专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

EP1399807B1 BROUILLAGE D'UN CALCUL METTANT EN OEUVRE UNE FONCTION MODULAIRE 无效
标题翻译：一模函数的领先计算CONCEALMENT
公开(公告)号：EP1399807B1
公开(公告)日：2007-06-20
申请号：EP02735524.7
申请日：2002-04-29
申请人： STMicroelectronics S.A.
发明人： LIARDET, Pierre-Yvan , ROMAIN, Fabrice
IPC分类号： G06F7/72
CPC分类号： G06F7/72 , G06F21/755 , G06F2207/7247
摘要： The invention concerns a method for encrypting, with a random quantity (r), a calculation using at least a modular operation (3), the method consisting in multiplying a first modulo (n) by said random quantity, in taking as modulo of the operation, the result (m) of said multiplication and in carrying out a modular reduction of the result of the operation, on the basis of the first modulo (n).

2. 发明公开

EP1166495A1 PROCEDE DE CONTRE-MESURE DANS UN COMPOSANT ELECTRONIQUE METTANT EN OEUVRE UN ALGORITHME DE CRYPTOGRAPHIE A CLE PUBLIQUE DE TYPE COURBE ELLIPTIQUE 审中-公开
标题翻译：针对一种电子部件ACTION方法，其加密算法BY基于公共密钥的ON AN椭圆曲线用途
公开(公告)号：EP1166495A1
公开(公告)日：2002-01-02
申请号：EP00915215.8
申请日：2000-03-22
申请人： Gemplus
发明人： CORON, Jean-Sébastien
IPC分类号： H04L9/30
CPC分类号： G06F7/725 , G06F2207/7238 , G06F2207/7247 , G06F2207/7257 , H04L9/003 , H04L9/3066 , H04L2209/046 , H04L2209/08
摘要： The invention relates to a countermeasure method in an electronic component implementing an elliptical curve based public key cryptography algorithm, comprising the calculation of a new decryption integer d' such as the decryption of an encrypted message with the aid of a decryption algorithm on the basis of a private key d and the number of points n of said elliptical curve whereby the same result is achieved with d' as with d, by performing the operation Q=d*P, whereby P is a point of the curve. The inventive measure is characterized in that it comprises four steps: 1) a security parameter s is determined, whereby in practice it is impossible to take s as a neighbour of 30, 2) a random number k ranging from 0-21s is drawn, 3) the integer d'=d+k*n is calculated, 4) Q=d'.P is calculated.

3. 发明公开

EP0986873A1 IMPROVED METHOD AND APPARATUS FOR PROTECTING PUBLIC KEY SCHEMES FROM TIMING AND FAULT ATTACKS 失效
标题翻译：用于保护加密过程基于公开键针对与时序和错误送纸ATTACKS改进方法和设备
公开(公告)号：EP0986873A1
公开(公告)日：2000-03-22
申请号：EP98923379.6
申请日：1998-05-12
申请人： YEDA RESEARCH & DEVELOPMENT COMPANY, LTD.
发明人： SHAMIR, Adi
IPC分类号： H04L9/30
CPC分类号： H04L9/302 , G06F7/723 , G06F2207/7247 , G06F2207/7257 , G06F2207/7271 , H04L9/004 , H04L9/005 , H04L2209/08
摘要： Improved methods and apparatus for protecting public key schemes based on modular exponentiation (including RSA and Diffie-Hellman) from indirect cryptanalytic techniques such as timing and fault attacks. Known methods for making the implementation of number-theoretic schemes resistant to such attacks typically double their running time, whereas the novel methods and apparatus described in this patent add only negligible overhead. This improvement is particularly significant in smart card and software-based implementations, in which the modular exponentiation operation is quite slow, and doubling its time may be an unacceptable solution.

4. 发明公开

EP3287892A1 PROTECTION D'UN CALCUL D'EXPONENTIATION MODULAIRE 有权
标题翻译：保护模块化的指数计算
公开(公告)号：EP3287892A1
公开(公告)日：2018-02-28
申请号：EP17156309.1
申请日：2017-02-15
申请人： STMICROELECTRONICS (ROUSSET) SAS
发明人： DIOP, Ibrahima , LINGE, Yanis , LIARDET, Pierre-Yvan
IPC分类号： G06F7/72
CPC分类号： G06F7/723 , G06F7/58 , G06F7/722 , G06F21/72 , G06F2207/7247
摘要： L'invention concerne un procédé de protection d'un calcul d'exponentiation modulaire sur un premier nombre (M) et un exposant (d), modulo un premier modulo (N), exécuté par un circuit électronique (1) utilisant un premier registre ou emplacement mémoire (T0) et un deuxième registre ou emplacement mémoire (T1), comportant successivement, pour chaque bit de l'exposant (d) : un tirage d'un nombre aléatoire (r i ) ; une multiplication modulaire (36, 36') du contenu du premier registre ou emplacement mémoire par celui du deuxième registre ou emplacement mémoire, en plaçant le résultat dans l'un des premier et deuxième registres ou emplacements mémoire choisi en fonction de l'état du bit de l'exposant ; un carré modulaire (37, 37') du contenu de l'un des premier et deuxième registres ou emplacements mémoire choisi en fonction de l'état de l'exposant, en plaçant le résultat dans ce registre ou emplacement mémoire choisi, les opérations de multiplication et de carré étant effectuées modulo le produit du premier modulo par ledit nombre aléatoire.
摘要翻译：本发明涉及一种用于保护由电子电路（1）使用第一寄存器（1）执行的对第一数（M）和指数（d）进行模幂运算的方法，其中第一模（N）或存储器位置（T0）和第二寄存器或存储器位置（T1），对于指数（d）的每一位依次包括：随机数（ri）的绘制; 第一寄存器或存储单元的内容的模乘（36,36'）与第二寄存器或存储单元的内容的模乘（36,36'），将结果放置在第一和第二寄存器或根据指数位; 根据指数的状态选择第一和第二寄存器或存储器位置之一的内容的模块方块（37,37'），将结果放入该寄存器或选定的存储器位置，乘法和平方以所述随机数的第一模数的乘积进行模数化。

5. 发明授权

EP2401734B1 SYSTEM AND METHOD FOR PERFORMING EXPONENTIATION IN A CRYPTOGRAPHIC SYSTEM 有权转让
标题翻译：系统和方法用于进行增强在密码系统
公开(公告)号：EP2401734B1
公开(公告)日：2016-04-20
申请号：EP10745753.3
申请日：2010-02-18
申请人： Certicom Corp.
发明人： EBEID, Nevine Maurice Nassif , LAMBERT, Robert John
IPC分类号： G09C5/00 , G06F7/72 , H04L9/28 , H04L9/00 , H04L9/32
CPC分类号： G06F7/723 , G06F2207/7233 , G06F2207/7247 , G06F2207/7257 , H04L9/004 , H04L9/3249

6. 发明公开

EP1272984A1 TRAGBARER DATENTRÄGER MIT ZUGRIFFSSCHUTZ DURCH NACHRICHTENVERFREMDUNG 有权
标题翻译：与免遭旁路攻击便携式媒体
公开(公告)号：EP1272984A1
公开(公告)日：2003-01-08
申请号：EP00990805.4
申请日：2000-12-20
申请人： Giesecke & Devrient GmbH
发明人： DREXLER, Hermann , VATER, Harald
IPC分类号： G07F7/10 , G06F7/72
CPC分类号： G07F7/1008 , G06F7/723 , G06F2207/7238 , G06F2207/7247 , G06F2207/7257 , G06Q20/341 , G06Q20/40975 , G07F7/1016 , H04L9/003
摘要： The invention relates to a data carrier comprising a semiconductor chip provided with at least one memory in which an operating program is stored. Said operating program contains a number of instructions, whereby each instruction is elicited by signals that can be detected outside of the semiconductor chip. According to the invention, the data carrier is designed in such a way that data which is repeatedly used for computation is rendered unfamiliar with different functions.

7. 发明公开

EP2401734A1 SYSTEM AND METHOD FOR PERFORMING EXPONENTIATION IN A CRYPTOGRAPHIC SYSTEM 有权转让
标题翻译：系统和方法用于进行增强在密码系统
公开(公告)号：EP2401734A1
公开(公告)日：2012-01-04
申请号：EP10745753.3
申请日：2010-02-18
申请人： Certicom Corp.
发明人： EBEID, Nevine Maurice Nassif , LAMBERT, Robert John
IPC分类号： G09C5/00 , G06F7/72 , H04L9/28
CPC分类号： G06F7/723 , G06F2207/7233 , G06F2207/7247 , G06F2207/7257 , H04L9/004 , H04L9/3249
摘要： There are disclosed systems and methods for computing an exponentiated message. In one embodiment blinding is maintained during the application of a Chinese Remainder Theorem (CRT) algorithm and then removed subsequent to the completion of the CRT algorithm. In another embodiment, fault injection attacks, such as the gcd attack, can be inhibited by applying and retaining blinding during the application of the CRT algorithm to yield a blinded exponentiation value, and then subsequently removing the blinding in a manner that causes an error injected into the CRT computation to cascade into the exponent of the value used to unblind the blinded exponentiated value.

8. 发明公开

EP1423786A2 VORRICHTUNG UND VERFAHREN ZUM BERECHNEN EINES ERGEBNISSES EINER MODULAREN EXPONENTIATION 审中-公开
标题翻译：装置和方法用于计算模幂的一个结果
公开(公告)号：EP1423786A2
公开(公告)日：2004-06-02
申请号：EP02797920.2
申请日：2002-08-22
申请人： Infineon Technologies AG
发明人： SEIFERT, Jean-Pierre , VELTEN, Joachim
IPC分类号： G06F7/72
CPC分类号： G06F7/723 , G06F2207/7242 , G06F2207/7247 , G06F2207/7271 , H04L9/004 , H04L9/302
摘要： The invention relates to a device for calculating the result of a modular exponentiation based on the Chinese Remainder Theorem (CRT), whereby two auxiliary exponentiations are calculated by using two auxiliary exponents and two sub-modules. The aim of the invention is to increase the security of the RSA-CRT-calculation against cryptographic attacks. As a result, a randomisation of the auxiliary exponents and/or an alteration of the sub-modules is carried out. The Chinese Remainder Theorem enables secure RSA-decoding or RSA-coding to take place by means of the calculation time efficiency.

9. 发明授权

EP3115887B1 METHOD, DEVICE AND NON-TRANSITORY COMPUTER-READABLE MEDIUM FOR CRYPTOGRAPHIC COMPUTATION 有权
公开(公告)号：EP3115887B1
公开(公告)日：2018-07-04
申请号：EP16162209.7
申请日：2016-03-24
申请人： Winbond Electronics Corp.
发明人： KALUZHNY, Uri
IPC分类号： G06F7/72
CPC分类号： G06F7/728 , G06F21/602 , G06F2207/7247
摘要： A method, a device and a non-transitory computer-readable medium for cryptographic computation are provided. The method for computation includes: receiving, in a Montgomery multiplier circuit having a predefined block size, a pair of operands A and B and a modulus M for computation of a Montgomery product of A and B mod M; specifying a number n of blocks of the predefined block size to be used in the computation; computing a blinded modulus M' as a multiple of the modulus M by a random factor R, M' = R*M, while selecting R so that the length of M' is less than n times the block size by at least two bits; and operating the Montgomery multiplier circuit to compute and output the Montgomery product of A and B mod M'.

10. 发明公开

EP3115887A1 METHOD, DEVICE AND NON-TRANSITORY COMPUTER-READABLE MEDIUM FOR CRYPTOGRAPHIC COMPUTATION 有权
标题翻译： VERFAHREN，VORRICHTUNG UND NICHTTRANSITORISCHES COMPUTERLESBARES MEDIUM ZUR KRYPTOGRAFISCHEN BERECHNUNG
公开(公告)号：EP3115887A1
公开(公告)日：2017-01-11
申请号：EP16162209.7
申请日：2016-03-24
申请人： Winbond Electronics Corp.
发明人： KALUZHNY, Uri
IPC分类号： G06F7/72
CPC分类号： G06F7/728 , G06F21/602 , G06F2207/7247
摘要： A method, a device and a non-transitory computer-readable medium for cryptographic computation are provided. The method for computation includes: receiving, in a Montgomery multiplier circuit having a predefined block size, a pair of operands A and B and a modulus M for computation of a Montgomery product of A and B mod M; specifying a number n of blocks of the predefined block size to be used in the computation; computing a blinded modulus M' as a multiple of the modulus M by a random factor R, M' = R*M, while selecting R so that the length of M' is less than n times the block size by at least two bits; and operating the Montgomery multiplier circuit to compute and output the Montgomery product of A and B mod M'.
摘要翻译：提供了一种用于密码计算的方法，装置和非暂时性计算机可读介质。计算方法包括：在具有预定块大小的蒙哥马利乘法器电路中接收一对操作数A和B，以及用于计算A和B mod M的蒙哥马利乘积的模数M; 指定要在计算中使用的预定块大小的数量n的块; 通过随机因子R，M'= R * M计算盲模M'作为模M的倍数，同时选择R使得M'的长度小于块大小的n倍至少两位; 并运行蒙哥马利乘数电路来计算和输出A和B mod M'的蒙哥马利产品。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式