MLKEMKey: 抗量子瞬时会话密钥生成、高保真物理 TRNG 注入与 (d, z) 双种子标准推导

MLKEMKey 专注于为 FIPS 203 ML-KEM 提供数学可证明的临时会话密钥与长期主密钥生成机制，集成量子真随机数发生器 (QRNG)、严格符合 NIST SP 800-90A/B/C 规范的熵池以及硬件级安全密钥衍生函数 (KDF)。

MLKEMKey Entropy Harvesting & Dual-Seed Key Derivation Architecture

Quantum RNG ingestion, SP 800-90B health tests, and constant-time (d, z) expansion

Central System: Key Derivation Core - Dual-Seed (d, z) Generator

Cryptographic Nodes

  • Quantum Noise Source
  • Entropy Health Monitor
  • Conditioning Component
  • Polynomial Expansion Unit
  • Stack Zeroization Circuit

Architectural Layers & Protocols

  • Physical Noise Harvesting Layer (Photonic Phase-Jitter / Avalanche Breakdown): Harvesting raw quantum physical entropy with min-entropy H_inf > 7.99 bits per byte.
  • Deterministic Random Bit Generator (HMAC-DRBG / CTR-DRBG / Hash-DRBG): Cryptographic expansion of conditioned seeds with 256-bit forward and backward secrecy.
  • FIPS 203 Dual-Seed Expansion (SHAKE-256 (d, z) Derivation): Transforming 32-byte seed d into public matrix seeds rho and noise seed sigma; seed z for rejection.
  • Key Lifecycle & Scrubbing Controller (Memory-Locked Pages (mlock) & Active Zeroization): Ensuring private keys and intermediate seeds are immediately scrubbed upon completion.

Key Metrics: 256 bits (Entropy Seed Length) | < 45 µs (Keygen Cycle Time) | H_inf > 7.99 (Min-Entropy Guarantee) | Instant (Stack Zeroization)

抗量子临时密钥生成、高熵TRNG种子摄入与双种子密钥推导（d, z）

深入剖析 NIST FIPS 203/204/205 标准、格密码学、侧信道攻击防护及后量子计算防御架构中的Quantum-Resilient Ephemeral Key Generation, High-Entropy TRNG Seed Ingestion & Dual-Seed Key Derivation (d, z)关键工程实践。

Core Engineering Areas

Technical Articles

Related Cluster Architecture Specifications