Apparatus and method for certificate enrollment

1. An apparatus configured to operate in a secure execution environment, the apparatus comprising:

a memory; and

a processor coupled to the memory,

wherein the memory is configured to store a shared secret value,

wherein the processor is configured to:

receive a certificate, wherein the certificate comprises a device identifier, a digital signature, and a plurality of diversifier values;

validate the certificate based on the digital signature and the device identifier;

recover a cryptographic key based on the shared secret value, the device identifier, and a diversifier value of the plurality of diversifier values; and

perform a cryptographic operation based on the recovered cryptographic key, and

wherein the plurality of diversifier values are public values.

2. The apparatus of claim 1 , wherein the certificate is validated further based on the diversifier value.

3. The apparatus of claim 1 , wherein the certificate comprises an encrypted private key, and the processor is further configured to decrypt the encrypted private key based on the recovered cryptographic key, and

wherein the cryptographic operation is performed further based on the decrypted private key.

4. The apparatus of claim 3 , wherein the memory is further configured to store a hardware unique key,

wherein the private key is decrypted further based on the hardware unique key, and

wherein the cryptographic operation is performed further based on the decrypted private key.

5. The apparatus of claim 1 , wherein the processor is further configured to receive a public key corresponding to a certificate authority,

wherein the certificate is validated further based on the public key, and

wherein the public key is associated with a certificate authority, and the certificate is issued by the certificate authority.

6. The apparatus of claim 1 , wherein the processor is further configured to verify that the cryptographic operation is allowed by the certificate, and

wherein the cryptographic operation is performed in response to the cryptographic operation being allowed.

7. The apparatus of claim 1 , wherein the recovered cryptographic key corresponds to one of a symmetric cryptographic key and an asymmetric cryptographic key.

8. The apparatus of claim 1 , wherein the recovered cryptographic key is based on one or more of a digital encryption standard and an advanced encryption standard.

9. The apparatus of claim 1 , wherein the recovered cryptographic key is an asymmetric cryptographic key based on one of a Rivest, Shamir, and Adleman cryptographic algorithm and an elliptic curve cryptography algorithm.

10. The apparatus of claim 9 , wherein the processor is further configured to generate an asymmetric key pair by:

generating a plurality of pseudo random bytes by applying a one-way function to the shared secret value; and

generating the asymmetric key pair by applying a deterministic process to the plurality of pseudo random bytes.

11. The apparatus of claim 1 , wherein the processor is further configured to generate an application specific key based on the diversifier value of the plurality of diversifier values.

12. The apparatus of claim 1 , wherein the processor is further configured to generate different application specific keys based on different diversifier values of the plurality of diversifier values.

13. The apparatus of claim 1 , wherein the diversifier value and the device identifier are configured to function as a public cryptographic salt.

14. A method for performing a cryptographic operation in a secure execution environment using a shared secret value, the method comprising:

receiving a certificate, wherein the certificate comprises a device identifier, a plurality of diversifier values, and a digital signature;

validating the certificate based on the device identifier and the digital signature;

recovering a cryptographic key based on the shared secret value, the device identifier, and a diversifier value of the plurality of diversifier values; and

performing a cryptographic operation based on the recovered cryptographic key,

wherein the plurality of diversifier values are public values.

15. The method of claim 14 , wherein the certificate is validated further based on the diversifier value.

16. The method of claim 14 , further comprising generating an application specific key based on the diversifier value of the plurality of diversifier values.

17. The method of claim 14 , wherein the certificate comprises an encrypted private key, and the method further comprises decrypting the encrypted private key based on the recovered cryptographic key, and

wherein the cryptographic operation is performed further based on the decrypted private key.

18. A non-transitory computer readable medium having a program code stored thereon that, when executed by a computer, causes the computer to perform a method for performing a cryptographic operation in a secure execution environment using a shared secret value, the method comprising:

receiving a certificate, wherein the certificate comprises a device identifier, a plurality of diversifier values, and a digital signature;

validating the certificate based on the device identifier and the digital signature;

recovering a cryptographic key based on the shared secret value, the device identifier, and a diversifier value of the plurality of diversifier values; and

performing a cryptographic operation based on the derived cryptographic key,

wherein the plurality of diversifier values are public values.

19. The non-transitory computer readable medium of claim 18 , wherein the certificate is validated further based on the diversifier value.

20. The non-transitory computer readable medium of claim 18 , wherein the method further comprises generating an application specific key based on the diversifier value of the plurality of diversifier values.

21. The non-transitory computer readable medium of claim 18 , wherein the certificate comprises an encrypted private key, and the method further comprises decrypting the encrypted private key based on the recovered cryptographic key, and

wherein the cryptographic operation is performed further based on the decrypted private key.