Real-Time TVLA for Asymmetric Crypto Leakage Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic systems, particularly asymmetric crypto systems like ECC, face challenges in performing robust test vector leakage assessment (TVLA) due to high latency and the need for numerous traces to achieve a high confidence level, making traditional TVLA methods impractical.

Innovation Solution

A real-time TVLA method is implemented using a high-resolution oscilloscope and processor to iteratively process traces, storing only minimal data in memory, performing TVLA after each trace, and updating mean and variance on-the-fly to detect signal leakage efficiently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If traditional TVLA methods are used on asymmetric cryptographic systems, then measurement precision is improved, but loss of time increases due to high latency and requirement for many traces

Engineering Contradiction:
ImproveTVLA detection accuracyVSAvoidassessment time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-computing and storing statistical parameters (mean and variance) of the cryptographic system's power consumption traces during a characterization phase. These pre-computed statistics enable rapid TVLA assessment during actual security evaluation, avoiding the need to collect and analyze numerous traces in real-time, thus resolving the time loss issue while maintaining measurement precision.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If numerous traces are collected to achieve high confidence level, then reliability is improved, but device complexity increases due to data management requirements

Engineering Contradiction:
Improveconfidence levelVSAvoiddata management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts only the essential statistical features (mean and variance) from the trace data that are necessary for TVLA, discarding the raw trace information. This extraction approach maintains reliability by preserving the critical statistical properties needed for confident leakage detection, while dramatically reducing device complexity by eliminating the need to store and manage large volumes of raw trace data.

Inventive Principle:
Principle #2Taking out (Extraction)

3Measurement precision

If many traces are stored for analysis, then measurement precision is improved, but loss of substance increases due to memory requirements

Engineering Contradiction:
ImproveTVLA accuracyVSAvoidmemory resources
Core Design Contradiction:
Measurement precisionVSLoss of substance

Solution Approach 1:

The patent changes the parameters from storing raw trace data to storing only aggregated statistical parameters (mean and variance). This parameter transformation maintains measurement precision because the statistical properties are sufficient for TVLA calculations, while significantly reducing memory resource consumption by storing compact numerical summaries instead of large volumes of raw measurement data.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS12476796B2Cryptographic system real-time test vector leakage assessment
Publication Date: 2025.11.18 MICROSOFT TECHNOLOGY LICENSING LLC
  • US12476796B2 patent drawing
  • US12476796B2 patent drawing
  • US12476796B2 patent drawing

AI summary

Test inputs are iteratively provided to a target asymmetric cryptographic system. Trace information resulting from operation of the cryptographic system is received corresponding to processing each test input. For each test input, test vector leakage assessment (TVLA) is performed on the trace information for the test input, t-values are stored, and the trace information is erased before proceeding to a next test input. In one example, a mean and variance of the trace information is updated for each test input.