Hardware security system for preventing side channel attacks based on variable radix

Abstract

The present invention discloses a hardware security system for prevent side channel attacks based on a variable radix. The system comprises a security chip and a key computation unit. The security chip generates a digital fingerprint using a PUF array as the root of the key, which is processed by a stabilization module, while unstable cells serve as a true random number entropy source. An encryption module is managed by a top-level controller to support encryption and decryption operations. The key computation unit includes a variable radix processor, an operation sequence module, an insertion module, and an elliptic curve module. The private key is decomposed by the variable radix processor into symbol-radix pairs and converted into a variable-base system. The operation sequence module translates the result into high-order-first elliptic curve instructions and optimizes the computation using the distributive property. The insertion module inserts dummy operations to balance computation time and resist timing analysis attacks. The elliptic curve module executes point multiplication and point addition operations according to the instructions.

Images