A security analysis of a deterministic key generation scheme

• Main Authors: SONG, Yuhao, YAN, Yuping, SHAO, George, ZHU, Feida, SONG, Mason
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2024
• Subjects: Resistance; Ciphers; Production; Generators; Encryption; Security; Reliability; Databases and Information Systems; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/9792
• Institution: Singapore Management University

A deterministic key generation scheme is an encryption method that derives a secret key using a fixed seed and algorithm, ensuring consistent production of the same secret key for identical inputs. This approach streamlines key management by eliminating the need for separate key storage and enables straightforward backup and recovery through the use of a seed or master key. Nevertheless, it introduces security risks, particularly if the key is compromised. Therefore, safeguarding the initial seed or master key is paramount for upholding the security of the entire key hierarchy. In this paper, we rigorously describe a novel method for generating deterministic RSA keys from ECDSA signatures employing a Pseudo-Random Number Generator (PRNG). Subsequently, we conduct a comprehensive security analysis of this approach, demonstrating the security and collision resistance of the RSA keys generated.