Cryptographic key generation system and method
A computing device may be configured to receive a set of inputs from other computing devices. The set of inputs may include inputs derived by the computing devices utilizing cryptographic keys of the computing devices. The set of inputs may be stored in a blockchain such that the inputs are tamper resistant. A symmetric key may be generated (periodically, upon expiration of a timer, according to a protocol set, upon request, etc.) from two or more of the set of inputs. The generated symmetric key may be distributed to the computing devices. The symmetric key may be utilized to encrypt and decrypt communications between two computing devices.
1. A computer-implemented method, comprising:
obtaining, by a network device, a set of inputs derived using cryptographic keys associated with a plurality of computing devices in a set of computing devices;
determining an index based on at least one of a counter or a time;
identifying, from a protocol set associated with symmetric cryptographic key generation using the index, a function from a plurality of predefined functions and a combination of at least two of the set of inputs corresponding to the function, the protocol set comprising an indexed list of the plurality of predefined functions and an indication of a respective number and combination of two or more of the set of inputs to be utilized with each of the plurality of predefined functions, at least two of the plurality of predefined functions utilizing different numbers of inputs from the set of inputs; and
generating, by the network device, a symmetric cryptographic key using the function identified from the protocol set and the at least two of the set of inputs, wherein the generated symmetric cryptographic key is thereafter used to encrypt communications between at least two computing devices of the set of computing devices.
2. The computer-implemented method of claim 1 , wherein the network device is a router that receives a symmetric cryptographic key request from a first computing device of the set of computing devices, the first computing device having determined that a message is to be transmitted to a second computing device of the set of computing devices.
3. The computer-implemented method of claim 1 , wherein the network device is one computing device of the set of computing devices.
4. The computer-implemented method of claim 1 , further comprising storing, by the network device, the set of inputs in a blockchain.
5. The computer-implemented method of claim 1 , wherein an input of the set of inputs comprises data generated utilizing a private key associated with one computing device of the set of computing devices.
6. The computer-implemented method of claim 1 , further comprising:
receiving, by the network device from a requesting device of the set of computing devices, a request for the symmetric cryptographic key, wherein the generated symmetric cryptographic key is provided to the requesting device in response to the request.
7. The computer-implemented method of claim 1 , wherein the symmetric cryptographic key is generated according to a predetermined frequency or a predetermined schedule, the predetermined frequency or the predetermined schedule being defined by the protocol set associated with symmetric cryptographic key generation.
8. The computer-implemented method of claim 1 , further comprising providing the generated symmetric cryptographic key to each of the set of computing devices, wherein receiving the generated symmetric cryptographic key causes each of the set of computing devices to store the generated symmetric cryptographic key locally.
9. The computer-implemented method of claim 1 , wherein subsequent communications between two computing devices of the set of computing devices utilize the generated symmetric cryptographic key to encrypt outgoing communications and to decrypt incoming communications.
10. The computer-implemented method of claim 1 , wherein subsequent symmetric cryptographic keys are generated by the network device upon expiration of a timer associated with the protocol set, the protocol set defining rules for generating various symmetric cryptographic keys.
11. A network device, comprising:
a processor; and
a memory including executable instructions that, when executed by the processor, cause the network device to:
obtain, from a blockchain, a set of inputs derived using cryptographic keys associated with a plurality of computing devices in a set of computing devices;
determine an index based on at least one of a counter or a time;
identify, from a protocol set associated with symmetric cryptographic key generation using the index, a function from a plurality of predefined functions and a combination of at least two of the set of inputs, the protocol set comprising an indexed list of the plurality of predefined functions and an indication of a respective number and combination of two or more of the set of inputs to be utilized with each of the plurality of predefined functions, at least two of the plurality of predefined functions utilizing different numbers of inputs from the set of inputs; and
generate a symmetric cryptographic key using the function identified from the protocol set and the at least two of the set of inputs, wherein the generated symmetric cryptographic key is thereafter used to encrypt communications between at least two computing devices of the set of computing devices.
12. The network device of claim 11 , wherein the network device is a router that receives a symmetric cryptographic key request from a first computing device of the set of computing devices, the first computing device having determined that a message is to be transmitted to a second computing device of the set of computing devices.
13. The network device of claim 11 , wherein the network device is one computing device of the set of computing devices.
14. The network device of claim 11 , comprising further instructions that, when executed by the process, cause the network device to store the set of inputs in the blockchain.
15. The network device of claim 11 , wherein an input of the set of inputs comprises data generated utilizing a private key associated with one computing device of the set of computing devices.
16. The network device of claim 11 , comprising further instructions that, when executed by the process, cause the network device to:
receive, from a requesting device of the set of computing devices, a request for the symmetric cryptographic key, wherein the generated symmetric cryptographic key is provided to the requesting device in response to the request.
17. The network device of claim 11 , wherein the symmetric cryptographic key is generated according to a predetermined frequency or a predetermined schedule, the predetermined frequency or the predetermined schedule being defined by the protocol set associated with symmetric cryptographic key generation.
18. The network device of claim 11 , further comprising providing the generated symmetric cryptographic key to each of the set of computing devices, wherein receiving the generated symmetric cryptographic key causes each of the set of computing devices to store the generated symmetric cryptographic key locally.
19. The network device of claim 11 , wherein subsequent communications between two computing devices of the set of computing devices utilize the generated symmetric cryptographic key to encrypt outgoing communications and to decrypt incoming communications.
20. The network device of claim 11 , wherein subsequent symmetric cryptographic keys are generated upon expiration of a timer associated with the protocol set, the protocol set defining rules for generating various symmetric cryptographic keys.