Cryptographic circuit protection from differential power analysis
AssigneeNXP B.V.
InventorJuergen Nowottnick
Life of this patent
Estimating the term…
Abstract
According to an example embodiment, a device provides cryptographic processing functions using secret data. The device can include protection from differential power analysis (DPA). The encryption processing circuit and its memory can be decoupled from external power source(s) during encryption-related computations. A local power storage element, such as a capacitive element, can provide power while the encryption processing circuit is decoupled from the external power source(s). The local power storage element can then be reconnected and charged once the encryption-related computations are completed or paused.
Claims17
A device comprising:
- an integrated circuit die having
- a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
- a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- and
- an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
- a control circuit configured and arranged to
- charge the power storage circuit by providing power from an external power source;
- and
- disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source.
A method comprising:
- executing, using a cryptographic processing circuit, a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
- storing, in a power storage circuit, power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- and
- controlling a switching circuit to
- charge the power storage circuit by providing power from an external power source, and
- disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source.
A device comprising:
- an integrated circuit die having
- a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that is subject to side channel attacks that use power consumption of the cryptographic processing circuit;
- a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
- and
- a first electrical connection port for external connection;
- and
- a switching control circuit configured and arranged to
- operate in each of two alternative modes, a first mode charging the power storage circuit using power provided from an external power source and a second mode acting to block the power provided from the external power source and to provide power from the power storage circuit to the cryptographic processing circuit,
- determine a condition prompting execution of the algorithm and in response to the determination, select between the two alternative modes, and
- a second electrical connection port for external connection between the switching control circuit and electrical connection port of the integrated circuit die.
Dependencies are inferred from the claim text.