Elliptic Curve Cryptosystem Side-Channel Attack Countermeasures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Elliptic Curve Cryptosystems (ECC) are vulnerable to side-channel attacks such as power attacks and fault injection attacks, which compromise security and performance, and existing countermeasures either fail to address simultaneous attacks effectively or lead to system performance deterioration.
Innovation Solution
Extending the definition field of an elliptic curve to a random extension ring and performing operations within this ring, including point validation checks in a small subring, to counter side-channel attacks, power attacks, and fault injection attacks while maintaining system performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing countermeasures are applied to protect ECC against side-channel attacks, then security is improved, but system performance deteriorates
Solution Approach 1:
The patent changes the parameter of the cryptographic operation by extending the definition field from a prime field Fp to an extension ring Zpr. This parameter change allows the system to maintain security against side-channel attacks while preserving performance, as the extension ring structure enables efficient computation of point validation checks in a small subring rather than the full large field.
2Reliability
If existing countermeasures are applied to protect ECC against power attacks and fault injection attacks, then security is improved, but the ability to counter simultaneous attacks deteriorates
Solution Approach 1:
The patent applies a universal countermeasure in the extension ring Zpr that simultaneously protects against multiple attack types including power attacks, fault injection attacks, and sign change fault attacks. The point validation check mechanism in the small subring provides multi-functional security coverage, making the system adaptable to various simultaneous attack scenarios without requiring separate countermeasures for each attack type.
Data Source
AI summary
A method of countering side-channel attacks on an elliptic curve cryptosystem (ECC) is provided. The method comprises extending a definition field of an elliptic curve of the ECC to an extension ring in a first field; generating a temporary ciphertext in the extension ring and countering attacks on the ECC; and generating a final ciphertext for the first field if a fault injection attack on the ECC is not detected. The countering of attacks on the ECC may comprise countering a power attack on the ECC. Checking if there is a fault injection attack on the ECC may be performed by determining if the temporary ciphertext satisfies a second elliptic curve equation. The fault detection algorithms takes place in a small subring of the extension ring, not in the original field, to minimize the computational overhead. The method can improve the stability of the ECC and reduce computational overhead of the ECC.