Masking method and system for cryptography
AssigneeCommissariat A L'energie Atomique Et Aux Energies Alternatives
InventorAntoine Loiseau
Life of this patent
Estimating the term…
Loading patent…
AssigneeCommissariat A L'energie Atomique Et Aux Energies Alternatives
InventorAntoine Loiseau
Estimating the term…
An integrated circuit including a set of security modules configured to implement an asymmetric cryptography operation, the set of modules including a conditional exchange module configured to exchange first and second vectors used to manipulate input bits of a secret key, the conditional exchange module being suitable for applying an exchange formula including a combination of a condition of the input bit with the first and second vectors so that the latter are interchanged only if the condition of the input bit is equal to ‘1’, the conditional exchange module including a masking module suitable for making use of at least one random number to mask said exchange formula before it is applied.
A method for masking within an asymmetric cryptography implementation, said implementation comprising a conditional exchange operation between first and second vectors (R0, R1) used to manipulate input bits of a secret key (k), said conditional exchange operation being adapted to apply an exchange formula comprising a combination of a condition (b) of the input bit with the first and second vectors so that the latter are interchanged only if the condition (b) of the input bit is equal to ‘1’, wherein the conditional exchange operation makes use of at least one random number to mask said exchange formula before applying it, with the masking of the exchange formula including the following steps:
An integrated circuit comprising a set of security modules configured to implement an asymmetric cryptography operation, said set of modules comprising a conditional exchange module configured to exchange first and second vectors (R0, R1) used to manipulate input bits of a secret key (k), said conditional exchange module being suitable for applying an exchange formula comprising a combination of a condition (b) of the input bit with the first and second vectors (R0, R1) so that the latter are interchanged only if the condition (b) of the input bit is equal to ‘1’, wherein the conditional exchange module comprises a masking module configured to make use of at least one random number (r) to mask said exchange formula before it is applied according to the following steps:
A masking system within an integrated circuit configured to implement an asymmetric cryptography operation, said implementation including a conditional exchange operation between first and second vectors (Ro, R1) used to manipulate input bits of a secret key (k), said conditional exchange operation being adapted to apply an exchange formula comprising a combination of a condition (b) of the input bit with the first and second vectors so that the latter are interchanged only if the condition (b) of the input bit is equal to ‘1’, wherein said system makes use of at least one random number to mask said exchange formula before it is applied according to the following steps:
Dependencies are inferred from the claim text.