Encryption Device Virtual Operation Side Channel Attack Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption devices are vulnerable to side channel attacks, particularly due to predictable power and electromagnetic wave patterns that can reveal security information, necessitating a method to randomly propagate these signals to enhance security.
Innovation Solution
The encryption device performs a virtual operation and a real operation, with each operation consisting of rounds that include both real and virtual sub-round operations, where the decision to perform a real or virtual sub-round operation is based on a random value, thereby confusing attackers and enhancing defense against side channel attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the encryption device performs real operations immediately in response to request signals, then the processing speed is improved, but the device becomes vulnerable to side channel attacks due to predictable power and electromagnetic wave patterns
Solution Approach 1:
The encryption device performs virtual operations before executing real operations. When a real operation request is received, the device first completes any ongoing virtual operations, then executes the real operation. This preliminary execution of virtual operations creates unpredictable power consumption patterns that mask the real operations from side channel analysis while maintaining efficient processing.
Solution Approach 2:
The device performs virtual operations that copy the structure of real operations but use dummy data and keys instead. These virtual operations mimic the power consumption patterns of real operations, creating a camouflage effect that prevents attackers from distinguishing real operations through side channel analysis while maintaining the functional integrity of the encryption process.
2Reliability
If the encryption device performs virtual operations before real operations, then the defense against side channel attacks is improved, but the processing time is increased
Solution Approach 1:
The device performs virtual operations only when necessary, such as when real operations are requested during ongoing virtual operations. The system uses a counter to track the number of virtual operations performed and only executes real operations when the counter indicates it's safe to do so. This partial execution approach provides security without unnecessarily delaying all processing.
Solution Approach 2:
The encryption device dynamically adjusts its operation sequence based on real-time conditions. When a real operation request is received, the device checks whether virtual operations are currently ongoing and dynamically decides whether to complete those virtual operations first. This dynamic adaptation allows the system to provide security when needed while maintaining speed when virtual operations are not required.
Data Source
AI summary
An encryption device for performing virtual and real operations and a method of operating the encryption device. The method includes performing a virtual operation; when a real operation request signal is received, determining whether the virtual operation being performed is completed; and in response to the virtual operation being completed, performing a real operation in response to the real operation request signal.