US 11,722,313 B2
State synchronization for post-quantum signing facilities
Rafael Misoczki, Hillsboro, OR (US); Andrew H. Reinders, Portland, OR (US); Santosh Ghosh, Hillsboro, OR (US); and Manoj Sastry, Portland, OR (US)
Assigned to INTEL CORPORATION, Santa Clara, CA (US)
Filed by Intel Corporation, Santa Clara, CA (US)
Filed on Sep. 8, 2020, as Appl. No. 17/14,600.
Prior Publication US 2022/0078024 A1, Mar. 10, 2022
Int. Cl. H04L 9/32 (2006.01); H04L 9/06 (2006.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01); H04L 9/30 (2006.01); G06N 10/00 (2022.01)
CPC H04L 9/3247 (2013.01) [G06N 10/00 (2019.01); H04L 9/0618 (2013.01); H04L 9/0825 (2013.01); H04L 9/0852 (2013.01); H04L 9/0877 (2013.01); H04L 9/14 (2013.01); H04L 9/3073 (2013.01); H04L 9/0836 (2013.01); H04L 9/3239 (2013.01)] 21 Claims
OG exemplary drawing
 
1. An apparatus, comprising:
a computer readable memory;
a plurality of hardware security modules, at least a first hardware security module in the plurality of hardware security modules comprising processing circuitry to:
determine a number of hardware security modules available to perform a signature process;
generate a first plurality of pairs of cryptographic key pairs comprising a first plurality of private keys and a first plurality of public keys;
forward the first plurality of public keys to a remote computing device;
receive, from the remote computing device, a first plurality of ciphertexts, wherein each ciphertext in the plurality of ciphertexts represents an encryption of a cryptographic seed with a public key selected from the plurality of public keys;
select, from the plurality of hardware security modules, a subset of hardware security modules to perform the signature process;
receive, from the subset of hardware security modules in the plurality of hardware security modules, a subset of private keys; and
generate at least one of:
a first signal when the subset of private keys comprises a number of private keys that exceeds a threshold; or
a second signal when the subset of private keys comprises a number of private keys that does not exceed a threshold.