Soft Computing Obfuscation for Side-Channel Attack Resistance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic implementations are vulnerable to side-channel attacks and reverse engineering, as attackers can exploit physical quantities like power consumption and electromagnetic emanation to infer internal states and secret keys.
Innovation Solution
The method employs soft computing techniques, specifically artificial neural networks (ANNs), to obscure computational operations, breaking the connection between secret data and observable information, thereby concealing the internal state from attackers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard cryptographic algorithms are implemented, then security against mathematical attacks is improved, but vulnerability to side-channel attacks increases
Solution Approach 1:
The cryptographic algorithm is divided into multiple computational steps or rounds, with intermediate results stored in separate memory locations. This segmentation prevents attackers from obtaining complete internal state information through side-channel attacks, as each memory location contains only partial information that is useless without the other segments.
Solution Approach 2:
Dummy operations and dummy data are introduced as intermediaries between the secret key and the observable side-channel signals. These dummy computations create additional power consumption patterns and electromagnetic emissions that mask the genuine cryptographic operations, making it difficult for attackers to extract meaningful information.
2Reliability
If computational operations are performed to protect against attacks, then security is improved, but execution time increases
Solution Approach 1:
The system performs cryptographic operations in periodic rounds with fixed timing patterns. By structuring the computation to execute in regular intervals with predictable timing, the system maintains security while avoiding excessive time consumption, as each round processes a fixed amount of data with optimized operation sequences.
Solution Approach 2:
The implementation performs slightly more computational work than the minimum required for security, such as executing additional dummy operations or using larger intermediate buffer sizes. This partial excess action provides a security margin against side-channel attacks while keeping the time overhead acceptable by not over-engineering the protection mechanisms.
3Reliability
If memory locations are used to store intermediate results, then computational security is improved, but power consumption patterns become more detectable
Solution Approach 1:
Different memory locations are assigned to store different types of intermediate results based on their security sensitivity. Highly sensitive data is stored in protected memory regions with additional security measures, while less sensitive temporary data uses standard memory. This local differentiation optimizes both security and power consumption by applying protection only where necessary.
Solution Approach 2:
The system dynamically adjusts memory allocation parameters and data storage strategies based on the current operational context. During high-risk operations, more memory locations are allocated with enhanced protection, while during routine operations, memory usage is optimized to reduce power consumption. This adaptive parameter adjustment balances security requirements with energy efficiency.
Data Source
Figure 1
Figure 2
AI summary
The invention relates to a method for protecting a computing unit configured to perform at least one computational operation from cryptoanalytic attacks, wherein the at least one computational operation is implemented using a soft-computing-based technique (100).