Montgomery multiplier for RSA security module

Abstract

The present invention discloses a Montgomery multiplier for an RSA security module secured from a differential power analysis attack. The Montgomery multiplier includes the first filtering means for receiving the first input signal and the second input signal represented by an asynchronous double line method, and selectively outputting the second input signal according to a logical value of the first input signal, the first carry save adder for outputting a sum and a carry by adding up a carry signal and a sum signal generated in a previous calculation procedure and the output signal from the first filtering means, the second filtering means for receiving a logical value of a least significant sum of the first carry save adder as the third input signal and a modular operation factor as the fourth signal, and filtering the fourth input signal, the second carry save adder for generating a sum and a carry, by adding up the carry and the sum from the first carry save adder and the output from the second filtering means, a carry storing means and a sum storing means for storing the carry and the sum from the second carry save adder, respectively, a carry propagation adder for calculating the final result by adding up the data stored in the carry storing means and the sum storing means, and an operation completion sensing means for deciding operation completion according to the output signal from the second carry save adder. The Montgomery multiplier prevents hacking by the differential power analysis attack and composes an area-efficient circuit.

Dependencies are inferred from the claim text.