A mask operation method and device for SM2 algorithm

Abstract

The invention belongs to the technical field of SM2 encryption algorithm, and in particular relates to a mask operation method and device of SM2 algorithm. The mask operation method is to carry out the random number k in the [k]G operation by means of preset points and random numbers. Covering up, the calculation of [k]G in the SM2 algorithm operation process specifically includes: the preset point P0=[n‑r]G and the first random number r inside the chip; P0 is a point on the finite field elliptic curve, and n is the elliptic curve order, G is the base point on the elliptic curve; generate the second random number d inside the chip, calculate and generate point P1=[d]G; calculate and generate the third random number through the first random number r and the second random number d k=d-r; calculation generation point P2=[k]G=[d-r]G=[d]G-[r]G=[d]G+[n-r]G=P0+P1, the present invention The mask operation device includes a preset module, a random number generation module, a random number operation module, a dot multiplication operation module, and a dot addition operation module; it can enhance the difficulty of deciphering the real parameter information k and power consumption analysis to obtain information, and effectively deal with power consumption analysis attack.

Description

technical field [0001] The invention belongs to the technical field of SM2 encryption algorithm, and in particular relates to a mask operation method and device of the SM2 algorithm with high security, small calculation amount and fast processing speed. Background technique [0002] With the continuous development of cryptography and computing technology, the currently commonly used 1024-bit public key encryption algorithm RSA is facing serious threats. Due to the advantages of SM2 algorithm, such as high security, small amount of calculation, and fast processing speed, our national encryption management department has studied it. It was decided to replace the RSA algorithm with the SM2 elliptic curve cryptographic algorithm. Compared with the RSA algorithm, under the premise of achieving the same security strength, the key length required by the SM2 algorithm is shorter, and the hardware implementation is simpler. [0003] The SM2 cryptographic algorithm is theoretically v...

AI Technical Summary

Problems solved by technology

[0003] The SM2 cryptographic algorithm is theoretically very safe, but in the implementation process, it is necessary to take into account the newly emerging cryptographic analysis methods in recent years. The side-channel attack of the key information poses a serious threat to the security of the cryptographic chip, and the power consumption analysis attack is the most threatening and effective attack method, especially for the implementation of encryption algorithms in hardware encryption devices such as security chips, because Power Consumption Is the Main Bypass Leakage During Cryptographic Device Encryption

Images