DPA PROTECTION OF A RIJNDAEL ALGORITHM

摘要

A method of protecting a Rijndael-type algorithm executed by an electronic circuit against side channel attacks, wherein: each block of data to be encrypted or to be decrypted is masked with a first mask before a non-linear block substitution operation is applied based on a substitution box, and is then unmasked with a second mask after the substitution; and the substitution box is recalculated, block by block, before the non-linear operation is applied, the processing order of the blocks of the substitution box being submitted to a random permutation, commutative with the non-linear substitution operation.

主权项

1. A method, comprising:
protecting an electronic circuit against side channel attacks during processing of data by the electronic circuit, by: masking each block of data to be processed with a first mask; applying a non-linear block substitution operation based on a substitution box to the masked data; and unmasking a result of the application of the non-linear block substitution with a second mask, wherein the substitution box is recalculated, block by block, before applying the non-linear substitution operation, an order of processing of the blocks of the substitution box is subjected to a permutation, the permutation being commutative with the non-linear substitution operation.