Encryption and/or decryption key device, system and method
View Patent ↗An electronic device includes processing circuitry and one or more memories, including a non-volatile memory. Ephemeral cryptographic key generation circuitry, in operation, applies a function to code stored in the non-volatile memory, generating an ephemeral cryptographic key. Cryptographic circuitry coupled between the processing circuitry and the one or more memories, in operation, performs one or more cryptographic operations on data using the generated ephemeral cryptographic key. The device may include a register, which, in operation, temporarily stores the generated ephemeral cryptographic key.
1. A method, comprising:
decrypting an encrypted code stored in a non-rewritable, non-volatile memory, the decrypting of the encrypted code generating a decrypted code;
booting an electronic device using the decrypted code;
generating an ephemeral cryptographic key by applying a non-reversible function to data, the data to which the non-reversible function is applied including a portion of the decrypted code used to boot the electronic device, wherein the decrypted code is transferred into a volatile memory before applying the non-reversible function; and
performing one or more cryptographic operations using the generated ephemeral cryptographic key.
2. The method of claim 1 , comprising temporarily storing the ephemeral cryptographic key in a register.
3. The method of claim 1 , wherein the non-reversible function is:
a signature function;
a hash function; or
a Cyclic Redundancy Check (CRC) function.
4. The method of claim 1 , comprising generating the ephemeral cryptographic key during the booting of the electronic device.
5. The method of claim 1 , comprising generating the ephemeral cryptographic key in response to initiation of a data process.
6. The method of claim 1 , wherein the performing one or more cryptographic operations comprises performing a cryptographic operation on data of the non-volatile memory using the ephemeral cryptographic key.
7. The method of claim 1 , wherein the volatile memory is a RAM memory.
8. The method of claim 1 , wherein the generating the ephemeral cryptographic key comprises storing the ephemeral cryptographic key, and the method further comprises erasing the stored ephemeral cryptographic key.
9. The method of claim 1 , comprising performing an authentication process based on results of the one or more cryptographic operations.
10. A system, comprising:
one or more memories including a non-rewriteable, non-volatile memory; and
processing circuitry coupled to the one or more memories, wherein the processing circuitry, in operation,
decrypts encrypted boot code stored in the non-rewritable, non-volatile memory, the decrypting the encrypted boot code generating decrypted boot code;
executes a boot operation using the decrypted boot code;
generates an ephemeral cryptographic key by applying a non-reversible function to data, the data to which the non-reversible function is applied including a portion of the decrypted boot code used to execute the boot operation, wherein the decrypted boot code is transferred into a volatile memory before applying the non-reversible function; and
performs one or more cryptographic operations using the generated ephemeral cryptographic key.
11. The system of claim 10 , comprising functional circuitry coupled to the processing circuitry, wherein the functional circuitry, in operation, performs one or more operations based on a result of the one or more cryptographic operations.
12. The system of claim 10 , wherein the boot code is a system boot code.
13. A non-transitory computer-readable medium having contents which configure a computing device to perform a method, the method comprising:
decrypting encrypted boot code stored in a non-rewritable, non-volatile memory, the decrypting the encrypted boot code generating decrypted boot code;
executing a boot operation using the decrypted boot code;
generating an ephemeral cryptographic key by applying a non-reversible function to data, the data to which the non-reversible function is applied including a portion of the decrypted boot code used to execute the boot operation, wherein the decrypted boot code is transferred into a volatile memory before applying the non-reversible function; and
performing one or more cryptographic operations using the generated ephemeral cryptographic key.
14. The non-transitory computer-readable medium of claim 13 , wherein the contents comprise instructions stored in the non-transitory computer-readable medium.
15. The non-transitory computer-readable medium of claim 13 , wherein the non-reversible function is:
a signature function;
a hash function; or
a Cyclic Redundancy Check (CRC).