Protected cryptographic calculation
AssigneeGiesecke & Devrient GmbH
InventorsMarkus Bockes, Hermann Drexler, Helmut Kahl
Life of this patent
Estimating the term…
Loading patent…
AssigneeGiesecke & Devrient GmbH
InventorsMarkus Bockes, Hermann Drexler, Helmut Kahl
Estimating the term…
In a method for protected execution of a cryptographic calculation in which a key (12) with at least two key parameters (p, q, pinv, sp, dp, sq, dq) is drawn on, an integrity check (30, 34, 40, 54) of the key (12) is performed, in order to prevent a cryptographic attack in which conclusions are drawn as to at least one second key parameter (p, q, pinv, sp, dp, sq, dq) by corrupting at least one first key parameter (p, q, pinv, sp, dp, sq, dq). A further method serves to determine a key for a cryptographic calculation with at least two key parameters (p, q, pinv, sp, dp, sq, dq), provided for use in the first mentioned method. A computer program product and a portable data carrier have corresponding features. The invention enables particularly good protection of cryptographic calculations against attacks.
A method for protected execution of a cryptographic calculation, in which a key with at least two key parameters is drawn on, wherein an integrity check of the key is performed, in order to prevent a cryptographic attack in which conclusions are drawn as to at least one second key parameter by corrupting at least one first key parameter.
2-13. (canceled)
A method for determining a key for a cryptographic calculation with at least two key parameters, the key being adapted to be used in a method for protected execution of a cryptographic calculation wherein an integrity check of the key is performed in order to prevent a cryptographic attack in which conclusions are drawn as to at least one second key parameter by corrupting at least one first key parameter.
A computer program product which has program commands to cause a processor to execute a method for protected execution of a cryptographic calculation, in which a key with at least two key parameters is drawn on, wherein an integrity check of the key is performed in order to prevent a cryptographic attack in which conclusions are drawn as to at least one second key parameter by corrupting at least one first key parameter.
A portable data carrier set up for executing a method for protected execution of a cryptographic calculation, in which a key with at least two key parameters is drawn on, wherein an integrity check of the key is performed in order to prevent a cryptographic attack in which conclusions are drawn as to at least one second key parameter by corrupting at least one first key parameter.
Dependencies are inferred from the claim text.