Endecryptor SBOX Segmentation for Side Channel Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing endecryptors face challenges in achieving high-speed operations while maintaining a small area and effectively preventing side channel attacks, particularly due to the complexity of implementing SBOXes that randomly present side channel information such as power and electromagnetic waves.
Innovation Solution
The proposed endecryptor incorporates multiple SBOXes with different configurations, including look-up tables and logic operations, to perform high-speed encryption and decryption while adjusting hamming weights and generating dummy bits to obscure side channel information, thereby enhancing security against attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple SBOXes with different configurations are used to prevent side channel attacks, then security against side channel attacks is improved, but device complexity increases
Solution Approach 1:
The endecryptor is divided into multiple SBOXes (first SBOX, second SBOX, third SBOX, fourth SBOX) with different configurations, each performing substitution operations on different portions of the data. This segmentation allows the system to present different side channel information from each SBOX, making it difficult for attackers to correlate power consumption or electromagnetic emissions with specific secret data, thereby enhancing security while distributing the complexity across modular components
Solution Approach 2:
Each SBOX is configured with different substitution tables or transformation rules, creating local variations in how data is processed. The first and second SBOXes operate with one configuration while the third and fourth SBOXes operate with different configurations, ensuring that side channel information leaked from different parts of the device has different characteristics, preventing attackers from using uniform analysis methods
2Reliability
If dummy bits are generated to adjust hamming weight and obscure side channel information, then security against side channel attacks is improved, but power consumption increases
Solution Approach 1:
Dummy bits are introduced as intermediary elements that mediate between the actual data processing and the external observation of side channel information. These dummy bits adjust the hamming weight of intermediate results without revealing information about the secret key or plaintext, obscuring the correlation between power consumption patterns and actual data being processed, thereby protecting against differential power analysis attacks
3Reliability
If multiple substitution operations are performed to enhance security, then security against side channel attacks is improved, but operation speed decreases
Solution Approach 1:
Multiple substitution operations using different SBOXes are merged and executed in parallel or in a tightly integrated sequence within the same encryption/decryption round. The first and second SBOX operations are combined with third and fourth SBOX operations such that the security benefits of multiple substitutions are achieved without sequential execution delays, maintaining high operation speed while enhancing resistance to side channel attacks
Data Source
AI summary
An endecryptor and a control device are provided. The endecryptor includes a first SBOX configured to replace first input data with first substitution data, a transformation unit configured to replace the first input data with second substitution data and an output terminal configured to output encrypted or decrypted output data based on the first and second substitution data.