Triplication-based fault attack countermeasure

A method for secure processing, comprising:

• providing an input value to a circuit that generates a first output value;
• obtaining a tweak value;
• obtaining a plurality of first intermediate output values, wherein the plurality of first intermediate output values are generated by the circuit based on a function of the input value and the tweak value;
• embedding the plurality of first intermediate output values into a structure;
• obtaining a plurality of second intermediate output values, wherein the plurality of second intermediate output values are a function of the plurality of first intermediate output values, a random number, and an inverse of the tweak value;
• determining a most common value of the plurality of second intermediate output values, wherein the most common value represents a fault injection resistant value or a random value;
• obtaining a third intermediate value, the third intermediate value based on a function of the most common value and an inverse of the random number;
• projecting the third intermediate value from the structure to obtain a second output value;
• and
• outputting the second output value.

A non-transitory computer-readable medium having stored thereon instructions that, when executed by a processor system, cause the processor system to:

• provide an input value to circuit that generates to generate a first output value;
• obtain a tweak value;
• obtain a plurality of first intermediate output values, wherein the plurality of first intermediate output values are generated by the circuit based on a function of the first output value and the tweak value;
• embed the plurality of first intermediate output values into a structure;
• obtain a plurality of second intermediate output values, wherein the plurality of second intermediate output values are a function of the plurality of first intermediate output values, a random number, and an inverse of the tweak value;
• determine a most common value of the plurality of second intermediate output values, wherein the most common value represents a fault injection resistant value or a random value;
• obtain a third intermediate value, the third intermediate value based on a function of the most common value and an inverse of the random number;
• project the third intermediate value from the structure to obtain a second output value;
• and
• output the second output value.