Trust framework against systematic cryptographic breach
A computing system receives encrypted data that can be decrypted by a first secret to obtain data, wherein the first secret is securely stored by the system, determines that the data encodes a second secret and executable code usable to perform cryptographic operations, and run the executable code to perform the cryptographic operations. The first secret may be a one-time pad.
1. A computer-implemented method, comprising:
generating a hash output using a secret and executable code of an update that causes previously installed executable codes of a hardware device to be updated and to be applied by a hardware device that securely stores a one-time pad, wherein the update has not been previously installed on the hardware device and wherein the hash output is a hash of the secret and the executable code of the update together;
using a one-time pad to encrypt the hash output, thereby generating an encrypted hash output; and
providing the encrypted hash output to the hardware device to cause the hardware device to run the executable code to apply the update to enable the hardware device to perform cryptographic operations using the secret.
2. The computer-implemented method of claim 1 , wherein the executable code comprises code that, if applied by the hardware device, causes firmware of the hardware device to be updated.
3. The computer-implemented method of claim 1 , wherein the encrypted hash output is decryptable to verify the executable code applying the update.
4. The computer-implemented method of claim 1 , further comprising:
identifying a cryptographic algorithm; and
generating the executable code, wherein the executable code, if applied by the hardware device, enables the hardware device to perform the cryptographic operations according to the cryptographic algorithm.
5. A system, comprising memory storing instructions that, as a result of execution by one or more processors, cause the system to:
generate a hash output using a first secret and executable code of an update that causes previously installed executable codes of a hardware device to be updated, wherein the update has not been previously installed on the hardware device;
obtain, by encrypting the hash output, encrypted data that can be decrypted by a second secret to obtain data, wherein the second secret is securely stored by the system;
determine that the data encodes a second the first secret and the update usable to perform operations; and
apply the update to enable the system to perform the operations.
6. The system of claim 5 , wherein the instructions further cause the system to:
decrypt the encrypted data using the second secret to obtain the data;
generate an output based on the first secret and the update; and
apply the update in response to verifying that the data and the output match.
7. The system of claim 6 , wherein the instructions to generate the output cause the system to:
concatenate the update and the first secret to generate concatenated data; and
use at least the concatenated data as an input to a cryptographic hash function to generate the output.
8. The system of claim 5 , wherein the executable code of the update, if executed, causes the system to generate, based on the first secret, a trust anchor.
9. The system of claim 8 , wherein the instructions that cause the system to generate the trust anchor include instructions to generate a root certificate.
10. The system of claim 5 , wherein:
the instructions further comprise instructions that cause the system to receive the update from a second computing entity different from a first computing entity associated with the encrypted data.
11. The system of claim 5 , further comprising one or more fuses, wherein:
the second secret is securely stored in the one or more fuses; and
physical destruction of the one or more fuses is caused in response to detecting an attempt to physically access the one or more fuses.
12. The system of claim 5 , wherein the instructions to enable the system to perform the operations enable the system to perform cryptographic operations.
13. A non-transitory computer-readable storage medium storing thereon instructions that, if executed by one or more processors, cause a system to:
generate a hash output using a first secret and executable code of an update that causes previously installed executable codes of a hardware device to be updated, wherein the update has not been previously installed on the hardware device;
obtain, by encrypting the hash output, encrypted data that can be decrypted by a second secret to obtain data, wherein the second secret is securely stored by the system;
detect that the data comprises first secret and the update usable to perform operations; and
apply the update to enable the system to perform the operations.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further cause the system to:
decrypt the encrypted data using the second secret to obtain the data;
generate an output based on the first secret; and
apply the update if the data and the output match.
15. The non-transitory computer-readable storage medium of claim 14 , wherein the instructions to generate the output cause the system to:
combine the update and the first secret to generate combined data; and
use at least the combined data as an input to a hash function to generate the output.
16. The non-transitory computer-readable storage medium of claim 13 , wherein the executable code of the update, if executed, causes the system to generate, based on the first secret, cryptographic material.
17. The non-transitory computer-readable storage medium of claim 16 , wherein the cryptographic material corresponds to a digital certificate.
18. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions further comprise instructions that cause the system to receive the update from a second computing entity, wherein a first computing entity associated with the encrypted data and the second computing entity are different.
19. The non-transitory computer-readable storage medium of claim 13 , wherein the second secret is comprised in one or more fuses of the system.
20. The non-transitory computer-readable storage medium of claim 13 , wherein the operations comprise cryptographic operations.