Elliptic Curve Scalar Multiplication With Dummy Operations Against SPA
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic methods on elliptic curves are vulnerable to Simple Power Analysis (SPA) attacks, allowing attackers to deduce the encryption key's value through power consumption analysis during cryptographic operations.
Innovation Solution
A cryptographic process that partitions the scalar into groups of equal digits and executes a sequence of operations, including dummy operations, to obscure the power consumption profile, using a cryptographic circuit configured to divide the scalar into groups and perform identical operations with at least one dummy operation per group.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard elliptic curve cryptographic operations are performed, then cryptographic functionality is achieved, but the encryption key becomes vulnerable to SPA attacks
Solution Approach 1:
The patent changes the operational parameters by introducing dummy operations that modify the power consumption characteristics of the cryptographic circuit. These dummy operations alter the electrical parameters (current, voltage, timing) during scalar multiplication, making the power analysis patterns inconsistent and unreadable for attackers while preserving the correct cryptographic computation results.
Solution Approach 2:
The patent introduces an intermediary layer of dummy operations between the actual cryptographic operations and the external observer. These dummy operations act as a mediator that masks the true computational patterns, inserting random-looking power consumption events that prevent direct correlation between observed power traces and the actual key-dependent operations.
2Reliability
If dummy operations are inserted to protect against SPA attacks, then security is improved, but computational complexity increases
Solution Approach 1:
The patent segments the scalar multiplication process into distinct phases: actual computational steps and dummy operations. By dividing the computation into these segments, the patent can apply different operation types (real vs. dummy) in a structured pattern that provides security while maintaining manageable complexity through systematic organization of the operational sequence.
Solution Approach 2:
The patent implements periodic insertion of dummy operations at regular intervals during the scalar multiplication process. This periodic action creates a consistent masking pattern that can be systematically managed and predicted by the cryptographic circuit, reducing the complexity of implementing security compared to completely random operation insertion while still effectively protecting against SPA attacks.
3Difficulty of detecting and measuring
If dummy operations are executed for each group of digits, then power consumption profile becomes consistent, but execution time increases
Solution Approach 1:
The patent applies partial dummy operations by inserting dummy steps only in certain cases rather than always executing complete dummy sequences. Specifically, dummy operations are conditionally inserted based on the scalar digit values, providing sufficient masking to prevent key deduction while avoiding the excessive time overhead of always executing maximum dummy operations, thus achieving a balance between security and performance.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The present description relates to a cryptographic process comprising: the multiplication of a point (P) belonging to a mathematical set having a group structure by a scalar (k) by doing: - the partitioning of a scalar (k) into a plurality of groups composed of the same number w of digits, w being greater than or equal to 2; and - the execution, by a cryptographic circuit and for each group of digits, of a sequence of operations on the point (P), the sequence of operations being identical for each group of digits, at least one of the operations executed for each of the groups of digits being a dummy operation.