Blinded Multiplier Circuit for Power Analysis Attack Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Power analysis attacks, such as Differential Power Analysis (DPA), pose a significant threat to secure computing systems as they allow attackers to extract secret information by monitoring power consumption variations, making it difficult to detect and protect against non-invasive attacks.
Innovation Solution
A multi-word multiplier circuit is designed with a blinding mechanism that modifies input parameters using a blinding parameter, ensuring that power consumption patterns do not reveal secret information, by calculating products in a way that obscures intermediate results and uses a blinding parameter structure that efficiently calculates sub-products without exposing non-blinded values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a blinding mechanism is introduced to protect against power analysis attacks, then security against power analysis attacks is improved, but device complexity increases
Solution Approach 1:
The patent introduces a blinding parameter as an intermediary element that masks the relationship between power consumption and secret data. The blinding parameter is added to the secret data before processing, creating a masked version that consumes power in a way that does not directly reveal the secret. This intermediary layer breaks the direct correlation between power traces and secret information, effectively defending against power analysis attacks while maintaining operational functionality.
Solution Approach 2:
The patent modifies the input parameters by adding a blinding parameter to the secret data, transforming it into a masked representation. This parameter change ensures that the power consumption pattern reflects the blinding parameter rather than the secret data directly. The blinding parameter is carefully chosen and managed to provide security while controlling the impact on device complexity.
2Reliability
If blinding parameters are used to obscure intermediate results, then power analysis attack resistance is improved, but calculation time increases
Solution Approach 1:
The patent performs preliminary actions by pre-processing the blinding parameter and preparing masked versions of data before the main cryptographic operation. The blinding parameter is selected and integrated in advance, and intermediate results are masked during calculation. This preliminary preparation ensures that when the actual computation occurs, the power analysis resistance is already in place, preventing the need for additional post-processing steps that would increase calculation time.
3Reliability
If the blinding parameter includes more bits than the non-blinded parameter, then security margin is improved, but use of energy increases
Solution Approach 1:
The patent changes the parameters of the blinding parameter to optimize the balance between security and energy consumption. By carefully selecting the bit length and structure of the blinding parameter, the patent achieves adequate security margins without unnecessarily increasing the energy burden. The parameter changes ensure that the blinding parameter is sufficiently large to provide security against power analysis attacks while being constrained to reasonable size limits that prevent excessive energy consumption.
Data Source
AI summary
A multi-word multiplier circuit includes an interface and circuitry. The interface is configured to receive a first parameter X including one or more first words, and a second parameter Y′ including multiple second words. The second parameter includes a blinded version of a non-blinded parameter Y that is blinded using a blinding parameter AY so that Y′=Y+AY. The circuitry is configured to calculate a product Z=X·Y by summing multiple sub-products, each of the sub-products is calculated by multiplying a first word of X by a second word of Y′, and subtracting from intermediate temporary sums of the sub-products respective third words of a partial product P=X·BY, BY is a blinding word included in AY.