METHOD AND DEVICE FOR SECURING AN EXPONENTIATION CALCULATION BY MEANS OF THE CHINESE REMAINDER THEOREM (CRT)

摘要

The invention relates to a method for securing an exponentiation calculation by means of the Chinese remainder theorem, wherein the joining step (16) in particular, during which, preferably, the joining algorithm according to Garner is used, is monitored (18) for correctness prior to the output (24) of the result of the joining step. Verification occurs directly before the output of the result of the exponentiation calculation of the joining algorithm in order to be able to prevent outputs of an incorrect result, for example as a result of a hardware error attack, so that said error attack can be warded off.