Randomized Block Integrity Checks for Cryptographic Side Channel Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptographic devices are vulnerable to side channel attacks, such as fault injection and power analysis, which can compromise sensitive data during integrity checks, making it difficult to protect against tampering without leaking information.
Innovation Solution
A method that divides sensitive data into blocks and computes integrity check values in random order, using random parts to obscure the data, making it harder for attackers to reconstruct and analyze, thereby reducing information leakage during integrity checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If integrity checks are performed on sensitive data during cryptographic operations, then protection against fault injection attacks is improved, but information leakage through side channel attacks increases
Solution Approach 1:
The patent segments the sensitive data into multiple blocks and processes them in random order. Instead of performing integrity checks on the complete sensitive data, the system divides the data into smaller units (blocks) and computes intermediate integrity check values for each block separately. This segmentation prevents attackers from analyzing the complete data structure through side channel attacks while still maintaining protection against fault injection attacks.
Solution Approach 2:
The patent introduces dynamic randomization in the processing order of data blocks. The system uses a random number generator to determine the sequence in which blocks are processed and integrity checks are performed. This dynamic approach ensures that even if an attacker can observe power consumption or electromagnetic emissions, they cannot correlate these observations with the actual data values since the processing order changes randomly with each operation.
2Measurement precision
If integrity check values are computed on complete sensitive data, then detection of tampering is improved, but vulnerability to higher-order analysis attacks increases
Solution Approach 1:
The patent divides the integrity verification process into multiple intermediate checks on data blocks rather than a single check on complete data. Each block undergoes individual integrity verification, and the intermediate results are combined to form the final integrity check value. This segmented approach maintains tampering detection capability while preventing attackers from performing higher-order analysis on the complete data structure.
Solution Approach 2:
The patent introduces intermediate integrity check values as mediators between the sensitive data and the final integrity verification. These intermediate values are computed on individual blocks and combined through XOR operations to produce the final integrity check value. The intermediaries prevent direct exposure of sensitive data to potential attackers while maintaining the ability to detect tampering through the cumulative effect of intermediate checks.
3Object-affected harmful factors
If data is divided into blocks and processed in random order, then resistance to side channel attacks is improved, but computational complexity increases
Solution Approach 1:
The patent segments the computational process into independent block-level operations that can be performed in any order. Each block is processed through the same integrity check function, and the results are combined using simple XOR operations. This segmentation increases resistance to side channel attacks while keeping the computational complexity manageable through reuse of sub-computations and efficient combination operations.
Solution Approach 2:
The patent creates a universal processing framework where the same integrity check function is applied to multiple blocks in random order. The system uses a single random number generator and a unified combination function (XOR) that works regardless of the number of blocks or their processing order. This universal approach handles the increased complexity through standardized, reusable components rather than requiring separate processing logic for each block.
Data Source
AI summary
The invention relates to a method for protecting a sensitive operation by checking the integrity of at least a subset of the data manipulated by the sensitive operation. Data to be checked are divided into blocks, an intermediate integrity check value being computed for each block, the intermediate integrity check values being computed in random order. The invention also relates to a cryptographic device wherein at least one sensitive operation of the cryptographic device is protected by a method according to the invention.


