Masked Multiplexer for Side-Channel Attack Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions fail to effectively protect security controllers and multiplexer functions against side-channel attacks, particularly in scenarios involving decisions based on secret data, as they do not adequately hide the internal operation of if-then-else sequences.
Innovation Solution
A method is introduced that combines inputs with masks using AND and XOR operations, ensuring only one input is passed through, thereby masking the multiplexer mechanism and hindering side-channel attacks. This involves determining multiple sub-masks for each input, with their XOR combinations fulfilling specific conditions to obscure the multiplexer's operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If masking is implemented to protect security critical data, then security against side-channel attacks is improved, but the complexity of the system increases due to additional masks and operations
Solution Approach 1:
The patent introduces mask values as intermediary elements that mediate between the secret data and the external observation. These masks act as a barrier that prevents direct correlation between the physical implementation and the secret data, thereby protecting against side-channel attacks while maintaining system functionality
Solution Approach 2:
The patent transforms the representation of secret data by applying mask values, effectively changing the parameter state of the data. This transformation ensures that the physical characteristics (power consumption, timing) no longer directly reflect the secret data values, thus enhancing security against side-channel analysis
2Reliability
If multiple masks and operations are introduced to hide the multiplexer mechanism, then security against side-channel attacks is improved, but the difficulty of detecting and measuring internal operations increases
Solution Approach 1:
Multiple mask values serve as intermediaries that obscure the relationship between the multiplexer's internal operations and observable physical characteristics. The sequential application of masks during the operation makes it extremely difficult for attackers to correlate power consumption or timing with the actual data being processed
Solution Approach 2:
The patent segments the masking process into multiple sequential steps, each applying a different mask value. This segmentation ensures that no single mask can be easily reverse-engineered, and the cumulative effect of multiple masked operations creates a robust barrier against side-channel detection
Data Source
AI summary
A method is provided for conducting an operation, the method including: determining a first result based on combining a first input with a first mask; determining a second result based on combining a second input with a second mask, the first mask and the second mask fulfilling a precondition; and conducting the operation based on the first result and the second result. A corresponding device is also provided.