Data decryption method and device and computer readable storage medium

Abstract

The invention provides a data decryption method and device, and a computer readable storage medium. The method comprises the steps of reading a first hash value from a nonvolatile memory; reading a second hash value from the one-time programmable chip; performing primary verification on the first hash value by utilizing the second hash value; if the first verification is passed, reading the to-be-decrypted data from the nonvolatile memory; calculating a third hash value of the to-be-decrypted data based on a preset hash function; performing secondary verification on the first hash value by utilizing the third hash value; and if the secondary verification is passed, decrypting the to-be-decrypted data. According to the method and the device, the to-be-decrypted data is subjected to secondary verification to verify the integrity of the to-be-decrypted data, and then the to-be-decrypted data is decrypted under the condition of ensuring the integrity of the to-be-decrypted data, so that the to-be-decrypted data is effectively prevented from being decrypted in a bypass attack mode to obtain the key of the encryption algorithm.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a data decryption method, device and computer-readable storage medium. Background technique [0002] With the development of information security technology, portable devices with cryptographic chips as the main components are widely used. The user's data in the storage unit of the embedded device may contain algorithms with commercial value, confidential keys or digital watermarks, etc., in the SoC (System on Chip, system on chip) with OTP (One Time Programable, one-time programmable) ROM In chips, how to protect the integrity of user data is an urgent problem to be solved. [0003] In the existing solution, the encrypted user data in the storage unit is usually directly decrypted and run in the memory. If the encrypted program is wrong, the decrypted program is also wrong. However, in the above-mentioned method of directly decrypting encrypted user data, even i...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the problem of detecting the key of the encryption algorithm inside the chip by side-channel attacks such as differential power analysis or differential electromagnetic analysis in the above-mentioned prior art, the present invention proposes a data decryption method, device and computer-capable Read the storage medium, which can first perform a second check on the data to be decrypted to verify its integrity, and then perform a decryption operation on the data to be decrypted while ensuring the integrity of the data to be decrypted, effectively preventing the encrypted data from being The key of the encryption algorithm is deciphered by side-channel attack, which ensures the security of user data (or running data)

Images