Processor with Integrated SM2 Elliptic Curve Cryptography
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in efficiently and securely implementing the SM2 cryptographic algorithm, with software implementations failing to guarantee data security and specialized hardware increasing deployment costs.
Innovation Solution
A processor with an integrated elliptic curve cryptographic algorithm (SM2 algorithm) and a data processing method that allows for the execution of the SM2 algorithm using a single instruction set architecture (ISA) instruction, with intermediate data protected within the processor's internal storage space.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If software is used to implement the SM2 algorithm, then deployment costs are reduced, but data security cannot be effectively guaranteed
Solution Approach 1:
The patent merges the SM2 cryptographic algorithm directly into the processor's instruction set architecture and hardware structure. The processor includes dedicated cryptographic instruction modules and internal storage spaces that work together as an integrated system, combining the benefits of hardware security with the cost-effectiveness of standard processor deployment.
Solution Approach 2:
The patent introduces an intermediary layer of processor-internal storage spaces that mediate between the cryptographic operations and external memory systems. These internal storage spaces protect intermediate cryptographic data from external access while maintaining efficient processing, acting as a security buffer that preserves data security without requiring expensive specialized hardware.
2Reliability
If specialized hardware is used to implement the SM2 algorithm, then data security is improved, but deployment costs increase
Solution Approach 1:
The patent designs the processor with multi-functional cryptographic capabilities that can handle various cryptographic operations (SM2 encryption, decryption, signature generation, and verification) within a single unified architecture. This universal design eliminates the need for separate specialized hardware modules for different cryptographic functions, reducing deployment costs while maintaining comprehensive security capabilities.
Solution Approach 2:
The patent combines multiple cryptographic functions and storage requirements into a single integrated processor design. The internal storage spaces serve multiple purposes: storing intermediate cryptographic data, maintaining security contexts, and managing key materials, thereby eliminating the need for multiple separate hardware components.
3Adaptability or versatility
If multiple instructions are used to perform the SM2 algorithm, then processing flexibility is maintained, but processing efficiency decreases
Solution Approach 1:
The patent segments the SM2 algorithm into distinct cryptographic operations (encryption, decryption, signature generation, signature verification) and provides dedicated instructions for each operation in the instruction set architecture. This segmentation allows the processor to execute each cryptographic function efficiently while maintaining the flexibility to handle different cryptographic scenarios through appropriate instruction selection.
Solution Approach 2:
The patent incorporates preliminary action by pre-defining the instruction set architecture with optimized cryptographic instructions and pre-allocating internal storage spaces for cryptographic operations. This preliminary preparation enables the processor to execute SM2 algorithms efficiently without requiring runtime compilation or complex instruction sequences, improving processing speed while maintaining adaptability.
Data Source
AI summary
A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. The processor has a first register, storing a public key pointer pointing to a public key. In response to a single elliptic curve cryptographic instruction of an instruction set architecture, the processor reads a plaintext input from a first storage space within a system memory, performing an encryption procedure using the elliptic curve cryptographic algorithm on the plaintext input based on the public key obtained by referring to the first register to encrypt the plaintext input and to generate a ciphertext output, and programming the ciphertext output into a second storage space within the system memory.