PROTECTION OF A RIJNDAEL ALGORITHM

摘要

A method of protecting a Rijndael-type algorithm executed by an electronic circuit against side channel attacks, wherein: each block of data to be encrypted or decrypted is masked with a first mask before applying a non-linear block substitution operation from a first substitution box, and is then unmasked by a second mask after the substitution; the substitution box is recalculated, block by block, before applying the non-linear operation, the processing order of the blocks of the substitution box being submitted to a random permutation; and the recalculation of the substitution box uses the second mask as well as third and fourth masks, the sum of the third and fourth masks being equal to the first mask.

主权项

1. A method, comprising:
protecting an electronic circuit against side channel attacks during processing of data by the electronic circuit, by: masking each block of data to be processed with a first mask; applying a non-linear block substitution operation based on a first substitution box to the masked data; and unmasking a result of the application of the non-linear block substitution operation with a second mask, wherein the substitution box is recalculated, block by block, before applying the non-linear substitution operation, an order of processing of the blocks of the substitution box is subjected to a random permutation, and the recalculation of the substitution box uses the second mask as well as third and fourth masks, a combination of the third and fourth masks being equal to the first mask.