Scrambled Password Verification Against Power Analysis Leakage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password systems are vulnerable to correlation power analysis (CPA) and differential power analysis (DPA) attacks, leading to easy leakage of passwords.
Innovation Solution
A password data processing method and apparatus that generates scrambled password data using a scrambling parameter, performs encryption, and limits the exposure of unencrypted password data within a defined effective period to reduce the risk of power analysis attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If password data is transmitted in unencrypted form for verification, then verification efficiency is improved, but password security deteriorates due to vulnerability to power analysis attacks
Solution Approach 1:
The password data is segmented into two forms: first password data (unencrypted) used temporarily during verification, and second password data (encrypted) used for transmission and storage. This segmentation allows the system to balance between verification efficiency and security by limiting the exposure of unencrypted data to only the necessary verification window.
Solution Approach 2:
The system performs preliminary encryption of password data before transmission to the verification module. The encrypted second password data is prepared in advance and transmitted securely, while the unencrypted first password data is only generated temporarily during the verification process, minimizing its exposure time.
2Ease of operation
If unencrypted password data is kept in the verification module for extended periods, then verification operations are simplified, but the risk of password leakage through correlation power analysis increases
Solution Approach 1:
The verification module dynamically switches between storing encrypted second password data (outside effective period) and unencrypted first password data (within effective period). This dynamic state change ensures that unencrypted data exists only when absolutely necessary for verification, reducing the window for power analysis attacks while maintaining operational simplicity.
Solution Approach 2:
The system changes the encryption parameter state based on time: during the effective period, the encryption parameter is deactivated to allow direct verification operations; outside the effective period, encryption is reactivated. This parameter change optimizes both verification simplicity and security by controlling when unencrypted data exists.
Data Source
AI summary
A password data processing method includes in response to a target instruction, generating first password data, determining a scrambling parameter, and performing encryption on the first password data according to the scrambling parameter to generate second password data, and receiving input password data, and in response to a verification request, performing verification on the input password data by a verification module according to the first password data within an effective period corresponding to the verification request, to obtain a verification result of the input password data. The second password data is used to be transmitted to the verification module outside the effective period.