AES Cipher Processor Masking for Power Analysis Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Advanced encryption standard (AES) hardware devices face limitations in implementing longer cipher keys due to memory and processing constraints, and are vulnerable to power analysis attacks, which can reveal original data through analysis of power characteristics.
Innovation Solution
The implementation of a masking method using random data for encryption and decryption operations, specifically performing operations over composite Galois fields, such as GF(28), GF((22)2), and GF(22), to protect against power analysis attacks and reduce hardware requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If masking method is used to protect against power analysis attacks, then security is improved, but device complexity increases
Solution Approach 1:
The masking method segments the original data into multiple shares or components, such that no single component reveals information about the original data. This is achieved by representing data in a decomposed form where each segment alone is meaningless, thereby protecting against power analysis attacks while managing complexity through structured segmentation
Solution Approach 2:
Random data or masking values are introduced as intermediaries between the original data and the processing operations. These intermediaries obscure the relationship between power consumption and original data, preventing attackers from extracting information through power analysis while maintaining the functional integrity of the cipher operations
2Reliability
If longer cipher keys are implemented to increase security, then security is improved, but memory capacity and processing capabilities are exceeded
Solution Approach 1:
The cipher key is segmented into multiple smaller sub-keys or key components that are processed separately through multiple rounds or stages. This segmentation allows the system to achieve the security equivalent of a long key while using only small amounts of memory at any given time, as each segment is handled individually rather than storing the entire long key simultaneously
Solution Approach 2:
The key scheduling and processing is organized into periodic rounds or iterations, where key material is generated and consumed in cycles. This periodic action allows the system to derive security from multiple passes over smaller key components rather than requiring large key storage, effectively distributing the security burden over time and memory resources
Data Source
AI summary
Data cipher processors, advanced encryption standard (AES) cipher system, and AES cipher methods using a masking method perform round operations using a round key, a plain text, a cipher text, and masking data. Some of the round operations are implemented over a composite Galois Field GF(•). Original data and predetermined masking data are processed according to a predetermined rule. Sub-byte transformation operations used in the cipher method and system may include an affine transformation, an inverse affine transformation, an isomorphic transformation, and an inverse isomorphic transformation which are linear transformations, and an inverse transformation that is a non-linear transformation.