Key expansion using seed values

摘要

Systems, methods, and other embodiments associated with reducing storage space used for cryptographic keys in a memory are described. According to one embodiment, an apparatus includes a non-volatile memory. The apparatus includes key logic configured to expand a seed value to form a key. The seed value is a sequence of random bits. The apparatus includes inspection logic configured to inspect the key to determine whether the key is valid for use as a cryptographic key. The key logic is configured to store the seed value in the non-volatile memory if the key is valid, and if the key is not valid, the key logic is configured to modify the seed value to form a modified seed value, to generate a new key from the modified seed value, and to repeat inspecting the new key and modifying the seed value until a valid key is determined.

主权项

1. An apparatus, comprising:
a non-volatile memory; key logic configured to expand a seed value to form a key, wherein the seed value is a sequence of random bits; inspection logic configured to inspect the key to determine whether the key is valid for use as a cryptographic key by determining whether the key complies with a set of predefined criteria; and wherein the key logic is configured to store the seed value in the non-volatile memory if the key is valid, and if the key is not valid, the key logic is configured to modify the seed value to form a modified seed value, to generate a new key from the modified seed value, and to repeat inspecting the new key and modifying the seed value until a valid key is determined to comply with the predefined criteria, and wherein the key logic is configured to expand the seed value into the key by applying a deterministic function to the seed value.