Processor SM2 Elliptic Curve Instruction Set Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in efficiently and securely implementing the SM2 elliptic curve cryptographic algorithm, as software implementations fail to guarantee data security and specialized hardware increases deployment costs.
Innovation Solution
A processor with an integrated SM2 algorithm that performs decryption and other cryptographic functions using a single ISA instruction, where intermediate data is protected within the processor's internal storage, eliminating the need for additional hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If software is used to implement the SM2 algorithm, then deployment costs are reduced, but data security cannot be effectively guaranteed
Solution Approach 1:
The patent merges the SM2 cryptographic algorithm directly into the processor's instruction set architecture and hardware structure. The processor includes dedicated cryptographic instruction modules that execute SM2 operations (encryption, decryption, signature, verification) as native instructions, combining the accessibility of software with the security of hardware-based implementation.
Solution Approach 2:
The patent introduces an intermediate layer of processor-based cryptographic execution that sits between standard software applications and the physical hardware. This intermediary processor layer executes cryptographic operations with protected internal registers and controlled data flow, providing security guarantees while remaining accessible through standard programming interfaces.
2Reliability
If specialized hardware is used to implement the SM2 algorithm, then data security is improved, but deployment costs increase
Solution Approach 1:
The patent designs a universal processor architecture that can execute both standard computational instructions and specialized cryptographic instructions for the SM2 algorithm. The processor includes a cryptographic instruction set that handles encryption, decryption, digital signature, and verification operations, allowing a single processor to perform multiple functions without requiring separate specialized hardware devices.
Solution Approach 2:
The patent combines general-purpose computing capabilities with dedicated cryptographic functionality into a single integrated processor. The processor structure includes standard ALUs, control units, and memory interfaces alongside cryptographic instruction modules and protected register files, eliminating the need for separate cryptographic hardware cards or devices.
3Adaptability or versatility
If intermediate data is stored in external memory, then processing flexibility is improved, but security is compromised due to external access
Solution Approach 1:
The patent implements a nested memory structure where protected internal registers are embedded within the processor core, which itself is embedded within the larger system memory hierarchy. Intermediate cryptographic data is stored in these nested internal registers during processing, providing multiple layers of protection while maintaining processing efficiency. The internal registers are only accessible through controlled processor instructions, not direct external memory access.
Solution Approach 2:
The processor's internal register file acts as an intermediary buffer between external memory and the cryptographic processing units. Sensitive intermediate data is loaded into these protected registers for processing and then stored back to external memory only when the cryptographic operation is complete and authenticated, preventing unauthorized access during the vulnerable processing state.
Data Source
AI summary
A processor with an elliptic curve cryptographic algorithm and a data processing method thereof are shown. The processor has a first register, storing a private key pointer pointing to a private key. In response to a single elliptic curve cryptographic instruction of an instruction set architecture, the processor reads a ciphertext input from a first storage space within a system memory, performing a decryption procedure using the elliptic curve cryptographic algorithm on the ciphertext input based on the private key obtained by referring to the first register to decrypt the ciphertext input and generate a plaintext output, and programming the plaintext output into a second storage space within the system memory.