Forward-Secure Crash-Resilient Logging Device

摘要

A logging device configured to store log messages, includes a storage device having a plurality of log entry locations which can be ordered as a sequence, an encryption device configured to generate the encrypted log messages from log messages, an authentication code generator configured to generate an authentication code from the encrypted log message, a key evolving device, a state storage device configured to store state variables for use by the encryption device, the authentication code generator and/or the key evolving device. Furthermore, a verification device configured to verify log entries stored in log entry locations of the storage device is also described. A method for storing log entries in log entry locations of a storage device of a logging device as well as to a method for verifying the integrity of log entries stored in log entry locations of a storage device is also described.

主权项

1. A logging device configured to store log messages, comprising:
a storage device having a plurality of log entry locations configured to be ordered as a sequence; an encryption device configured to generate encrypted log messages from log messages; an authentication code generator configured to generate an authentication code from an encrypted log message; a key evolving device; and a state storage device, wherein the state storage device is configured to store state variables for use by at least one of the encryption device, the authentication code generator, and the key evolving device, wherein each of the log entry locations is configured to provide storage space for a log entry, wherein the key evolving device is configured to provide a deterministic sequence of secrets from an initial status, and wherein the logging device comprises a position determination device configured to determine a log entry location in which a given log entry is to be stored.