Verifying cryptographic signature from stored primitives of previously received signature
Embodiments provide systems and methods to optimize signature verification time for a cryptographic cache. Time is reduced by eliminating at least some of the duplicative application of cryptographic primitives. In some embodiments, systems and methods for signature verification comprise obtaining a signature which was previously generated using an asymmetrical cryptographic scheme, and determining whether an identical signature has previously been stored in a signature cache. If an identical signature has been previously stored in the signature cache, retrieving previously generated results corresponding to the previously stored identical signature, the results a consequence of application of cryptographic primitives of the asymmetrical cryptographic scheme corresponding to the identical signature. The results are forwarded to a signature verifier. In at least some embodiments, at least one of these functions occurs in a secure execution environment.
1. A process of operating a computer system comprising:
A. receiving a cryptographic signature in a memory in an unsecure environment of the computer system;
B. determining whether the received cryptographic signature is identical to a previously received signature, which is stored in a signature cache in a secure execution environment of the computer system;
C. if no identical previously received signature is located in the signature cache,
i. applying, in the secure execution environment, cryptographic primitives of the digital signature verification scheme agreed to be employed on messages between signer to the received cryptographic signature in a digital signature scheme calculator in the secure execution environment, and
ii. adding a copy of the results of application of the appropriate cryptographic primitives as a new entry to the signature cache; and
D. if an identical previously received signature is located in the signature cache,
i. retrieving, in the secure execution environment, the stored results of the previous utilization of cryptographic primitives corresponding to the relevant digital signature scheme being employed, which results were previously stored at an identified location in the signature cache,
ii. applying a hash value to the cryptographic signature,
iii. comparing a hash value of the cryptographic signature generated by a hash function with a hash value retrieved from the signature cache, and
iv. if there is a match, verifying the cryptographic signature and any message accompanying the cryptographic signature.