a pseudo random number generator;
combining output from the pseudo random number generator with data to be transmitted to produce encrypted data; and
transmitting the encrypted data to the second node.
2. The method according to claim 1 , wherein derivation of the secret key includes converting the common secret into a symmetric key.
3. A method according to claim 1 , wherein the additional data is derived at the first and second nodes without transmitting the additional data between the first and second nodes.
4. The method according to claim 1 , wherein the additional data includes a single use value or a cryptographic function of a single use value.
5. The method according to claim 1 , wherein the additional data is combined with the common secret or a symmetric key using an exclusive or (XOR) operation to produce the seed for the pseudo random number generator, the symmetric key resulting from conversion of the common secret to the symmetric key.
6. The method according to claim 1 , wherein the pseudo random number generator is based on a Zeta function or a Wolfram Rule 30 function.
7. The method according to claim 1 , wherein the output of the pseudo random number generator is combined with the data to be transmitted using an exclusive or (XOR) operation to produce the encrypted data.
8. The method according to claim 1 , wherein the output of the pseudo random number generator is used as a one-time pad.
9. The method according to claim 1 , wherein the transmitting of the encrypted data comprises transmission of a pseudorandom bit stream.
10. The method according to claim 9 , wherein the pseudorandom bit stream is one or more of a virtual private network (VPN) service or a streamed data service.
11. The method according to claim 1 , wherein the first node is a service provider configured to transmit encrypted data to a plurality of users using a different shared symmetric key for each user.
12. The method according to claim 1 , wherein the second node receives the encrypted data and decrypts the data using the common secret.
13. The method according to claim 1 , wherein the second node decrypts the encrypted data as it is being received by applying an exclusive or (XOR) operation to the encrypted data as it is being received.
14. The method according to claim 1 , wherein the second node seeds its own pseudo random number generator independently of the first node in order to decrypt the encrypted data.
15. The method according to claim 1 , wherein the network is a blockchain network.
16. A non-transitory computer readable storage medium comprising computer-executable instructions that, when executed, configure one or more processors to:
derive, at a first node capable of encrypting and transmitting data to a second node over a network, a secret key from a common secret which is known by the first and second nodes, wherein:
the first node is associated with a first asymmetric cryptography key pair and the second node is associated with a second asymmetric cryptography key pair, and the common secret is derived at the first and second nodes from the respective first and second asymmetric cryptography key pairs without transmitting the common secret between the first and second nodes;
deriving the secret key includes combining the common secret, or a symmetric key resulting from conversion of the common secret, with additional data for transmission of the encrypted data; and
the additional data includes a time variable or a cryptographic function of a time variable;
utilize the secret key as a seed for a pseudo random number generator;
combine output from the pseudo random number generator with data to be transmitted to produce encrypted data; and
transmit the encrypted data to the second node.
17. An electronic device capable of encrypting and transmitting data as a first node to a second node over a network, the electronic device comprising:
an interface device;
one or more processors coupled to the interface device; and
a memory coupled to the one or more processors, the memory having stored thereon computer executable instructions which, when executed, configure the one or more processors to:
derive, at the first node, a secret key from a common secret which is known by the first and second nodes, wherein:
the first node is associated with a first asymmetric cryptography key pair and the second node is associated with a second asymmetric cryptography key pair, and the common secret is derived at the first and second nodes from the respective first and second asymmetric cryptography key pairs without transmitting the common secret between the first and second nodes;
deriving the secret key includes combining the common secret, or a symmetric key resulting from conversion of the common secret, with additional data for transmission of the encrypted data; and
the additional data includes a time variable or a cryptographic function of a time variable;
utilize the secret key as a seed for a pseudo random number generator;
combine output from the pseudo random number generator with data to be transmitted to produce encrypted data; and
transmit the encrypted data to the second node.