Pipelined Encryption Core Virtual Round Noise Generation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing encryption circuits are vulnerable to side-channel analysis attacks, where attackers can detect encryption keys by analyzing power consumption and electromagnetic waves, leading to potential security information leaks.

Innovation Solution

The implementation of a pipelined encryption core with multiple round cores performing real and virtual encryption operations in parallel, using a key scheduler to manage real and virtual keys, and an encryption controller to control virtual round operations, making it difficult for attackers to detect real encryption operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a traditional encryption circuit performs only real encryption operations, then encryption speed is maintained, but security is vulnerable to side-channel analysis attacks

Engineering Contradiction:
Improvesecurity levelVSAvoidencryption circuit structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The encryption circuit is segmented into multiple round cores (first round core, second round core, etc.), where each round core can independently perform encryption operations. This segmentation allows the circuit to execute multiple encryption operations simultaneously, creating noise that masks the real encryption operation and prevents side-channel analysis attacks while maintaining manageable circuit complexity through modular design.

Inventive Principle:
Principle #1Segmentation

2Reliability

If virtual encryption operations are added to prevent side-channel attacks, then security is improved, but power consumption increases

Engineering Contradiction:
Improvesecurity levelVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The encryption circuit continuously performs both real and virtual encryption operations without interruption. By maintaining continuous operation of multiple round cores, the circuit ensures that power consumption remains relatively stable and predictable, making it difficult for attackers to detect real encryption operations through power analysis while avoiding the energy waste associated with intermittent operation.

Inventive Principle:
Principle #20Continuity of useful action

3Object-affected harmful factors

If multiple round cores perform parallel operations, then resistance to side-channel attacks is improved, but device complexity increases

Engineering Contradiction:
Improveside-channel attack resistanceVSAvoidnumber of round cores
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

Each round core is designed with universal functionality to perform both real encryption operations and virtual encryption operations. The round cores use the same encryption algorithm and structure, allowing them to be interchangeably used for different purposes. This multi-functionality reduces the need for specialized components and simplifies the overall circuit design while maintaining the ability to resist side-channel attacks through parallel operation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11328097B2Encryption circuit for performing virtual encryption operations
Publication Date: 2022.05.10 SAMSUNG ELECTRONICS CO LTD
  • US11328097B2 patent drawing
  • US11328097B2 patent drawing
  • US11328097B2 patent drawing

AI summary

An encryption circuit includes a pipelined encryption core having a plurality of round cores therein. The pipelined encryption core is configured to perform a real round operation on each of a plurality of pieces of input data received therein and generate encryption data from the input data using an encryption operation comprising the real round operation. An encryption controller is provided, which is coupled to the pipelined encryption core. The encryption controller is configured to control the pipelined encryption core so that at least one of the plurality of round cores performs a virtual round operation as part of the encryption operation. The pipelined encryption core is configured to perform a virtual encryption operation using at least one of: (i) dummy data, and (ii) a dummy encryption key.