METHOD AND APPARATUS FOR SCALAR MULTIPLICATION SECURE AGAINST DIFFERENTIAL POWER ATTACKS

摘要

A method of scalar multiplication to obtain the scalar product between a key and a point on an elliptic curve, wherein the secret is m bits long. In selected embodiments, the first step is to partition the secret into two partitions each with m/2 bits. Point-doubling operations are performed on the point and stored into three buffers. Point additions are performed at randomized time intervals thereby preventing the method from being susceptible to differential power analysis attacks.

主权项

1. A method of scalar multiplication in a cryptography apparatus to obtain a scalar product of a point and a key, the method comprising:
obtaining the key in the cryptography apparatus; partitioning the key into a plurality of partitions; performing a first plurality of point-doubling operations on the point; storing point values in a plurality of buffers, wherein which buffers of the plurality of buffers the point values are stored in is determined by bit values of the plurality of partitions, the stored point values being the values of the point before point-doubling operations of the first plurality of point-doubling operations; and calculating a plurality of intermediate scalar multiplication values by performing point-addition operations, wherein each intermediate scalar multiplication value is a sum over all stored point values in a respective buffer of the plurality of buffers, and the point-addition operations for calculating a plurality of intermediate scalar multiplication values are performed at an at least one point-addition time.