Side Channel Attack Prevention via Input Mutation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Encryption systems are vulnerable to side channel attacks, which exploit physical phenomena like heat, electromagnetic emissions, and power consumption, making it possible for attackers to reverse-engineer the circuitry and deduce processed data, thus compromising security.
Innovation Solution
A system that hardens inputs by using a pseudo random number generator, mutation data generators, E-multiplication modules, correction factor evaluators, element selectors, and subword replacement modules to produce a hardened result, making it infeasible for attackers to reverse the processed data through side channel attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption systems use standard cryptographic protocols, then security is provided, but they become vulnerable to side channel attacks exploiting physical phenomena
Solution Approach 1:
The system performs preliminary hardening of cryptographic inputs by generating random mutations and inserting them into the input data before the main cryptographic operation. This preliminary action ensures that even if side channel attacks occur during execution, the attacker cannot correlate physical measurements with the actual secret data because the inputs have been randomized.
Solution Approach 2:
The system introduces random mutation data as an intermediary between the secret key and the cryptographic operation. This intermediary layer randomizes the input without affecting the cryptographic correctness, thereby breaking the direct correlation that side channel attacks rely on between physical emissions and secret data.
2Reliability
If the system hardens inputs by adding mutation generation and processing modules, then resistance to side channel attacks improves, but device complexity increases
Solution Approach 1:
The system uses a universal random number generator that serves multiple functions: generating mutations for input hardening, selecting random elements for insertion, and determining random locations for mutation application. This multi-functionality reduces the need for separate randomization components throughout the system, thereby limiting the increase in device complexity.
3Reliability
If random mutations are generated and processed through E-multiplication modules, then cryptographic security against reverse engineering improves, but computational overhead increases
Solution Approach 1:
The system applies partial hardening by generating a limited number of random mutations and applying them to specific portions of the input data rather than completely randomizing all inputs. This partial action provides sufficient protection against side channel attacks while minimizing the additional computational overhead and maintaining acceptable processing speeds.
Data Source
AI summary
A side channel attack prevention system may use one or more of a function mutation generator, an element selector generator and/or a subword replacement module to produce a hardened result. The function mutation generator may evaluate a mutated function. The element selector generator may select a central group element in a group and insert that central group element within the group. The subword replacement module may identify a relation in a group and insert that relation in a random location of the group.