Secure Elliptic Curve Cryptosystem Scalar Operation Masking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Elliptic Curve Cryptosystems (ECCs) are vulnerable to side-channel attacks, such as simple power analysis and fault injection, which can reveal secret information through observable characteristics like power consumption and timing patterns, compromising system security.
Innovation Solution
Implementing countermeasures like the scalar double-and-add algorithm with dummy operations, initializing to a non-neutral point, and using balanced loop configurations to perform elliptical point additions and subtractions, which make operations indistinguishable and reduce detectability, along with evaluating the LSB within a loop to prevent information leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard ECC algorithms are implemented with fixed logic circuits, then encryption operations can be performed efficiently, but side-channel attacks can reveal secret information through power consumption and timing patterns
Solution Approach 1:
The patent changes the operational parameters of the ECC circuit by dynamically selecting between different elliptic curve operations (point addition, point doubling, mixed addition) based on the secret key bits. This parameter variation causes the circuit to consume different amounts of power for different operations, creating a power consumption pattern that reflects the secret key. The invention then applies countermeasures by introducing dummy operations and randomizing the operation sequence to mask these parameter variations from side-channel analysis.
Solution Approach 2:
The patent introduces an intermediary layer between the secret key and the physical implementation by using a random number generator and control logic that mediates the relationship between secret key bits and circuit operations. This intermediary randomizes the operation sequence and introduces dummy operations, preventing direct correlation between power consumption patterns and secret key values, thereby blocking the side-channel attack path.
2Reliability
If dummy operations are added to mask power consumption patterns, then resistance to side-channel attacks improves, but computational overhead and processing time increase
Solution Approach 1:
The patent applies partial dummy operations rather than complete masking for all operations. The control logic selectively introduces dummy operations based on random key bits, performing dummy operations only when the random bit indicates so, rather than always performing dummy operations. This partial approach provides sufficient security masking while minimizing unnecessary computational overhead and processing time.
Solution Approach 2:
The patent implements periodic dummy operations interspersed with real operations in a randomized sequence. Rather than continuous dummy operations, the system periodically introduces dummy operations at random intervals, creating a rhythm that masks the actual secret operations while maintaining reasonable processing throughput. This periodic approach balances security requirements with performance constraints.
Data Source
AI summary
Various embodiments of the invention implement countermeasures designed to withstand attacks by potential intruders who seek partial or full retrieval of elliptic curve secrets by using Various embodiments of the invention implement countermeasures designed to withstand attacks by potential intruders who seek partial or full retrieval of elliptic curve secrets by using known methods that exploit system vulnerabilities, including elliptic operation differentiation, dummy operation detection, lattice attacks, and first real operation detection. Various embodiments of the invention provide resistance against side-channel attacks, such as simple power analysis, caused by the detectability of scalar values from information leaked during regular operation flow that would otherwise compromise system security. In certain embodiments, system immunity is maintained by performing elliptic scalar operations that use secret-independent operation flow in a secure Elliptic Curve Cryptosystem.