| 摘要 |
<P>PROBLEM TO BE SOLVED: To solve the problem that the duplex method is fragile for the secondary DPA. <P>SOLUTION: In an encryption device, a division part divides a plaintext with a mask into a plurality of pieces of first division data. A first generation part generates a plurality of pieces of division input data from the plurality of pieces of first division data. A reception part receives the plurality of pieces of division input data, a first mask, and a second mask. A nonlinear conversion part generates a plurality of pieces of division output data that are obtained by converting the plurality of pieces of division input data. A data integration part generates an encrypted text with a mask by integrating a plurality of pieces of second division data. An unmask processing part generates an encrypted text from the encrypted text with a mask. The exclusive OR of the plurality of pieces of division input data coincides with the exclusive OR between the input data on which nonlinear conversion processing should be performed and calculated from the plaintext and the first mask. The exclusive OR of the plurality of pieces of division output data coincides with the exclusive OR between the converted data obtained when the nonlinear conversion processing is performed on input data and the second mask. <P>COPYRIGHT: (C)2012,JPO&INPIT |
