Elliptic Curve Blinding Function for Side Channel Attack Mitigation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Elliptic curve cryptographic algorithms are susceptible to side channel attacks, such as timing and power analysis attacks, which can reveal private information by measuring physical parameters during cryptographic operations.

Innovation Solution

Implementing a blinding function that generates random values and applies them to scalar multiplications in elliptic curve cryptographic operations, using different blinding values for each operation to obscure the original values and prevent side channel attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If efficient implementations of cryptographic algorithms are used, then computational efficiency is improved, but side channel attacks become more effective because different amounts of work are performed based on secret bit values

Engineering Contradiction:
Improvecomputational efficiencyVSAvoidside channel attack vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

A blinding function is introduced as an intermediary component between the cryptographic operation and the physical measurement. This blinding function randomizes the execution path by introducing additional random values that mask the relationship between secret bit values and physical measurements, thereby preventing side channel attacks while maintaining computational efficiency

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the parameter space by introducing random blinding values that modify the execution parameters of the cryptographic algorithm. These parameter changes create variability in the execution trace that is independent of the secret values, making it impossible to correlate physical measurements with secret bit values

Inventive Principle:
Principle #35Parameter changes

2Object-affected harmful factors

If blinding functions are applied to randomize scalar multiplications, then side channel attack resistance is improved, but device complexity increases due to additional computational steps

Engineering Contradiction:
Improveside channel attack resistanceVSAvoidcomputational complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The blinding function performs preliminary actions by pre-computing random values and establishing the blinding mechanism before the actual cryptographic operation. This preliminary setup allows the main cryptographic computation to proceed with standardized operations, reducing the overhead of repeated blinding/unblinding cycles during actual crypto operations

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent uses copying by creating a blinded version of the random value rather than modifying the original. The blinding function generates a new random value that is combined with the original through scalar multiplication, creating a copy that carries the security properties while allowing the original to remain unchanged and reusable

Inventive Principle:
Principle #26Copying

Data Source

PatentUS9584320B1Blinding function in elliptic curve cryptography
Publication Date: 2017.02.28 EMC IP HLDG CO LLC
  • US9584320B1 patent drawing
  • US9584320B1 patent drawing
  • US9584320B1 patent drawing

AI summary

A blinding function is generated. The blinding function is applied to a random value to generate a blinded random value. The blinded random value is utilized for one or more scalar multiplications in an elliptic curve cryptographic operation.