Modular Multiplication Circuitry for RSA Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Integrated circuits implementing modular exponentiation operations, such as those required for RSA encryption, face challenges due to the resource-intensive nature of Barrett's algorithm, which necessitates accurate trial multiplications or complex pre-calculations for modular multiplication, especially for large input word sizes, leading to high area and power consumption.

Innovation Solution

A modular multiplication circuit is designed with a reduction circuit that uses partial multipliers to compute an initial estimate with large LSB errors, followed by a single-step error correction using an estimated quotient lookup table to converge to the correct value, reducing the need for extensive subtractions and minimizing power and area requirements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If Barrett's algorithm is used for modular multiplication, then accurate trial multiplications or complex pre-calculations are required, but area and power consumption increase significantly

Engineering Contradiction:
Improveaccuracy of modular multiplicationVSAvoidpower consumption
Core Design Contradiction:
Measurement precisionVSUse of energy by stationary object

Solution Approach 1:

The patent segments the modular multiplication process into two distinct phases: (1) an initial estimation phase using a simplified algorithm that accepts lower precision, and (2) a correction phase that refines the result to achieve exact accuracy. This segmentation allows the system to avoid the high power consumption of continuous high-precision operations while maintaining final accuracy requirements.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies preliminary action by performing rough estimation and error analysis before the final computation. The system pre-calculates error bounds and uses these to guide the correction phase, avoiding the need for exhaustive trial multiplications that characterize traditional Barrett's algorithm implementations.

Inventive Principle:
Principle #10Preliminary action

2Measurement precision

If accurate trial multiplications are performed for Barrett's algorithm, then modular multiplication accuracy is improved, but area consumption increases

Engineering Contradiction:
Improveaccuracy of modular multiplicationVSAvoidcircuit area
Core Design Contradiction:
Measurement precisionVSArea of stationary object

Solution Approach 1:

The patent divides the computational circuitry into two functional blocks: an estimation unit using simplified logic with smaller area, and a correction unit that processes only the error terms. This segmentation enables the system to achieve accurate results without requiring the full area that would be needed for continuous high-precision computation throughout the entire process.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies partial action by performing high-precision correction only on the specific error terms identified in the estimation phase, rather than applying full precision to all intermediate calculations. This selective approach to precision maintains final accuracy while minimizing the area required for correction circuitry.

Inventive Principle:
Principle #16Partial or excessive action

3Measurement precision

If complex pre-calculations are performed for Barrett's algorithm, then modular multiplication accuracy is improved, but power consumption and area increase

Engineering Contradiction:
Improveaccuracy of modular multiplicationVSAvoidcomplexity of pre-calculations
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the algorithm into an estimation phase using simple operations and a correction phase handling complexity selectively. By separating these functions, the system achieves accurate results without requiring complex pre-calculations to be performed throughout the entire computation process.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent extracts and isolates the error terms from the main computation stream, handling them separately in a dedicated correction phase. This extraction allows the main estimation phase to remain simple while concentrating complexity only where necessary for achieving final accuracy.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11249726B2Integrated circuits with modular multiplication circuitry
Publication Date: 2022.02.15 ALTERA CORP
  • US11249726B2 patent drawing
  • US11249726B2 patent drawing
  • US11249726B2 patent drawing

AI summary

An integrated circuit is provided with a modular multiplication circuit. The modular multiplication circuit includes an input multiplier for computing the product of two input signals, truncated multipliers for computing another product based on a modulus value and the product, and a subtraction circuit for computing a difference between the two products. An error correction circuit uses the difference to look up an estimated quotient value and to subtract out an integer multiple of the modulus value from the difference in a single step, wherein the integer multiple is equal to the estimated quotient value. A final adjustment stage is used to remove any remaining residual estimation error.