Scalar Multiplication Apparatus for DFA Attack Resistance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional cryptographic systems, particularly those using Elliptic Curve Cryptography, are vulnerable to Side-Channel Analysis (SCA) attacks like Differential Fault Analysis (DFA), where attackers can induce faults to obtain secret keys by analyzing faulty output points, leading to potential leaks of confidential information.

Innovation Solution

The proposed solution involves a scalar multiplication apparatus with multiple encryptors and XOR circuits that perform logic operations on input points and secret keys, generating modified output points to counter DFA attacks by diffusing faults and maintaining the secrecy of the original secret key, even under induced faults.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If parallel EC operation units are used to generate encrypted output points, then productivity is improved, but security is worsened because attackers can analyze faulty output points to obtain secret keys

Engineering Contradiction:
Improveencryption speedVSAvoidsecurity against DFA attacks
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The encryption process is divided into multiple segments (first and second EC operation units) that operate in parallel but produce intermediate results that are combined through XOR operations. This segmentation prevents attackers from directly analyzing complete faulty output points while maintaining high encryption speed through parallel processing.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

XOR circuits are introduced as intermediary components between the parallel EC operation units and the final output. These intermediaries transform the direct output points into modified output points through logical operations, preventing direct analysis by attackers while preserving the benefits of parallel computation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If output points are compared and selectively transmitted, then security is improved by preventing leaks, but device complexity is worsened

Engineering Contradiction:
Improvesecurity against faultsVSAvoidcomparing and outputting unit
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Fault prevention is performed preliminarily by transforming the encryption process itself rather than by post-encryption comparison and selection. The XOR operations are applied during the encryption process to inherently prevent fault analysis, eliminating the need for separate comparing and outputting units.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If XOR operations are performed on encrypted output points, then security is improved by diffusing faults, but device complexity is worsened due to additional logic circuits

Engineering Contradiction:
Improvesecurity against DFA attacksVSAvoidlogic circuit structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The XOR operations are merged with the existing parallel EC operation structure rather than being added as separate post-processing stages. The logic circuits are integrated into the encryption flow, combining fault diffusion functionality with the existing computational architecture to minimize additional complexity.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS7916860B2Scalar multiplication apparatus and method
Publication Date: 2011.03.29 SAMSUNG ELECTRONICS CO LTD
  • US7916860B2 patent drawing
  • US7916860B2 patent drawing
  • US7916860B2 patent drawing

AI summary

A scalar multiplication apparatus may include at least two encryptors, each adapted to receive an input point and a changed secret key to generate an encrypted output point; a first logic circuit adapted to receive the encrypted output points to perform a first logic operation; a second logic circuit adapted to receive a first logic operation result and a secret key to perform a second logic operation and generate the changed secret key; and a random number generator adapted to generate random number data. A scalar multiplication method may include receiving an input point and a changed secret key, generating first and second encrypted output points from the input point and changed secret key, performing a first logic operation on the first and second encrypted output points, and performing a second logic operation on a first logic operation result and a secret key and generating the changed secret key.