Side-channel hardened operation
AssigneeInfineon Technologies AG
InventorsMarkus Rau, Stefan Heiss
Life of this patent
Estimating the term…
Abstract
A method is provided for conducting an operation, the method including: determining a first result based on combining a first input with a first mask; determining a second result based on combining a second input with a second mask, the first mask and the second mask fulfilling a precondition; and conducting the operation based on the first result and the second result. A corresponding device is also provided.
Claims17
A method for conducting an operation, the method comprising:
- determining a first result based on combining a first input with a first mask,
- determining a second result based on combining a second input with a second mask, the first mask and the second mask fulfilling a precondition;
- and
- conducting the operation based on the first result and the second result, wherein the operation comprises a multiplex operation allowing either the first input or the second input to pass, and wherein the precondition indicates that only one of the masks amounts to 1 . . . 1, thereby indicating which input to pass the multiplex operation;
- and
- wherein the method is implemented in a digital processing environment to reduce susceptibility of the operation to monitoring via side-channel attacks.
A device comprising processing circuitry configured to reduce susceptibility of an operation to monitoring via side-channel attacks, by:
- determining a first result based on combining a first input with a first mask,
- determining a second result based on combining a second input with a second mask, the first mask and the second mask fulfilling a precondition;
- and
- conducting the operation based on the first result and the second result, wherein the operation comprises a multiplex operation allowing either the first input or the second input to pass, and wherein the precondition indicates that only one of the masks amounts to 1 . . . 1, thereby indicating which input to pass the multiplex operation.
A non-transitory computer readable medium comprising, stored thereupon, program instructions, wherein the program instructions are configured so that execution of the program instructions by at least one processor causes the at least one processor to reduce susceptibility of the operation to monitoring via side-channel attacks, by:
- determining a first result based on combining a first input with a first mask,
- determining a second result based on combining a second input with a second mask, the first mask and the second mask fulfilling a precondition;
- and
- conducting the operation based on the first result and the second result, wherein the operation comprises a multiplex operation allowing either the first input or the second input to pass, and wherein the precondition indicates that only one of the masks amounts to 1 . . . 1, thereby indicating which input to pass the multiplex operation.
Dependencies are inferred from the claim text.