While encryption is powerful at protecting information, it critically relies upon the mystery/private cryptographic key’s security. Poor key management would compromise any robust encryption algorithm. In this way, securing information is reduced to the issue of securing such keys from unauthorized access. In this work, KeyShield is proposed, a scalable and quantum-safe key management scheme. KeyShield provides the highest security level as it relies on the impossibility of finding a unique solution to an underdetermined linear system of equations. KeyShield achieves the rekeying using a single broadcast message, called a secure lock, in an open channel rather than pairwise secure channels. Security analyses for a list of attacks are provided, along with a detailed discussion on the quantum-safe feature. KeyShield outperforms state-of-the-art schemes in several aspects, including quantum-resistance, computation cost, message overhead, storage cost, and rekeying delay.

中文翻译：

---

KeyShield：一种可扩展且量子安全的密钥管理方案

尽管加密在保护信息方面功能强大，但它在很大程度上依赖于神秘/专用密钥的安全性。不良的密钥管理将损害任何可靠的加密算法。以这种方式，保护信息被减少到保护这种密钥免于未授权访问的问题。在这项工作中，提出了KeyShield，这是一种可伸缩且量子安全的密钥管理方案。KeyShield依靠无法为欠定线性方程组找到唯一解的可能性，因此可提供最高的安全级别。KeyShield可以使用一条广播消息（称为安全锁）在开放频道而不是成对安全频道中实现密钥更新。提供了针对攻击列表的安全性分析，以及有关量子安全功能的详细讨论。