A mask operation method and device for SM2 algorithm

Abstract

The invention relates to a mask operation method and device for SM2 algorithm. The mask operation method is to cover the random number k in [k]G operation by means of preset points and random numbers. During the operation process of SM2 algorithm [k] G calculation specifically includes: preset point P0 in the chip = [r ‑1 ]G and the first random number r; P0 is a point on the elliptic curve in the finite field, and G is the base point on the elliptic curve; the second random number d is generated inside the chip; calculated by the first random number r and the second random number d Generate the third random number k=d·r ‑1 ; Calculate the generated point P1=[k]G=[d·r ‑1 ]G=[d]·[r ‑1 ] G=[d] P0, the mask operation device includes a preset module, a random number generation module, a random number operation module and a point multiplication operation module; the present invention can enhance the difficulty of deciphering the real parameter information k and power consumption analysis to obtain information, Effectively respond to power analysis attacks.

Description

technical field [0001] The invention belongs to the technical field of SM2 encryption algorithm, and in particular relates to a mask operation method and device for the SM2 algorithm. Background technique [0002] With the continuous development of cryptography and computing technology, the currently commonly used 1024-bit public key encryption algorithm RSA is facing serious threats. Due to the advantages of SM2 algorithm, such as high security, small amount of calculation, and fast processing speed, our national encryption management department has studied it. It was decided to replace the RSA algorithm with the SM2 elliptic curve cryptographic algorithm. Compared with the RSA algorithm, under the premise of achieving the same security strength, the key length required by the SM2 algorithm is shorter, and the hardware implementation is simpler. [0003] The SM2 cryptographic algorithm is theoretically very safe, but in the implementation process, it is necessary to take i...

AI Technical Summary

Problems solved by technology

[0003] The SM2 cryptographic algorithm is theoretically very safe, but in the implementation process, it is necessary to take into account the newly emerging cryptographic analysis methods in recent years. The side-channel attack of the key information poses a serious threat to the security of the cryptographic chip, and the power consumption analysis attack is the most threatening and effective attack method, especially for the implementation of encryption algorithms in hardware encryption devices such as security chips, because Power Consumption Is the Main Bypass Leakage During Cryptographic Device Encryption

Images