Edwards Curve Blinding Protocol for DSCA Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional approaches to counter differential side-channel attacks (DSCA) in elliptic curve cryptography (ECC) are not sufficiently optimized, leading to performance detriments in cryptographic systems.
Innovation Solution
Implementing a blinding protocol that randomly selects a random element to multiply the coordinates of a point on an Edwards curve, converting between affine and projective coordinates to optimize scalar multiplication operations, and applying blinding techniques in various coordinate representations to disguise scalar multiplication, thereby resisting DSCA.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional DSCA countermeasures are implemented in ECC, then security against differential side-channel attacks is improved, but computational performance deteriorates
Solution Approach 1:
The patent changes the parameter representation by converting between affine and projective coordinates dynamically during scalar multiplication. This parameter transformation allows the system to maintain security against DSCA while optimizing computational performance by selecting the most efficient coordinate system for each operation step.
Solution Approach 2:
The patent implements dynamic switching between different coordinate representations (affine and projective) based on the operation being performed. This dynamic adaptation allows the system to balance security requirements with computational efficiency, avoiding the performance penalty of static countermeasures.
2Reliability
If blinding protocols are applied to resist DSCA, then attack resistance is improved, but computational overhead increases
Solution Approach 1:
The patent introduces projective coordinates as an intermediary representation that facilitates secure computation without requiring expensive blinding operations. By working in projective coordinates, the system achieves DSCA resistance through natural mathematical properties rather than additional computational overhead from traditional blinding protocols.
Solution Approach 2:
The patent transforms the computational parameters by using projective coordinates instead of affine coordinates, which eliminates the need for costly field inversions and reduces the overhead of blinding protocols while maintaining security guarantees against differential side-channel attacks.
3Productivity
If scalar multiplication is optimized for performance, then computational speed is improved, but vulnerability to DSCA increases
Solution Approach 1:
The patent changes the coordinate parameter representation to projective coordinates, which enables faster scalar multiplication by eliminating field inversions while simultaneously providing inherent resistance to DSCA through the uniform structure of projective coordinate operations.
Solution Approach 2:
The patent dynamically selects between affine and projective coordinate representations based on the specific computational context, achieving both high performance and DSCA resistance by adapting the parameter representation to match the operation requirements.
Data Source
AI summary
A system, method and elliptic curve cryptography scheme using an Edwards-form elliptic curve. The elliptic curve cryptography scheme having a blinding protocol resistant to differential side channel attacks. The elliptic curve defined over field F and having a point P with coordinates located on the elliptic curve. The blinding protocol including: randomly selecting a random element I; and determining coordinates of a blinded point PB by performing a multiplication of a random element I by at least one of the coordinates of point P.