Method and device for detecting bugs of elliptic curve algorithm

Abstract

The invention provides a method and a device for detecting bugs of an elliptic curve algorithm. The method comprises the following steps: acquiring an energy consumption curve of a chip in implementing digital signature based on an elliptic curve algorithm, wherein the energy consumption curve refers to a curve that energy of the chip changes at any time; according to energy variation characteristics of the energy consumption curve, confirming an energy consumption curve to be processed in correspondence to non-adjacent representative NAF conversion from the energy consumption curve when digital signature is implemented by the chip; according to the energy consumption curve to be processed and an energy consumption characteristic databank which is established in advance, detecting whether an elliptic curve has bugs or not. According to the method, whether the elliptic curve has security bugs at an NAF conversion part or not is detected via energy curves of the chip in digital signature, then the security bugs can be repaired by manufacturers in time, and the security of the elliptic curve algorithm is further improved.

Description

technical field [0001] The present invention relates to the technical field of cryptography, and in particular, to a method and device for detecting vulnerabilities in elliptic curve algorithms. Background technique [0002] At present, with the gradual improvement of people's requirements for information security, the encryption system has been fully developed. Cryptosystems are divided into symmetric cryptosystems (private key cryptosystems) and asymmetric cryptosystems (public key cryptosystems). Asymmetric cryptosystems use different keys for encryption and decryption. [0003] Elliptic Curve Cryptography (ECC) is an asymmetric cryptosystem. ECC has the characteristics of short key length, fast encryption and decryption speed, low requirements for computing environment, and low requirements for bandwidth when communication is required. Therefore, in recent years, ECC is widely used in commercial cryptography. State Secret SM2 is also an asymmetric encryption system, wh...

AI Technical Summary

Problems solved by technology

[0004] However, in the process of NAF implementation, most manufacturers only consider the improvement of NAF computing speed, but ignore the security factor, which may lead to security loopholes in the implementation process of NAF, resulting in the cracking of the elliptic curve algorithm.

[0005] One of the key points of the security assessment of the elliptic curve algorithm is the point multiplication operation. The point multiplication operation realized by NAF is divided into two parts: NAF transformation and point doubling point cycle operation. In the prior art, the security assessment of the point multiplication operation mainly focuses on The addition and doubling operations rarely involve the evaluation of the security of the elliptic curve algorithm for the NAF transformation part. Therefore, manufacturers will neglect the protection of the NAF transformation part, making the NAF transformation part have security loopholes, which will lead to the elliptic curve algorithm being cracked.

Images