| 摘要 |
PROBLEM TO BE SOLVED: To safely perform encryption operation with respect to a cache timing attack without changing an element size of a pre-calculation table.SOLUTION: An encryption operation device 1 comprises: a cache memory 2 including a plurality of cache sets each formed from a plurality of cache lines; a main memory 3 including a plurality of memory block groups corresponding to the cache sets; a table storage section 4 for storing a pre-calculation table including, as elements, combinations of a plurality of mutually different reference values and conversion results of executing arbitrary conversion on the reference values; a table holding section 5 for holding the pre-calculation table in N+1 pieces or less of memory block groups; a cache control section 7 for reading a desired element of the pre-calculation table from the memory block group and holding the element in a cache set corresponding to the memory block group; and a computation section 8 for computing a conversion result by referring to the element of the pre-calculation table in accordance with a reference value computed from an arbitrary value. |
