Blinding countermeasure to secure multiplication operations against side channel attacks
AssigneeSynopsys, Inc.
InventorNimisha Limaye
Life of this patent
Estimating the term…
Abstract
Certain aspects are directed to apparatus and methods for performing a blinded operation. The method generally includes: obtaining a first operand and a second operand for a multiplication operation; performing, via one or more processors, one or more shift operations or a bit-flip operation on the first operand to generate a first blinded operand; and performing the multiplication operation based on the first blinded operand and the second operand to generate a blinded multiplication result.
Claims20
A method for performing a blinded operation, comprising:
- obtaining a first operand and a second operand for a multiplication operation;
- performing, via one or more processors, one or more shift operations or a bit-flip operation on the first operand to generate a first blinded operand, wherein the first blinded operand is generated to reduce or randomize a difference between a power profile of the multiplication operation and a power profile of another multiplication operation in order to inhibit side channel attacks for the multiplication operation, the difference being reduced or randomized by implementing a hamming weight adjustment via the one or more shift operations or the bit-flip operation to modify the power profile of the multiplication operation;
- and performing the multiplication operation based on the first blinded operand and the second operand to generate a blinded multiplication result.
An apparatus for performing a blinded operation, comprising:
- memory;
- and one or more processors coupled to the memory and configured to:
- obtain a first operand and a second operand for a multiplication operation;
- perform one or more shift operations or a bitflip operation on the first operand to generate a first blinded operand, wherein the first blinded operand is generated to reduce or randomize a difference between a power profile of the multiplication operation and a power profile of another multiplication operation in order to inhibit side channel attacks for the multiplication operation, the difference being reduced or randomized by implementing a hamming weight adjustment via the one or more shift operations or the bit-flip operation to modify the power profile of the multiplication operation;
- and perform the multiplication operation based on the first blinded operand and the second operand to generate a blinded multiplication result.
A computer-readable medium having instructions stored thereon, that when executed by one or more processors, are configured to:
- obtain a first operand and a second operand for a multiplication operation;
- perform one or more shift operations or a bit-flip operation on the first operand to generate a first blinded operand, wherein the first blinded operand is generated to reduce or randomize a difference between a power profile of the multiplication operation and a power profile of another multiplication operation in order to inhibit side channel attacks for the multiplication operation, the difference being reduced or randomized by implementing a hamming weight adjustment via the one or more shift operations or the bit-flip operation to modify the power profile of the multiplication operation;
- and perform the multiplication operation based on the first blinded operand and the second operand to generate a blinded multiplication result.
Dependencies are inferred from the claim text.