Dot computation method capable of resisting simple current drain aggression

Abstract

The invention belongs to the field of safety execution in a public key cipher system and relates to a dot computation method for resisting simple power consumption attack. When a software / hardware cipher equipment potentially suffering the simple power consumption attack operates the public key cipher system according to the following steps: reading a dot P and a dot coefficient d meeting the requirement in an elliptic curve point group; dividing a binary string of the coefficient d into equilong binary substrings d1 and d2; computing a dot pair {d1.P, d2.P}={(d1 AND (NOT d2)+d1 AND d2).P, ((NOT d1)AND d2+d1 AND d2).P} by a fixed from-right-to-left binary algorithm; according to a formula, computing the value of the dot d.P through the dot pair {d1.P, d2.P}; expressing connection by a function II; and expressing to have m times multiplication dot operation on the dot P of the elliptic curve point group by a function sq<(m)>(P). The computation method of the invention has stronger capacity for resisting SPA attack and simultaneously has rapider computing speed.

Description

technical field [0001] The invention belongs to the field of safe execution of public key cryptosystem, and relates to integrated circuit safety technology. Background technique [0002] Elliptic curve public-key cryptosystems, such as the Elliptic Curve Digital Signature Algorithm (ECDSA), are designed on the basis of the discrete logarithm problem of elliptic curve point groups defined over finite fields. The biggest advantage of using elliptic curve point groups is that there is no discrete logarithm calculation method with sub-exponential time complexity like the index attack on the integer multiplication cyclic group. Therefore, while maintaining the same security strength, relatively small Small security parameters, thereby improving the execution performance of all aspects of the public key cryptosystem. In the elliptic curve cryptosystem, the point multiplication d·P is mainly calculated on a certain type of elliptic curve point group, where P is a point on the elli...

AI Technical Summary

Problems solved by technology

It should be pointed out that these dot product calculation methods are often at the expense of efficiency

In addition, due to the development of SPA attack technology, many existing point product calculation methods are no longer able to resist SPA attacks.

Images