Processor-Level SM2 Cryptography for Secure, Low-Cost Deployment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic technologies using SM2 algorithms face challenges in ensuring data security and are costly due to the need for specialized hardware.
Innovation Solution
A processor with integrated elliptic curve cryptographic algorithms (SM2) and a data processing method that stores intermediate data securely within the processor, eliminating the need for additional hardware by using a microcode-based approach to execute SM2 and SM3 algorithms efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If specialized hardware is used to implement the SM2 algorithm, then data security is improved, but deployment costs increase
Solution Approach 1:
The patent merges the SM2 cryptographic algorithm implementation directly into the processor's instruction set architecture and internal storage structures. By integrating the cryptographic functions into the processor itself rather than using separate specialized hardware modules, the system achieves secure data processing while avoiding the additional deployment costs and complexity of external cryptographic cards or dedicated security hardware.
2Device complexity
If software is used to implement the SM2 algorithm, then deployment costs are reduced, but data security cannot be effectively guaranteed
Solution Approach 1:
The patent introduces an intermediary layer in the form of processor-level hardware support for the SM2 algorithm, including dedicated registers (first register for Hash value pointer, second register for private key pointer) and internal storage spaces. This intermediary hardware layer provides the security guarantees of specialized hardware while maintaining the cost-effectiveness and flexibility of software-based deployment, as it works through the existing processor architecture rather than requiring completely separate hardware systems.
3Ease of operation
If intermediate data is stored in external memory, then accessibility is improved, but security is compromised
Solution Approach 1:
The patent implements a nested storage structure where intermediate cryptographic data is stored in secure internal storage spaces within the processor, which are inaccessible from outside. The first register contains a pointer to a first storage space for Hash values, and the second register contains a pointer to storage for private keys, both located within the processor's protected memory hierarchy. This nesting approach allows data to be accessible when needed for cryptographic operations while remaining protected from external access, effectively solving the security-accessibility contradiction.
Data Source
AI summary
A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. The processor has first register storing a Hash value pointer, and a second register, storing a private key pointer. In response to a first elliptic curve cryptographic instruction of an instruction set architecture, the processor reads a first storage space within a system memory by referring to the first register to get a Hash value of the data to be signed, reads a private key by referring to the second register, performs a signature procedure using the elliptic curve cryptographic algorithm on the Hash value based on the private key to generate a digital signature, and programs the digital signature into a second storage space within the system memory.