Security Processor Random Recoding for Side Channel Attack Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security processors face challenges in effectively defending against side channel attacks (SCA) while minimizing power consumption and performance overhead, as existing countermeasures like masking and hiding techniques increase circuit area and power consumption, and are not fully effective against power analysis attacks.
Innovation Solution
A security processor that incorporates a recoder with a random signal generator, which introduces random variability to the recoding operation by assigning random characteristics to the multiplicand or multiplier, using a digit-unit multiplier and reference bit, to generate control signals for partial multiplications, thereby randomizing the recoding results and compensating for differences in partial multiplication results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If masking or hiding countermeasures are used against SCA, then security against side channel attacks is improved, but circuit area and average power consumption largely increase
Solution Approach 1:
The patent changes the operational parameters by introducing random recoding values that vary the number of addition operations and their timing. This randomization alters the power consumption pattern without requiring additional masking circuits, thus improving security against power analysis attacks while avoiding the substantial power overhead of traditional masking methods.
Solution Approach 2:
The patent implements dynamic behavior by randomly selecting recoding values during multiplication operations. This creates variable execution paths and timing for addition operations, making power consumption patterns unpredictable to attackers. The dynamic randomization achieves security without the static overhead of dedicated masking hardware.
2Reliability
If masking or hiding countermeasures are used against SCA, then security against side channel attacks is improved, but circuit area largely increases
Solution Approach 1:
The patent makes the existing recoder unit multi-functional by enabling it to generate random recoding values in addition to its standard function. This eliminates the need for separate masking or hiding circuits, achieving security against SCA without increasing circuit area. The same hardware structure serves both computation and security randomization purposes.
Solution Approach 2:
The recoder unit generates its own random recoding values internally during the multiplication process. This self-service approach to security randomization eliminates the need for external random number generators or additional security modules, achieving SCA protection without expanding the overall circuit footprint.
3Reliability
If random recoding values are used to defend against template attacks, then security against SCA is improved, but performance overhead increases
Solution Approach 1:
The patent performs recoding operations as preliminary steps before the main multiplication computation. By preparing random recoding values in advance during the natural multiplication process flow, the system achieves security randomization without adding separate performance-critical steps. The recoding is integrated into the existing computation timeline.
Solution Approach 2:
The patent merges the security randomization function with the standard multiplication operation. The random recoding values are generated and applied within the same computational pipeline as the multiplication, combining security and computation functions. This integration avoids the performance penalty of separate security processing stages.
Data Source
AI summary
An application processor includes a security processor. An operating method of the security processor includes generating a recoder input including a digit-unit multiplier and a reference bit. At least one random bits having a random value are generated. When the recoder input has a predetermined pattern, the recoder input is converted into a first recoding value or a second recoding value according to a random bit corresponding to the recoder input to generate a recoding result.