Elliptic curve point multiplication operation method and apparatus

Patent metadata

Field	Value
Publication number	US-11003769-B2
Application number	US-201916970488-A
Country	US
Kind code	B2
Filing date	Jun 13, 2019
Priority date	Jun 22, 2018
Publication date	May 11, 2021
Grant date	May 11, 2021

Abstract

Disclosed are an elliptic curve point multiplication operation method and apparatus. The elliptic curve point multiplication operation method comprises ordered point multiplication and point addition operations. In a point addition operation process, when scanning that a current bit of a scalar K is not 0, a true point addition operation is executed, and when scanning that the current bit of the scalar K is 0, an equivalent point conversion operation is executed; the result of the true point addition operation and the result of the equivalent point conversion operation are stored in an identical register file, the register file comprising multiple registers. According to the elliptic curve point multiplication operation method and apparatus, side channel analysis and security error attack can be effectively resisted.

First claim

The invention claimed is:

1. An elliptic curve point multiplication operation method, which is configured to resist a side channel analysis attack and a safe-error attack of an attacker on ciphers in an elliptic curve cryptographic algorithm, comprising:
performing an ordered point multiplication operation on a point Q;
scanning a scalar K which is an integer in a binary form or a multi-ary form;
performing a true point addition operation on the point Q in response to scanning that a current bit of the scalar K is not 0;
performing an equivalent point conversion operation on the point Q in response to scanning that the current bit of the scalar K is 0; and
storing results of the true point addition operation and results of the equivalent point conversion operation in a same register file including a plurality of registers; and
applying the results of the true point addition operation and the results of the equivalent point conversion operation to resist a side channel analysis attack or a safe-error attack;
wherein the true point addition operation comprises a plurality of true point addition sub-operation steps, and after performing corresponding sub-operations, results of the true point addition operation are generated; and
wherein the equivalent point conversion operation comprises a plurality of equivalent point conversion sub-operation steps, and after performing corresponding sub-operations, results of the equivalent point conversion operation are generated;
wherein in response to the sub-operation step of the true point addition operation being identical with the sub-operation step of the equivalent point conversion operation, operation results generated by the two sub-operations in the identical steps are stored in a same register in the register file.

2. The elliptic curve point multiplication operation method of claim 1 , wherein in response to the true point addition operation and the equivalent point conversion operation respectively performing a true point addition sub-operation and an equivalent point conversion sub-operation in a same step, performing, by both the two sub-operations in the same step, addition and subtraction operations or a multiplication operation.

3. An elliptic curve point multiplication operation apparatus, comprising:
a processor coupled to a memory for executing modules;
an ordered point multiplication operation module, configured to perform an ordered point multiplication operation on a point Q;
a scanning module, configured to scan a scalar K which is an integer in a binary form or a multi-ary form;
a true point addition operation module, coupled with the scanning module and the ordered point multiplication operation module and configured to perform a true point addition operation on the point Q in response to scanning that a current bit of the scalar K is not 0;
an equivalent point conversion operation module, coupled with the scanning module and the ordered point multiplication operation module and configured to perform an equivalent point conversion operation on the point Q in response to scanning that the current bit of the scalar K is 0;
a storage module, coupled with the ordered point multiplication operation module, the true point addition operation module and the equivalent point conversion operation module and configured to store results of the true point addition operation and results of the equivalent point conversion operation in a same register file including a plurality of registers; and
an applying module, configured to apply the results of the true point addition operation and the results of the equivalent point conversion operation to resist a side channel analysis attack or a safe-error attack;
wherein the true point addition operation module comprises N true point addition operation sub-operation units which are respectively configured to perform each of sub-operation steps of the true point addition operation, and after the N true point addition operation sub-operation units perform corresponding sub-operations, results of the true point addition operation are generated; and
wherein the equivalent point conversion operation module comprises N equivalent point conversion operation sub-operation units which are respectively configured to perform each of sub-operation steps of the equivalent point conversion operation, and after the N equivalent point conversion operation sub-operation units perform corresponding sub-operations, results of the equivalent point conversion operation are generated;
wherein in response to the sub-operation step of the true point addition operation being identical with the sub-operation step of the equivalent point conversion operation, operation results generated by the two sub-operations in the identical steps are stored in a same register in the register file.

4. The elliptic curve point multiplication operation apparatus of claim 3 , wherein in response to the sub-operation step of the true point addition operation being identical with the sub-operation step of the equivalent point conversion operation, both the two sub-operations in the identical steps perform addition and subtraction operations or perform a multiplication operation.

5. A non-transitory computer-readable storage medium configured to store a computer program which causes a computer to perform an elliptic curve point multiplication operation method, which is configured to resist a side channel analysis attack and a safe-error attack of an attacker on ciphers in an elliptic curve cryptographic algorithm, comprising:
performing an ordered point multiplication operation on a point Q,
scanning a scalar K which is an integer in a binary form or a multi-ary form;
performing a true point addition operation on the point Q in response to scanning that a current bit of the scalar K is not 0;
performing an equivalent point conversion operation on the point Q in response to scanning that the current bit of the scalar K is 0; and
storing results of the true point addition operation and results of the equivalent point conversion operation in a same register file including a plurality of registers; and
applying the results of the true point addition operation and the results of the equivalent point conversion operation to resist a side channel analysis attack or a safe-error attack;
wherein the true point addition operation comprises a plurality of true point addition sub-operation steps, and after performing corresponding sub-operations, results of the true point addition operation are generated; and
wherein the equivalent point conversion operation comprisess a plurality of equivalent point conversion sub-operation steps, and after performing corresponding sub-operations, results of the equivalent point conversion operation are generated;
wherein in response to the sub-operation step of the true point addition operation being identical with the sub-operation step of the equivalent point conversion operation, operation results generated by the two sub-operations in the identical steps are stored in a same register in the register file.

6. The non-transitory computer-readable storage medium of claim 5 , wherein in response to the true point addition operation and the equivalent point conversion operation respectively performing a true point addition sub-operation and an equivalent point conversion sub-operation in a same step, performing, by both the two sub-operations in the same step, addition and subtraction operations or a multiplication operation.

Assignees

• Beijing Smartchip Microelectronics Tech Co Ltd
• State Grid Information & Telecommunication Group Co Ltd
• State Grid Corp China
• Beijing Smartchip Microelectronics Tech Comp

Inventors

• Zhao Dongyan
• Tang Xiaoke
• Yu Yanyan
• Hu Xiaobo
• Zang Shiping
• Gan Jie
• Liu Liang
• Zhang Zhe
• Tu Yinzi

Classifications

• G06F21/556 Primary

  involving covert channels, i.e. data leakage between processes (inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755) · CPC title

• G06F7/725 Primary

  over elliptic curves · CPC title

• G06F21/72 Primary

  in cryptographic circuits · CPC title