Key establishment and secure communications using satellite-provided random number values
Systems and techniques for secure communications and distribution of random values for cryptographic key generation, coordinated with the use of specific key generation parameters, are described. An example method includes: receiving a first random value and a second random value generated from at least one quantum random number generator (QRNG), with at least one of the first random value and the second random value being provided from a satellite communication; obtaining key generation parameters associated with cryptographic key generation, where the key generation parameters specify a specific combination of the first random value and the second random value; and generating a cryptographic key, using the specific combination of the first random value and the second random value, as a seed to a cryptographic function.
1 . A method performed by a computing system operating at a terrestrial location for generating a cryptographic key based on a key generation scheme, the method comprising:
receiving a first random value and a second random value generated from at least one quantum random number generator, wherein at least one of the first random value and the second random value is provided from a satellite communication;
obtaining key generation parameters associated with cryptographic key generation, wherein the key generation parameters specify a combination of the first random value and the second random value; and
generating the cryptographic key, using the combination of the first random value and the second random value as a seed to a cryptographic function.
2 . The method of claim 1 , wherein obtaining the key generation parameters includes determining the key generation parameters at the terrestrial location.
3 . The method of claim 2 , further comprising:
communicating the key generation parameters to a satellite location, wherein the key generation parameters are provided to one or more other terrestrial locations via the satellite location.
4 . The method of claim 1 , wherein obtaining the key generation parameters includes receiving the key generation parameters in the satellite communication, and wherein the key generation parameters are provided to one or more other terrestrial locations with respective satellite communications.
5 . The method of claim 4 , wherein the key generation parameters are determined by a satellite location or determined by another terrestrial location that uses the cryptographic key.
6 . The method of claim 5 , wherein the key generation parameters are selected from a plurality of available key generation parameters, and wherein a selection of the key generation parameters is synchronized among the satellite location, the terrestrial location, and the another terrestrial location.
7 . The method of claim 1 , wherein the key generation parameters specify use of the first random value, the second random value, and at least one additional data value, in connection with generating the cryptographic key.
8 . The method of claim 7 , wherein the key generation parameters are used by a key derivation function for generating the cryptographic key, and wherein the key derivation function corresponds to a symmetric key used by the terrestrial location and another terrestrial location.
9 . The method of claim 1 , wherein the first random value and the second random value are provided as a result of a Boolean function applied at a satellite location.
10 . The method of claim 1 , wherein the first random value is provided from a first quantum random number generator at the terrestrial location and the second random value is provided from a second quantum random number generator at a second terrestrial location,
wherein the second random value is communicated to the terrestrial location via the satellite communication, and wherein the cryptographic function produces a symmetric key that is unique to the terrestrial location and the second terrestrial location.
11 . The method of claim 1 , wherein the terrestrial location includes a first set of key generation parameters used for an initial communication scenario, and a second set of key generation parameters used for a failure scenario.
12 . A non-transitory machine-readable medium comprising instructions to generate a cryptographic key based on a key generation scheme, which when executed by a machine operating at a terrestrial location, cause the machine to:
identify a first random value and a second random value generated from at least one quantum random number generator, wherein at least one of the first random value and the second random value is provided from a satellite communication;
obtain key generation parameters associated with cryptographic key generation, wherein the key generation parameters specify a combination of the first random value and the second random value; and
generate the cryptographic key, using the combination of the first random value and the second random value as a seed to a cryptographic function.
13 . The machine-readable medium of claim 12 , wherein to obtain the key generation parameters includes to determine the key generation parameters at the terrestrial location.
14 . The machine-readable medium of claim 13 , wherein the instructions, which when executed by the machine, cause the machine to:
communicate the key generation parameters to a satellite location, wherein the key generation parameters are provided to one or more other terrestrial locations via the satellite location.
15 . The machine-readable medium of claim 12 , wherein to obtain the key generation parameters includes to identify the key generation parameters in the satellite communication, and wherein the key generation parameters are provided to one or more other terrestrial locations with respective satellite communications.
16 . The machine-readable medium of claim 15 , wherein the key generation parameters are determined by a satellite location or determined by another terrestrial location that uses the cryptographic key.
17 . The machine-readable medium of claim 16 , wherein the key generation parameters are selected from a plurality of available key generation parameters, and wherein a selection of the key generation parameters is synchronized among the satellite location, the terrestrial location, and the another terrestrial location.
18 . The machine-readable medium of claim 12 , wherein the key generation parameters specify use of the first random value, the second random value, and at least one additional data value, in connection with generating the cryptographic key.
19 . The machine-readable medium of claim 18 , wherein the key generation parameters are used by a key derivation function for generating the cryptographic key, and wherein the key derivation function corresponds to a symmetric key used by the terrestrial location and another terrestrial location.
20 . The machine-readable medium of claim 12 , wherein the first random value and the second random value are provided as a result of a Boolean function applied at a satellite location.
21 . The machine-readable medium of claim 12 , wherein the first random value is provided from a first quantum random number generator at the terrestrial location and the second random value is provided from a second quantum random number generator at a second terrestrial location,
wherein the second random value is communicated to the terrestrial location via the satellite communication, and wherein the cryptographic function produces a symmetric key that is unique to the terrestrial location and the second terrestrial location.
22 . The machine-readable medium of claim 12 , wherein the terrestrial location includes a first set of key generation parameters used for an initial communication scenario, and a second set of key generation parameters used for a failure scenario.