Processor SM2 Elliptic Curve Cryptography Internal Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in efficiently and securely implementing the SM2 elliptic curve cryptographic algorithm, with software implementations failing to guarantee data security and specialized hardware increasing deployment costs.
Innovation Solution
A processor designed with an elliptic curve cryptographic algorithm (SM2 algorithm) and its data processing method, where intermediate data is protected within the processor's internal storage, eliminating the need for additional specialized hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If software is used to implement the SM2 algorithm, then deployment costs are reduced, but data security cannot be effectively guaranteed
Solution Approach 1:
The patent merges the SM2 cryptographic algorithm implementation directly into the processor architecture by integrating a dedicated SM2 instruction set and execution unit into the CPU core. This combination allows the processor to execute SM2 operations natively without requiring external specialized hardware while maintaining security through hardware-level protection of intermediate data.
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of a dedicated SM2 execution unit and instruction set that acts as a mediator between the general-purpose processor and the cryptographic operations. This intermediary structure enables secure execution of SM2 algorithms by controlling data access and protecting intermediate calculations at the hardware level.
2Reliability
If specialized hardware is used to implement the SM2 algorithm, then data security is improved, but deployment costs increase
Solution Approach 1:
The patent implements a universal solution by integrating the SM2 execution unit into the general-purpose processor architecture, allowing the same hardware platform to perform both general computing tasks and secure cryptographic operations. This multi-functionality eliminates the need for separate specialized hardware devices while maintaining security capabilities.
Solution Approach 2:
The processor performs self-service by incorporating the SM2 algorithm execution capabilities directly within its own architecture, enabling it to securely execute cryptographic operations without requiring external specialized hardware support. The integrated execution unit manages cryptographic operations autonomously within the processor.
3Ease of operation
If intermediate data is stored in system memory, then accessibility is improved, but data security is compromised
Solution Approach 1:
The patent segments the storage space into different security zones, separating the processor's internal secure storage area from the external system memory. Intermediate cryptographic data is stored in the processor's protected internal memory space, while only finalized results are written to system memory, thereby maintaining security while enabling necessary accessibility.
Solution Approach 2:
The patent introduces an intermediary storage mechanism within the processor that acts as a secure buffer between data access requirements and security constraints. This internal storage area serves as an intermediary that temporarily holds sensitive intermediate data protected from external access while still allowing the processor to operate efficiently.
Data Source
AI summary
A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. Three elliptic curve cryptographic instructions are proposed in the instruction set architecture for key exchange between an initiator and a responder. The initiator device executes the first elliptic curve cryptographic instruction to generate a key pair (rA, RA). In addition to considering the first temporary public key RA, the responder device further takes the second temporary public key RB into consideration when executing the second elliptic curve cryptographic instruction to generate the responder-generated shared key KB. Based on the temporary private key rA, and the temporary public keys RA and RB, the initiator device executes the third elliptic curve cryptographic instruction to generate the initiator-generated shared key KA.