Cryptographic circuit protection from differential power analysis
AssigneeNXP B.V.
InventorJuergen Nowottnick
Life of this patent
Estimating the term…
Abstract
According to an example embodiment, a device provides cryptographic processing functions using secret data. The device can include protection from differential power analysis (DPA). The encryption processing circuit and its memory can be decoupled from external power source(s) during encryption-related computations. A local power storage element, such as a capacitive element, can provide power while the encryption processing circuit is decoupled from the external power source(s). The local power storage element can then be reconnected and charged once the encryption-related computations are completed or paused.
Claims16
A device comprising:
- an integrated circuit die having
- a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
- a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- and
- an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
- a control circuit configured and arranged to
- charge the power storage circuit by providing power from an external power source;
- and
- disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source;
- a substrate having one or more electrical traces configured and located in an intermediate layer of the substrate and to provide power from the control circuit to the integrated circuit die;
- and
- an inductive coil configured and arranged to receive power from received radio frequency (RF) signals and to at least mitigate detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit.
A method comprising:
- executing, using a cryptographic processing circuit that forms part of an integrated circuit die situated on a substrate, a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
- storing, in a power storage circuit that forms another part of the integrated circuit die, power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- controlling a switching circuit to
- charge the power storage circuit by providing power from an external power source, and
- disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source;
- and
- wherein executing the cryptographic algorithm includes providing power signals from the power storage circuit to the cryptographic processing circuit via connected electrical traces and using an inductive coil to at least mitigate detection of electromagnetic field changes caused by power drawn through the traces.
A device comprising:
- an integrated circuit die having
- a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that is subject to side channel attacks that use power consumption of the cryptographic processing circuit;
- a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
- a first electrical connection port for external connection;
- a switching control circuit configured and arranged to
- operate in each of two alternative modes, a first mode charging the power storage circuit using power provided from an external power source and a second mode acting to block the power provided from the external power source and to provide power from the power storage circuit to the cryptographic processing circuit,
- determine a condition prompting execution of the algorithm and in response to the determination, select between the two alternative modes;
- an electrical trace configured and arranged to couple power from the power storage circuit to the cryptographic processing circuit in the second mode;
- an inductive coil configured and arranged with the electrical trace to at least mitigate detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit;
- and
- a second electrical connection port for external connection between the switching control circuit and electrical connection port of the integrated circuit die.
A device comprising:
- an integrated circuit die having
- a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
- a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
- and
- an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
- a control circuit configured and arranged to
- charge the power storage circuit by providing power from an external power source;
- and
- disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source;
- and
- a circuit-trace support structure having one or more electrical traces configured and arranged to provide power from the control circuit to the integrated circuit die and having an inductive coil configured and arranged to receive power from received radio frequency (RF) signals and to provide the received power to the control circuit, wherein the electrical traces are routed with and relative to the inductive coil and for providing power to the power storage circuit, thereby mitigating detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit.
Dependencies are inferred from the claim text.