36 results about "Modular inversion" patented technology

The present invention discloses a cipher algorithm anti-power consumption analysis realization method and device. The method comprises the steps of mapping the modular inversion in a SM4 cipher algorithm into a corresponding lookup table, and saving; adding the preset anti-power consumption analysis logic in an S box of the SM4 cipher algorithm, adding the preset calculation logic in a round function of the SM4 cipher algorithm, and encrypting data according to the lookup table. According to the present invention, the safety problem in the prior art that the SM4 cipher algorithm can be carried out the power consumption analysis easily is solved, the operation efficiency of the finite field modular inversion in the SM4 cipher algorithm is improved, at the same time, the safety of the SM4 cipher algorithm is improved.

The invention discloses an implementation method for efficiently resisting differential power analysis of RSA and provides an implementation instance of an RSA CRT implementation method adopting the method. According to the scheme, complex modular inversion in a traditional blind scheme is avoided, and the modular inversion is replaced by modular multiplication which is easy to achieve, the RSA operation efficiency can be greatly improved on the premise that the safety is not influenced, and the time and the space for RSA implementation are saved.

The invention provides an elliptic curve digital signature hardware implementation method and system based on high-performance modular inversion, and realizes a complete elliptic curve digital signature hardware scheme. The system comprises three parts: a signature verification control module, a scalar multiplication module and a bottom modular operation controller. According to the method, the Euclidean algorithm is improved and expanded to conform to the characteristics of hardware circuit operation, the cost of subtraction and large number comparison in hardware is avoided, multiple odd-even shift judgment in Montgomery modular inversion is not needed, and the method has the characteristics of high performance and low hardware cost. According to the method, point addition, point doubling, modular multiplication operation, modular addition operation, modular subtraction operation, modular inversion operation and other underlying operations are integrated to be called by a higher-layer module, and the improved modular inversion algorithm in the method is combined, so that underlying resource sharing of the whole system is realized, the calculation efficiency is improved, and a high-performance elliptic curved surface digital signature and signature verification system is realized under relatively low hardware overhead.

Values X and N of n bits and a parameter t are input, then Y=X2−t mod N is calculated, then an extended binary GCD algorithm is executed for Y to obtain S=y−12k mod N and k, and R=S2−(k+t=2n) is calculated for S, thereby obtaining a Montgomery inverse R=X−122n mod N of X on a residue class ring Z / NZ.

The invention relates to a method and device for defending a side channel attack, and a readable storage medium. The method, when adding a mask to modular inversion operation, comprises the followingsteps: obtaining a base number a, a modulus p and a random number r2 participating in modular inverse operation; calculating an intermediate variable e related to the modulus p according to e = p-2; performing mask multiplication processing of the random number r2 on the base number a to obtain an updated base number a; respectively constructing the power b = aemodp with a mask and the power c = r2emodp with a mask, and calculating the values of b and c; and outputting an operation result s according to s = b * cmodp. By implementing the technical scheme of the invention, simple power consumption attacks and differential power consumption attacks can be resisted.

The invention relates to a realization method and system of a signature verification algorithm based on an SM2 elliptic curve. The system, under control of an SM2 control module, realizes generation and verification of digital signatures by communicating with a signature generation control module and a signature verification control module, and calling a random number generation module, a password hash module, a point multiplication operation module, a point addition operation module, a modulo addition operation module, a modulo subtraction operation module, a modular multiplication operation module and a modular inversion operation module. In the digital signature generation and verification process, point multiplication operation adopts an improved partly use 1's complement subtraction form point multiplication algorithm (PCS algorithm); and in the signature generation process, modular multiplication operation adopts an improved Blakley modular multiplication algorithm, and modular inversion operation and modular multiplication operation are carried out simultaneously through a parallel operation method, thereby greatly improving operation speed and reducing operation time.

The invention provides a modular inverse operation method and an arithmetic device. The modular inversion operation method and the arithmetic device are used for calculating Z=Y<-1>mod X, wherein Z is a result of a modular inverse operation, X is a first operand and Y is a second operand. The modular inverse operation method comprises the following steps of calculating and acquiring a binary bit length Xlen of the first operand X and a binary bit length Ylen of the second operand Y; initializing a first variable R and a second variable S; when Xlen is greater than and equal to Ylen, calculating X <-1>modY; and when Xlen is smaller than and equal to Ylen, calculating Y <-1>modX. When the updated X is equal to 0 and the updated Y is equal to 1, a result of the modular inverse operation is the updated second variable S; when the updated X is equal to 1 and the updated Y is equal to 0, a result of the modular inverse operation is a difference between an X initial value and the updated first variable R; and when one of the updated X and the updated Y is equal to 0 and the other of the updated X and the updated Y is not equal to 1, a result of the modular inverse operation does not exist. By using the method and the arithmetic device, the modular inverse operation, in which the module is any non-zero integer can be realized, the calculation efficiency of the modular inverse operation is improved and the power consumption of hardware is reduced.

The invention discloses a hardware realization method of dual-field modular inversion, and relates to the technical field of the information security. The method comprises the following steps: constructing a modular inversion control state machine, modular addition, modular subtraction and shift operation units of two finite fields, and the modular addition, modular subtraction and shift operationunits of two finite fields are called through the modular inversion control state, and the hardware realizes the dual-field modular inversion operation of two finite fields of a prime field and a binary field. Through the method provided by the embodiment of the invention, the algorithm structures of two different finite fields can be integrated at the same time, the operation resource is efficient and reusable, the hardware resource is greatly saved, the operation speed is improved, and a hardware area is optimized.

In methods for determining, in a way that is protected against spying, the modular inverse b of a value a in relation to a module n for a cryptographic application, an auxiliary value β and an auxiliary module δ are determined at least depending on the value a, the module n and at least one masking parameter r, an auxiliary inverse β′ is determined as the modular inverse of the auxiliary value β in relation to the auxiliary module δ, and the modular inverse b is determined at least depending on the auxiliary inverse β′, the at least one masking parameter r, and the auxiliary value β and / or the auxiliary module δ. A computer program product and a portable data carrier have corresponding features. The invention provides a method for modular inversion, secured against spying, which is suitable for applications where security is critical, such as, e.g. cryptographic calculations on a portable data carrier.

The invention discloses a digital image encryption method based on modular inversion operation. The method comprises the following steps: giving an original image A, wherein the pixel point located atthe ith row and the jth column in the A are expressed as pi, j, all the pixel points with the value of i + j being an odd number are classified into a first type, and all the pixel points with the value of i + j being an even number are classified into a second type; performing modular inversion operation on all the pixel points of the first type or the second type, and replacing the original pixel value with the obtained modular inversion value to obtain an encrypted image A'; performing modular inversion operation on the pixel points obtained by performing modular inversion operation on thepixel points of the first type or the second type in the A according to the claim 1 in the A'; and replacing the original pixel value with the obtained modular inversion value to recover the originalimage A. The method for classifying the pixel points of the image is simple and easy to implement, the encryption operation of the pixel points is simple, extra information is not needed in the wholeencryption and recovery process, the image information transmission efficiency is high, and errors of individual pixel points cannot cause the diffusion phenomenon of errors.

The invention relates to a method and device for defending a side channel attack, and a readable storage medium. The method, when adding a mask to modular inversion operation, comprises the followingsteps: obtaining a base number a, a modulus p and a random number r2 participating in modular inverse operation; calculating an intermediate variable e related to the modulus p according to e = p-2; performing mask multiplication processing of the random number r2 on the base number a to obtain an updated base number a; respectively constructing the power b = aemodp with a mask and the power c = r2emodp with a mask, and calculating the values of b and c; and outputting an operation result s according to s = b * cmodp. By implementing the technical scheme of the invention, simple power consumption attacks and differential power consumption attacks can be resisted.

The invention is applicable to the technical field of computers and communication and provides an element modular inversion calculation method and device. The method comprises the steps that the initial values of temporary variables X1 and X2 and decreasing variables u and v are obtained, wherein the initial values of the temporary variables X1 and X2 are 1 and 0 respectively, and the initial values of the decreasing variables u and v are a and P0 respectively; the temporary variables X1 and X2 and the decreasing variables u and v are subjected to iterative computation, wherein the iteration process meets the equations: a*x1=u(mod P0), a*x2=v(mod P0); after each time of iteration is completed in the iterative computation, whether one of u and v is 1 is judged, if neither u nor v is 1, the iterative computation is continued, and if either u or v is 1, the iterative computation is ended; after the iterative computation is ended, if u is 1, X1 is assigned to X, and if v is 1, X2 is assigned to X; when K=0, whether X is greater than zero or not is judged, and if X is greater than zero, X is the modular inversion related to P. By means of the technical scheme, the element modular inversion calculation method and device have the advantages that the computing speed is high, and the number of required computing resources is small.

The invention provides a low cost digital signature SPOC design method based on RSA and SHA-512. An in-chip MCU uses a soft core NiosII of an ALTERA to perform hardware and software partitioning on the RSA and SHA-512 according to operation characteristics; a software part comprises interaction with off-chip data, RSA modular exponentiation, and SHA-512 data filling; hardware finishes RSA modular multiplication, a modular addition operation, a modular inversion operation and an operation for taking 80 rounds as a subunit in the SHA-512. The low cost digital signature SPOC design method based on RSA and SHA-512 utilizes parallelism of hardware calculation to obtain a high speed operation result, uses flexibility of software to guarantee an attack resisting capability of a system, can support different RSA lengths and calculation modes of different HASH functions. Functionally, the low cost digital signature SPOC design method based on RSA and SHA-512 can be used for digital autographing and identity authentication.