Safety modular exponentiation method for resisting energy analysis and fault attack

Abstract

The invention discloses a safety modular exponentiation method for resisting energy analysis and fault attack. The safety modular exponentiation method includes the steps: reading a base number M, an index E and a modulus N; setting an intermediate variable TmpM=M, TmpE=E and TmpR=1; writing the modulus N into an NSRAM (non-volatile static random access memory), starting pre-computation and converting the TmpM and the TmpR into Montgomery numbers by the aid of an ASRAM (asynchronous static random access memory) and a BSRAM (burst static random access memory); randomly selecting a divisor D, updating TmpE=TmpE/D and computing the intermediate variable Rem=TmpEmodD; updating TmpR=TmpM^(Rem)*TmpRmodN and TmpM=TmpM^(D)modN according to a divisor remainder pair (D, Rem) if TmpE=0 and switching to the step of selecting the divisor; computing the intermediate variable TmpR1=TmpM^(Rem)*TmpRmodN according to a remainder Rem if TmpE=0; reloading the modulus N into the NSRAM and updating TmpR=TmpM^(Rem)*TmpRmodN according to the remainder Rem; comparing the TmpR1 with the TmpR and converting the TmpR into a general number command and outputting results if the TmpR1 is equal to the TmpR; and finishing the operation if the TmpR1 is unequal to the TmpR. By the safety modular exponentiation method, both energy attack and fault attack can be resisted.

Description

technical field [0001] The invention relates to the field of safe execution of a public key cryptosystem, in particular to a safe modular exponentiation calculation method resistant to energy analysis and error attacks. Background technique [0002] With the development and application of information technology, online transactions such as online banking, e-government and e-commerce have become more and more common, and the security problems brought about by it have become more and more serious. The information is encrypted. The traditional encryption algorithm uses a symmetric cryptosystem, and the two parties in the communication share the same key. Its advantage is that encryption is easy to implement with hardware, and the speed of encryption and decryption is very fast, but there are security risks, and the key is easy to be stolen during the exchange. . The modern public-key cryptosystem is an asymmetric cryptosystem, which only requires the exchange of keys to be au...

AI Technical Summary

Problems solved by technology

However, many existing modular exponentiation operations often only consider resistance to energy analysis, but ignore resistance to error injection attacks, or vice versa, so the security is not high

Images