Cryptographic apparatus

An electronic device comprising:

• one or more processors that implement each module of a plurality of modules to jointly perform a secure multiparty cryptographic process to generate authorisation data based on input data, the authorisation data being suitable for use in authorising the electronic device, wherein:
• each module of the plurality of modules uses secure data that is not shared outside that module to generate intermediate data for use in the secure multiparty cryptographic process to generate authentication data;
• a second module of the plurality of modules performs a first authentication process to authenticate the intermediate data generated by a first module of the plurality of modules, the first authentication process being performed on first authentication data that is based on the intermediate data generated by the first module of the plurality of modules, and, if the first authentication data fails the first authentication process, performs a corresponding predetermined action indicative of failure of the operation;
• and
• the first module of the plurality of modules performs a second authentication process to authenticate the intermediate data generated by the second module of the plurality of modules, the second authentication process being performed on second authentication data that is based on the intermediate data generated by the second module of the plurality of modules, and, if the second authentication data fails the second authentication process, performs a corresponding predetermined action indicative of failure of the operation;
• and
• an output interface to transmit to a terminal the generated authorisation data, wherein the authorisation data is suitable for authorising the electronic device.

An electronic device comprising:

• one or more processor that implement two cryptographic modules that jointly perform a secure multiparty cryptographic process to generate cryptographic data based on input data, wherein:
• a calling module passes the input data to a first of the two cryptographic modules;
• the first of two cryptographic modules:
• generates intermediate data using the input data and secure data that is not shared outside that module and generates an authentication value based at least in part on its intermediate data;
• and
• shares its intermediate data and authentication value with a second of the two cryptographic modules;
• the second of the two cryptographic modules:
• generates intermediate data using the input data and secure data this is not shared outside that module;
• performs an authentication process using the authentication value received from the first module to authenticate the intermediate data received from the first module;
• and
• if the authentication process is passed, generates a result using the intermediate data received from the first module and the intermediate data generated by the second module, and passes it to the calling module;
• whereas
• if the authentication process is failed, passes a failure notification to the calling module;
• if the calling module receives the result from the second module, the calling module sets the cryptographic data to comprise the result, whereas if the calling module receives a failure notification from the calling module, the calling module performs a predetermined failure action;
• an output interface to transmit the cryptographic data to a further electronic entity the cryptographic data.

An electronic device comprising:

• one or more processor that implement two cryptographic modules that jointly perform a secure multiparty cryptographic process to generate cryptographic data based on input data, and a calling module, wherein:
• the calling module passes the input data to a first of the two cryptographic modules;
• the first of two cryptographic modules:
• generates intermediate data using the input data and secure data that is not shared outside that module;
• and
• shares its intermediate data with a second of the two cryptographic modules;
• the second of the two cryptographic modules:
• generates intermediate data using the input data and secure data that is not shared outside that module;
• generates the cryptographic data using the intermediate data received from the first module and intermediate data generated by the second module;
• and
• passes the cryptographic data to the calling module;
• the first module subsequently then:
• generates an authentication value based at least in part on its intermediate data and passes the authentication value to the second module;
• and
• the second module:
• performs an authentication process using the authentication value received from the first module to authenticate the intermediate data received from the first module;
• and
• if the authentication process is failed, passes a failure notification to the calling module,
• an output interface to transmit the cryptographic data to a further electronic entity the cryptographic data.