| 摘要 |
<p>The invention relates to a circuit for carrying out a calculation of user input data in order to obtain user output data, comprising a device (12) for performing an algorithm with one or several algorithm steps and a control device (18). The control device (18) controls the performing device (12) in such a way that it performs one or more algorithm steps prior to performing the algorithm with the user input data in order to obtain user output data, and/or after performing said algorithm. Said algorithm steps are provided in order to destroy or at least reduce the correlation between overall execution time and user input data. Differentiation of the algorithm steps during the performance of the actual algorithm and the algorithm steps, making timing attacks more difficult either prior thereto or afterwards, is made more difficult by performing all algorithm steps using the same device whereby it is impossible to make a distinction using power attacks such as SPA, for example.</p> |
