Cryptographic Parameter Validation via Hash Imprint Extraction

Solution Overview

Problem

Existing cryptosystems based on elliptic curves face challenges in efficiently validating domain parameters, which is crucial for security, due to the computational and memory-intensive nature of existing validation algorithms, and they lack resistance to side-channel attacks.

Innovation Solution

An electronic device uses a one-way function to determine an imprint from cryptographic parameters, storing only parts of this imprint in a dedicated memory zone, allowing for rapid validation by detecting the imprint during cryptographic processing, and employing masking operations for confidential parameters to resist attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing validation algorithms are used to validate cryptographic parameters, then security validation is achieved, but computational time and memory resources are excessively consumed

Engineering Contradiction:

Improvesecurity validationVSAvoidvalidation time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts only the essential validation information by computing a hash value of the cryptographic parameters and storing only this hash in the secure memory zone, rather than storing or processing the entire parameter set. This extraction approach maintains security validation while dramatically reducing memory usage and validation time.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent transforms the cryptographic parameters into a different form (hash value) that preserves the essential validation properties while occupying minimal storage space. By changing the parameter representation from full cryptographic parameters to their hash equivalents, the system achieves fast comparison and validation.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If existing validation algorithms are used to validate cryptographic parameters, then security validation is achieved, but memory storage requirements increase significantly

Engineering Contradiction:

Improvesecurity validationVSAvoidmemory storage

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent extracts only the essential validation information by computing a hash value of the cryptographic parameters and storing only this hash in the secure memory zone, rather than storing or processing the entire parameter set. This extraction approach maintains security validation while dramatically reducing memory usage and validation time.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent uses a disposable hash value instead of permanently storing the full cryptographic parameters. The hash serves as a lightweight, temporary validation token that can be quickly compared and discarded, replacing the need for extensive long-term storage of sensitive parameter data.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

3Speed

If cryptographic parameters are stored in plaintext for validation, then validation speed is improved, but resistance to side-channel attacks decreases

Engineering Contradiction:

Improvevalidation speedVSAvoidside-channel attack resistance

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a hash function as an intermediary transformation layer between the cryptographic parameters and their storage/validation form. This intermediary process converts the parameters into a protected representation that can be quickly validated while preventing direct access to the original sensitive data, thereby resisting side-channel attacks.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms the cryptographic parameters into a different form (hash value) that preserves the essential validation properties while occupying minimal storage space. By changing the parameter representation from full cryptographic parameters to their hash equivalents, the system achieves fast comparison and validation.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS10038560B2Method for validating a cryptographic parameter and corresponding device

Publication Date: 2018.07.31 IDEMIA FRANCE SAS

AI summary

An electronic device is proposed, which is configured to receive at least one cryptographic parameter and validate the at least one cryptographic parameter. The electronic device is is configured to validating the parameter by determining an imprint from a one-way function and from at least the cryptographic parameter; detecting at least one part of the imprint in a dedicated memory zone of the electronic device, and delivering a piece of information on validation should there be effective detection.