A cryptographic chip, an electromagnetic injection detection circuit, and an electromagnetic injection detection method

By designing an electromagnetic injection detection circuit on the cryptographic chip, and measuring delay changes using the signal generation module, XOR gate and delay chain module, the problem of untimely and low accuracy of electromagnetic injection detection in the prior art is solved, and the effectiveness of electromagnetic injection detection is improved.

CN115495800BActive Publication Date: 2025-07-04ELECTRIC POWER RES INST CHINA SOUTHERN POWER GRID CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202211274802.2
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-10-18
Publication Date
2025-07-04
Estimated Expiration
2042-10-18

AI Technical Summary

Technical Problem

The electromagnetic injection detection methods of existing cryptographic chips cannot detect electromagnetic injection in time, and the detection accuracy is low.

Method used

An electromagnetic injection detection circuit is designed, including a signal generation module, an exclusive-OR gate, a delay chain module and a determination module. By measuring the delay changes in the signal transmission process, it is determined whether the password chip is attacked by electromagnetic injection.

Benefits of technology

It realizes timely detection of electromagnetic injection, improves the accuracy of electromagnetic injection detection, and ensures the security of the password chip.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115495800B_ABST
    Figure CN115495800B_ABST
Patent Text Reader

Abstract

The present application discloses a cryptographic chip, an electromagnetic injection detection circuit and an electromagnetic injection detection method. The electromagnetic injection detection circuit is assembled on the cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an exclusive OR gate, a delay chain module and a determination module; the signal generation module is used to generate a periodic signal of a preset type; the exclusive OR gate is used to generate a pulse signal based on the periodic signals in the guard trace and the direct connection line signal; the first input end of the delay chain module is connected to the output end of the exclusive OR gate, and the second input end is connected with a clock signal, and is used to latch the output value of the pulse signal transmitted in the delay chain module when the clock signal changes; the determination module is used to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value. The technical problem that the existing electromagnetic injection detection method of the cryptographic chip cannot detect electromagnetic injection in time and has a low detection accuracy is solved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of information security technology, and particularly to a cryptographic chip, an electromagnetic injection detection circuit, and an electromagnetic injection detection method. Background Art

[0002] With the development of information technology, cryptographic chips are widely used in fields such as e-commerce, e-government, communication, and the military. Security is a basic requirement for cryptographic chips, and researchers have proposed many attack techniques to attack cryptographic chips to verify their security.

[0003] Electromagnetic injection attack is one of the most threatening intrusion attack means and is also a research hotspot in the field of chip security at present. Therefore, detecting electromagnetic injection into a cryptographic chip is one of the effective means to prevent attacks. However, in the prior art, when detecting electromagnetic injection into a cryptographic chip, electromagnetic injection cannot be detected in time, and the detection accuracy is relatively low. Summary of the Invention

[0004] In view of this, the present application provides a cryptographic chip, an electromagnetic injection detection circuit, and an electromagnetic injection detection method, which can detect electromagnetic injection in time and improve the accuracy of detecting electromagnetic injection into the cryptographic chip.

[0005] In a first aspect of the present application, an electromagnetic injection detection circuit is provided. The electromagnetic injection detection circuit is assembled on a cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an exclusive OR gate, a delay chain module, and a determination module;

[0006] The signal generation module is configured to generate a periodic signal of a preset type;

[0007] A first input end of the exclusive OR gate is connected to an output end of the signal generation module through a protection trace, and a second input end is connected to the output end of the signal generation module through a direct connection line, and is configured to generate a pulse signal based on the periodic signals in the protection trace and the direct connection line signals;

[0008] A first input end of the delay chain module is connected to an output end of the exclusive OR gate, and a second input end is connected to a clock signal, and is configured to latch an output value of the pulse signal transmitted in the delay chain module when the clock signal changes;

[0009] The determination module is configured to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value.

[0010] Optionally, the determination module includes: a data conversion module and a result determination module;

[0011] The data conversion module is configured to determine a signal delay value of the periodic signal based on the output value;

[0012] The determination module is configured to obtain a detection result on whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value.

[0013] Optionally, the obtaining a detection result on whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value specifically includes:

[0014] Determine whether the signal delay value is greater than a preset delay threshold. If so, determine that electromagnetic injection has occurred in the cryptographic chip; if not, determine that electromagnetic injection has not occurred in the cryptographic chip.

[0015] Optionally, the delay chain module is composed of a plurality of signal delay value devices connected in series;

[0016] The signal delay value device includes: a register and a delay unit, and a first input end of the register in the signal delay value device is connected to an output end of a corresponding delay device;

[0017] A second input end of the register in the signal delay value device is connected to the clock signal.

[0018] Optionally, the periodic signal is a periodic high-level signal.

[0019] A second aspect of the present application provides a cryptographic chip, including: a main control module, an encryption module, and the electromagnetic injection detection circuit according to any one of the first aspects;

[0020] The main control module is configured to control the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit.

[0021] Optionally, the controlling the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit specifically includes:

[0022] When the detection result is that electromagnetic injection has not occurred, control the encryption module to continue the current encryption process;

[0023] When the detection result is that electromagnetic injection has occurred, control the encryption module to stop the current encryption process.

[0024] A third aspect of the present application provides an electromagnetic injection detection method, which is applied to the operation or running of the electromagnetic injection detection circuit according to any one of the first aspects;

[0025] The electromagnetic injection detection method includes:

[0026] The signal generation module generates a periodic signal of a preset type;

[0027] The XOR gate generates a pulse signal based on the periodic signals in the protection trace and the direct connection line signal;

[0028] When the clock signal changes, the delay chain module latches the output value of the pulse signal transmitted in the delay chain module;

[0029] The determination module obtains a detection result of whether the cryptographic chip has been subjected to electromagnetic injection based on the output value.

[0030] Optionally, obtaining the detection result of whether the cryptographic chip has been subjected to electromagnetic injection based on the output value specifically includes:

[0031] Based on the output value, determine the signal delay value of the periodic signal;

[0032] Based on the signal delay value, obtain a detection result of whether the cryptographic chip has been subjected to electromagnetic injection.

[0033] Optionally, obtaining the detection result of whether the cryptographic chip has been subjected to electromagnetic injection based on the signal delay value specifically includes:

[0034] Judge whether the signal delay value is greater than a preset delay threshold. If so, it is determined that the cryptographic chip has been subjected to electromagnetic injection. If not, it is determined that the cryptographic chip has not been subjected to electromagnetic injection.

[0035] It can be seen from the above technical solutions that the present application has the following advantages:

[0036] The present application provides an electromagnetic injection detection circuit, which is assembled on a cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an XOR gate, a delay chain module, and a determination module; the signal generation module is used to generate a periodic signal of a preset type; the first input terminal of the XOR gate is connected to the output terminal of the signal generation module through a protection trace, and the second input terminal is connected to the output terminal of the signal generation module through a direct connection line, and is used to generate a pulse signal based on the periodic signals in the protection trace and the direct connection line signal; the first input terminal of the delay chain module is connected to the output terminal of the XOR gate, and the second input terminal is connected to a clock signal, and is used to latch the output value of the pulse signal transmitted in the delay chain module when the clock signal changes; the determination module is used to obtain a detection result of whether the cryptographic chip has been subjected to electromagnetic injection based on the output value.

[0037] In the present application, by measuring the change in delay during the signal transmission process, it is possible to distinguish whether the cryptographic chip has been attacked by electromagnetic injection. During the process of electromagnetic injection into the cryptographic chip, it is possible to detect the attack of electromagnetic injection in a timely manner, solving the technical problems of the existing electromagnetic injection detection method for cryptographic chips, which cannot detect electromagnetic injection in a timely manner and has a low detection accuracy. Description of the Drawings

[0038] To more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.

[0039] Figure 1 It is a schematic structural diagram of an embodiment of an electromagnetic injection detection circuit in an embodiment of the present application;

[0040] Figure 2 It is a schematic structural diagram of a register of an electromagnetic injection detection circuit in an embodiment of the present application;

[0041] Figure 3 It is a schematic diagram of the working process of an electromagnetic injection detection circuit in an embodiment of the present application;

[0042] Figure 4 It is a schematic structural diagram of an embodiment of a cryptographic chip in an embodiment of the present application;

[0043] Figure 5 It is a schematic flowchart of an embodiment of an electromagnetic injection detection method in an embodiment of the present application. Specific Embodiments

[0044] The embodiments of the present application provide a cryptographic chip, an electromagnetic injection detection circuit, and an electromagnetic injection detection method, which solve the technical problems that the existing electromagnetic injection detection method for cryptographic chips cannot detect electromagnetic injection in a timely manner and has a low detection accuracy.

[0045] To enable those skilled in the art to better understand the solution of the present application, the following will clearly and completely describe the technical solutions in the embodiments of the present application with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some embodiments of the present application, rather than all embodiments. Based on the embodiments of the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present application.

[0046] Please refer to Figure 1 , Figure 1 It is a schematic structural diagram of an embodiment of an electromagnetic injection detection circuit in an embodiment of the present application.

[0047] In this embodiment, the electromagnetic injection detection circuit is assembled on the cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an exclusive-OR gate, a delay chain module, and a determination module; the signal generation module is used to generate a periodic signal of a preset type; the first input terminal of the exclusive-OR gate is connected to the output terminal of the signal generation module through a protection trace, and the second input terminal is connected to the output terminal of the signal generation module through a direct connection line, and is used to generate a pulse signal based on the periodic signals in the protection trace and the direct connection line signals; the first input terminal of the delay chain module is connected to the output terminal of the exclusive-OR gate, and the second input terminal is connected to a clock signal, and is used to latch the output value of the pulse signal transmitted in the delay chain module when the clock signal changes; the determination module is used to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value.

[0048] It can be understood that when the protection trace in this embodiment is specifically deployed, it is arranged above the encryption module in the cryptographic chip for testing the injection of electromagnetic signals.

[0049] As Figure 2 shown, in this embodiment, the signal generation module in the electromagnetic injection detection circuit generates a periodic signal of a preset type. Since there is a time delay difference between the protection trace and the direct connection line. When the time delay difference passes through the exclusive-OR gate, a pulse signal will be generated. After the pulse signal passes through the delay chain module, there will be a pulse propagation process. When the clock signal arrives, after sampling, the position of the delay chain module where the pulse signal is located (i.e., the output value) can be obtained, and subsequently, based on this output value, it can be determined whether electromagnetic injection occurs in the cryptographic chip.

[0050] In this embodiment, by measuring the change in time delay during the signal transmission process, it is distinguished whether the cryptographic chip is under an electromagnetic injection attack. During the process of electromagnetic injection into the cryptographic chip, the electromagnetic injection attack can be detected in a timely manner, solving the technical problems that the existing electromagnetic injection detection method for cryptographic chips cannot detect electromagnetic injection in a timely manner and has a low detection accuracy.

[0051] The above is Embodiment 1 of an electromagnetic injection detection circuit provided by an embodiment of the present application. The following is Embodiment 2 of an electromagnetic injection detection circuit provided by an embodiment of the present application.

[0052] Please refer to Figure 1 , Figure 1 which is a schematic structural diagram of an embodiment of an electromagnetic injection detection circuit in an embodiment of the present application.

[0053] In this embodiment, the electromagnetic injection detection circuit is assembled on the cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an exclusive OR gate, a delay chain module, and a determination module; the signal generation module is used to generate a periodic signal of a preset type; the first input end of the exclusive OR gate is connected to the output end of the signal generation module through a protection trace, and the second input end is connected to the output end of the signal generation module through a direct connection line, and is used to generate a pulse signal based on the periodic signals in the protection trace and the direct connection line signals; the first input end of the delay chain module is connected to the output end of the exclusive OR gate, and the second input end is connected to a clock signal, and is used to latch the output value of the pulse signal transmitted in the delay chain module when the clock signal changes; the determination module is used to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value.

[0054] When electromagnetic injection occurs, the rising and falling edges of the pulse signal will jitter, thereby causing a delay or advance in the transmission of the pulse signal. Whether electromagnetic injection has occurred can be evaluated by detecting the delay of the pulse signal.

[0055] Traditionally, clock counting is used to measure the transmission delay of a signal, and its measurement accuracy is the clock period. Limited by the operating frequency, the clock period is usually large. To measure the time delay change within 25 ps, a clock frequency of 1 / 25 ps = 40 GHz is required. For a cryptographic chip, this clock frequency cannot be achieved.

[0056] Optionally, in one embodiment, the determination module includes: a data conversion module and a result determination module; the data conversion module is used to determine the signal delay value of the periodic signal based on the output value; the determination module is used to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value.

[0057] Further, obtaining a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value specifically includes:

[0058] Judge whether the signal delay value is greater than a preset delay threshold. If so, it is determined that electromagnetic injection has occurred in the cryptographic chip. If not, it is determined that electromagnetic injection has not occurred in the cryptographic chip.

[0059] It can be understood that when electromagnetic injection occurs and the pulse signal advances, the signal delay of the pulse signal is negative at this time, and the corresponding preset delay threshold is also negative. When comparing, the value after the negative sign is compared to determine whether electromagnetic injection occurs. For example, for the advance of the pulse signal, its preset delay threshold is -(20), and the signal delay is -(50). At this time, 50 > 20, indicating that electromagnetic injection has occurred in the cryptographic chip.

[0060] Optionally, the delay chain module is composed of a plurality of signal delay value devices connected in series;

[0061] The signal delay value generator includes: a register and a delay unit, and the first input end of the register in the signal delay value generator is connected to the output end of the corresponding delay unit;

[0062] The second input end of the register in the signal delay value generator is connected to the clock signal.

[0063] Further, in order to make the signals for each comparison proportional, a high-level signal is used as the comparison source, that is, the periodic signal is a periodic high-level signal. It can be understood that the periodic signal can also be a periodic low-level signal. Those skilled in the art can set it according to needs.

[0064] Since the delay of a single delay unit is usually small (for example, the delay of a single buffer is within 20 ps), in this embodiment, a delay chain module is used to implement. After the received pulse signal is transmitted to the delay chain module, the pulse signal is transmitted along the delay chain module. Since the transmission of the pulse signal is controlled by the clock, after the next clock signal arrives (assuming that the signal delay is much less than 1 clock cycle, and when it is greater than 1 clock cycle, several clock cycles can be waited more), the register latches the output of the delay unit under the control of the clock. When the latch output of the register to which the pulse signal is transmitted is 1, and the latch output of the signal that has not arrived is 0. Assuming that the delay of each stage of the delay unit is 20 ps, therefore, for each additional 1 output by the register output, the corresponding delay increases by 20 ps, thereby inferring that the delay of the pulse signal on the link increases by 20 ps and there is signal interference outside. By setting the threshold for the delay or advance of the pulse signal, when the time change is greater than the determination threshold, an electromagnetic injection warning is given.

[0065] Please refer to Figure 3 , Figure 3 which is a schematic diagram of the working process of the electromagnetic injection detection circuit in the embodiment of the present application.

[0066] As Figure 3 shown, in this embodiment, the working process of the electromagnetic injection detection circuit is (taking a periodic high-level signal as an example):

[0067] 1. Under the control of the clock, the control signal generates an enable E1 signal, and the signal generation module generates a high-level signal;

[0068] 2. The high pulse is transmitted to the protection trace and is XORed with the direct signal to generate a pulse signal;

[0069] 3. The pulse signal is transmitted along the delay link in the direction of Delay1----DelayN;

[0070] 4. When the rising edge of the clock arrives, the register group Reg1---RegN latches the output values of the delay units Delay1----DelayN;

[0071] 5. Through the data conversion module, the position information and quantity of the internal output of the register bank being 1 (i.e., high level) are counted. Since the delay of each delay unit Delay is fixed (marked as T), the total delay of the pulse signal is NT + T ini , where T ini is the delay part at the front end of the delay chain;

[0072] 6. Based on the total delay of NT + T ini , it is determined whether electromagnetic injection has occurred, and a warning signal is issued when electromagnetic injection occurs.

[0073] In this embodiment, the signal generation module in the electromagnetic injection detection circuit generates a periodic signal of a preset type. Since there is a time delay difference between the protection trace and the direct connection line. When the delay difference passes through the exclusive OR gate, a pulse signal will be generated. After the pulse signal passes through the delay chain module, there will be a pulse propagation process. When the clock signal arrives, after sampling, the position of the delay chain module where the pulse signal is located (i.e., the output value) can be obtained. Subsequently, based on this output value, it can be determined whether the cryptographic chip has undergone electromagnetic injection. That is, by measuring the change in delay during the signal transmission process, it is distinguished whether the cryptographic chip is under attack of electromagnetic injection. During the process of electromagnetic injection into the cryptographic chip, the attack of electromagnetic injection can be detected in a timely manner, solving the technical problems that the existing electromagnetic injection detection method for cryptographic chips cannot detect electromagnetic injection in a timely manner and the detection accuracy is relatively low.

[0074] The above is the second embodiment of an electromagnetic injection detection circuit provided by the present application. The following is an embodiment of a cryptographic chip provided by the present application.

[0075] Please refer to Figure 4 , Figure 4 , which is a schematic structural diagram of an embodiment of a cryptographic chip in the present application.

[0076] The cryptographic chip in this embodiment includes: a main control module, an encryption module, and the electromagnetic injection detection circuit as described in the foregoing embodiment;

[0077] The main control module is used to control the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit.

[0078] Optionally, in one implementation manner, controlling the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit specifically includes:

[0079] When the detection result is that no electromagnetic injection has occurred, control the encryption module to continue the current encryption process;

[0080] When the detection result is that electromagnetic injection has occurred, control the encryption module to stop the current encryption process.

[0081] It can be understood that in other embodiments, when the detection result indicates an electromagnetic injection, the control module can also control the encryption module to output specific key characters, etc., to avoid the leakage of the key.

[0082] In this embodiment, by measuring the change in delay during the signal transmission process, it is determined whether the cryptographic chip is under an electromagnetic injection attack. During the process of electromagnetic injection into the cryptographic chip, the electromagnetic injection attack can be detected in a timely manner, solving the technical problems of the existing electromagnetic injection detection method for cryptographic chips, which cannot detect electromagnetic injection in a timely manner and has a low detection accuracy.

[0083] The above is an embodiment of a cryptographic chip provided by an embodiment of the present application. The following is an embodiment of an electromagnetic injection detection method provided by an embodiment of the present application.

[0084] Please refer to Figure 5 , Figure 5 , which is a schematic flowchart of an embodiment of an electromagnetic injection detection method in an embodiment of the present application.

[0085] The electromagnetic injection detection method in this embodiment is applied to the operation or running of the electromagnetic injection detection circuit as described in the foregoing embodiment. The electromagnetic injection detection method includes:

[0086] Step 501: The signal generation module generates a periodic signal of a preset type.

[0087] Step 502: Analyze the encrypted clock signal corresponding to the first power consumption data to obtain multiple stages during the encryption process of the cryptographic chip.

[0088] Step 503: The exclusive-OR gate generates a pulse signal based on the periodic signals in the guard trace and the direct connection line signal.

[0089] Step 504: When the clock signal changes, the delay chain module latches the output value of the pulse signal transmitted in the delay chain module.

[0090] Step 505: The determination module obtains a detection result on whether the cryptographic chip has undergone electromagnetic injection based on the output value.

[0091] Further, obtaining a detection result on whether the cryptographic chip has undergone electromagnetic injection based on the output value specifically includes:

[0092] Based on the output value, determine the signal delay value of the periodic signal;

[0093] Based on the signal delay value, obtain a detection result on whether the cryptographic chip has undergone electromagnetic injection.

[0094] Optionally, obtaining a detection result on whether the cryptographic chip has undergone electromagnetic injection based on the signal delay value specifically includes:

[0095] Determine whether the signal delay value is greater than a preset delay threshold. If so, it is determined that the cryptographic chip has been subjected to electromagnetic injection. If not, it is determined that the cryptographic chip has not been subjected to electromagnetic injection.

[0096] In this embodiment, by measuring the change in delay during signal transmission, it is possible to distinguish whether the cryptographic chip is under attack of electromagnetic injection. During the process of electromagnetic injection into the cryptographic chip, the attack of electromagnetic injection can be detected in a timely manner, solving the technical problems of the existing electromagnetic injection detection method for cryptographic chips, which cannot detect electromagnetic injection in a timely manner and has a low detection accuracy.

[0097] Those skilled in the art can clearly understand that for the convenience and simplicity of description, the working process of the method described above can refer to the corresponding process in the foregoing device embodiment, and will not be repeated here.

[0098] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another power grid network to be installed, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections to each other can be through some interfaces. The indirect couplings or communication connections of devices or units can be in electrical, mechanical or other forms.

[0099] The units described as separate components may or may not be physically separated. The components shown as units may or may not be physical units, that is, they can be located in one place, or they can be distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0100] In addition, the functional units in each embodiment of the present application can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or in the form of software functional units.

[0101] When the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of this application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM, Read-Only Memory), random access memories (RAM, Random Access Memory), magnetic disks, or optical discs.

[0102] As described above, the above embodiments are only used to illustrate the technical solutions of this application, rather than to limit them; although this application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or perform equivalent replacements on some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of various embodiments of this application.

Claims

1. An electromagnetic injection detection circuit, characterized in that, The electromagnetic injection detection circuit is assembled on the cryptographic chip, and the electromagnetic injection detection circuit includes: a signal generation module, an exclusive-OR gate, a delay chain module, and a determination module; The signal generation module is configured to generate a periodic signal of a preset type; A first input terminal of the exclusive-OR gate is connected to an output terminal of the signal generation module through a protection trace, and a second input terminal is connected to the output terminal of the signal generation module through a direct connection line, and is configured to generate a pulse signal based on the periodic signals in the protection trace and the direct connection line signals; A first input terminal of the delay chain module is connected to an output terminal of the exclusive-OR gate, and a second input terminal is connected to a clock signal, and is configured to latch an output value of the pulse signal transmitted in the delay chain module when the clock signal changes; The determination module is configured to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value; The determination module includes: a data conversion module and a result determination module; The data conversion module is configured to determine a signal delay value of the periodic signal based on the output value; The result determination module is configured to obtain a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value; The delay chain module is composed of a plurality of signal delay value devices connected in series; The signal delay value device includes: a register and a delay unit, and a first input terminal of the register in the signal delay value device is connected to an output terminal of the corresponding delay device; A second input terminal of the register in the signal delay value device is connected to the clock signal.

2. The electromagnetic injection detection circuit according to claim 1, wherein The obtaining the detection result of whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value specifically includes: Judging whether the signal delay value is greater than a preset delay threshold. If so, it is determined that electromagnetic injection has occurred in the cryptographic chip. If not, it is determined that electromagnetic injection has not occurred in the cryptographic chip.

3. The electromagnetic injection detection circuit according to claim 1, wherein The periodic signal is a periodic high-level signal.

4. A cryptographic chip, characterized in that, Including: A main control module, an encryption module, and the electromagnetic injection detection circuit according to any one of claims 1 to 3; The main control module is configured to control the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit.

5. The cryptographic chip according to claim 4, wherein The controlling the encryption module to perform corresponding operations according to the detection result output by the electromagnetic injection detection circuit specifically includes: When the detection result is that no electromagnetic injection occurs, controlling the encryption module to continue the current encryption process; When the detection result is that electromagnetic injection occurs, controlling the encryption module to stop the current encryption process.

6. An electromagnetic injection detection method, characterized in that, Applied to the operation or running of the electromagnetic injection detection circuit according to any one of claims 1 to 3; The electromagnetic injection detection method includes: The signal generation module generates a periodic signal of a preset type; The exclusive-OR gate generates a pulse signal based on the periodic signals in the protection trace and the direct connection line signals; When the clock signal changes, the delay chain module latches an output value of the pulse signal transmitted in the delay chain module; The determination module obtains a detection result of whether electromagnetic injection occurs in the cryptographic chip based on the output value.

7. The electromagnetic injection detection method according to claim 6, characterized in that Based on the output value, obtaining a detection result on whether electromagnetic injection occurs in the cryptographic chip, specifically including: Based on the output value, determining a signal delay value of the periodic signal; Based on the signal delay value, obtaining a detection result on whether electromagnetic injection occurs in the cryptographic chip.

8. The electromagnetic injection detection method according to claim 7, characterized in that The obtaining a detection result on whether electromagnetic injection occurs in the cryptographic chip based on the signal delay value specifically includes: Judging whether the signal delay value is greater than a preset delay threshold. If so, it is determined that electromagnetic injection has occurred in the cryptographic chip; if not, it is determined that electromagnetic injection has not occurred in the cryptographic chip.

Citation Information

Patent Citations

  • Detection method and detector applied to integrated circuit for detecting electromagnetic fault injection attack

    CN105391542A

  • Safety detection method and device for cipher chip

    CN108173645A