Elliptic Curve Scalar Multiplication Decoy Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in mitigating information leakage during elliptic curve operations, particularly in Elliptic Curve Digital Signature Algorithm (ECDSA) and Elliptic Curve Integrated Encryption Scheme (ECIES) operations, which can reveal sensitive information about nonces and private keys, making them vulnerable to side-channel attacks.
Innovation Solution
The implementation of multiple elliptic curve scalar multiplication (ECSM) operations in a random order, combined with the use of decoy signatures and leaked information from decoy nonces, obscures the determination of true nonces and private keys, thereby mitigating information leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple ECSM operations are performed in random order with decoy signatures, then information leakage is mitigated and security is enhanced, but device complexity and computational overhead increase
Solution Approach 1:
The signing operation is segmented into multiple ECSM operations (true operation and decoy operations) that are executed separately and then combined. Each operation processes a portion of the computation, with decoy operations serving to obscure the true operation's characteristics from side-channel attacks.
Solution Approach 2:
Decoy signatures and decoy nonces act as intermediaries that introduce false information into the side-channel leakage. These intermediaries mask the true nonce and private key information by creating additional leakage sources that confuse analytical attacks.
2Reliability
If multiple ECSM operations are performed in random order with decoy signatures, then information leakage is mitigated and security is enhanced, but processing time increases
Solution Approach 1:
Decoy operations are performed in advance alongside the true operation, preparing false leakage information before any analysis can occur. This preliminary action ensures that when side-channel analysis is attempted, the adversary is already presented with multiple indistinguishable operation traces.
Solution Approach 2:
The system performs periodic decoy operations interspersed with true operations in a random sequence. This periodic execution pattern creates consistent masking effects across multiple signing operations, making temporal analysis attacks significantly more difficult.
3Reliability
If decoy signatures and leaked information from decoy nonces are used, then the adversary's ability to determine private keys is complicated, but loss of information increases due to multiple equations
Solution Approach 1:
The leakage information that would normally help adversaries is converted into a benefit for security by using decoy nonces to generate false leakage. The harmful side-channel information is transformed into useful masking data that actively protects the true private key information.
Solution Approach 2:
Instead of trying to prevent information leakage, the system inverts the approach by intentionally generating additional leakage through decoy operations. This inversion turns the vulnerability of side-channel attacks into a protective mechanism where the leakage itself becomes the defense.
Data Source
AI summary
Various techniques are provided to implement information leakage mitigation associated with elliptic curve operations. In one example, a method includes generating second data based on first data. The first data is associated with a message. The second data is associated with a decoy message. The method further includes performing a first elliptic curve operation based on the first data. The method further includes performing a second elliptic curve operation based on the second data. The first elliptic curve operation and the second elliptic curve operation are performed in a random order. Related systems and devices are provided.