Secure Data Processing Device Using Transformed Partial Representatives
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security mechanisms for protecting secret data in cryptographic operations, such as Exclusive-Or sharing, are vulnerable to side channel attacks, particularly when partial representatives are stored in processor registers, leading to information leakage.
Innovation Solution
A data processing device that transforms at least one partial representative before storing it in a processor register, using operations like rotation or bit permutation, to reduce information leakage during cryptographic operations, allowing for secure combination of secret data words without requiring back transformation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If partial representatives are stored in processor registers for cryptographic operations, then processing speed is improved, but security against side channel attacks deteriorates due to information leakage
Solution Approach 1:
The patent applies preliminary action by transforming partial representatives before storing them in processor registers. The transformation is performed in advance during the data preparation phase, so that when the partial representatives are subsequently stored in registers and processed, they are already in a secure transformed state that prevents side channel information leakage while maintaining processing efficiency
2Reliability
If partial representatives are transformed before storage to prevent information leakage, then security against side channel attacks is improved, but device complexity increases
Solution Approach 1:
The patent applies self-service by implementing the transformation using standard processor operations that work on the existing data structures and registers without requiring separate dedicated transformation hardware or complex additional circuitry. The transformation leverages the processor's own capabilities to securely handle the data
Solution Approach 2:
The patent applies parameter changes by using transformation operations (such as bit permutations or rotations) that modify the representation parameters of the partial representatives. These transformations change the bit ordering or arrangement of the data without altering the underlying cryptographic values, thereby securing the data while maintaining computational efficiency
Data Source
AI summary
A data processing device may include a processor, configured to combine a first data word and a second data word of a plurality of secret data words by storing, for each of the first data word and the second data word, for an Exclusive-Or sharing of the data word into multiple partial representatives, for at least one of the partial representatives, a transformed version of the partial representative in a processor register, and, if the combination of the data words requires a partial representative of the first data word to be combined with a partial representative of the second data word that is stored in a processor register after having been transformed, combining the partial representative of the first data word with the partial representative of the second data word with a processor operation that takes into consideration that the partial representative of the second data word has been transformed.