Cryptographic Processing Device Inverse Algorithm Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic processing methods are vulnerable to attacks that reveal cryptographic secrets, particularly when fixed cryptographic algorithms are implemented in dedicated electronic circuits, and there is a need for effective protection against such attacks.
Innovation Solution
A method and device for cryptographic processing that involves applying a cryptographic algorithm and its inverse multiple times to data, with verification steps to ensure equality and detect errors, while hiding the effective implementation within fake executions, using a processor and cryptoprocessor to manage the algorithms and store initial values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If cryptographic algorithms are implemented in dedicated electronic circuits with fixed design, then processing speed and efficiency are improved, but vulnerability to attacks that reveal cryptographic secrets increases
Solution Approach 1:
The patent applies preliminary verification by executing inverse cryptographic algorithms before final output. The system performs a predetermined number of inverse algorithm executions on intermediate results to verify correctness beforehand, ensuring that any attacks or errors are detected before the cryptographic secrets are revealed or compromised.
Solution Approach 2:
The patent implements feedback mechanisms where the results of inverse algorithm executions are fed back to verify the correctness of forward algorithm executions. The system compares intermediate results from forward and inverse operations, and uses this feedback to detect attacks or errors, thereby protecting the cryptographic secrets even in dedicated circuits.
2Reliability
If multiple verification steps are added to detect attacks and errors, then security and reliability are improved, but processing time and complexity increase
Solution Approach 1:
The patent applies periodic verification by executing inverse algorithms at predetermined intervals during the cryptographic processing. Instead of continuous verification, the system performs checks at specific periodic points (after processing predetermined numbers of blocks), which maintains security while reducing overall processing time compared to continuous verification.
Solution Approach 2:
The patent applies partial verification by selectively verifying only certain intermediate results using inverse algorithms, rather than verifying every single operation. The system verifies a predetermined number of intermediate results, which provides sufficient security assurance while minimizing the time overhead compared to exhaustive verification of all operations.
Data Source
AI summary
A method for cryptographic processing includes: storing an initial value as the current value; implementing a predetermined number of first steps, including one involving obtaining second data by applying a first cryptographic algorithm to first data, the others each involving the application of the first cryptographic algorithm to the current value and the storage of the result as the new current value; implementation of the predetermined number of second steps, including one involving the obtaining of fourth data by applying, to third data, a second cryptographic algorithm that is the inverse of the first cryptographic algorithm, the others each involving the application of the second cryptographic algorithm to the current value and the storage of the result as the new current value; and verification of the equality of the first data and the fourth data, and of the equality of the current value and the initial value.