Microsoft Technology Licensing, LLC

Pqsecure Technologies, LLC

Emre Karabulut

Bharat S Pillilli

Mojtaba Bisheh Niasar

Mohamad Kamyar Mohajerani

A system and method for implementing CRYSTALS-KYBER cryptographic algorithms and CRYSTALS-Dilithium cryptographic algorithms using table-based Arithmetic-to-Boolean (A2B) masked share conversion that includes dividing an N-bit arithmetic share, used in at least one of a CRYSTALS-KYBER cryptographic algorithm and a CRYSTALS-Dilithium cryptographic algorithm, into k chunks each of an n-bit value in a logic shift processing element, applying a table-based A2B masked share conversion to each n-bit value chunk to generate Boolean shares having k chunks with an n-bit value, and concatenating the k chunks of the generated Boolean shares to generate a complete N-bit Boolean share.

Cryptographic processing system and method for implementing CRYSTALS-KYBER cryptographic algorithms and CRYSTALS-Dilithium cryptographic algorithms using table-based arithmetic-to-Boolean (A2B) masked share conversion

Generally discussed herein are devices, systems, and methods for digital signature generation security. A method can include generating, by a first device, a first random number, in generating a signature for a communication, masking, using the first random number, only a private key, a hash of the communication, or a combination thereof, and providing the signature with the communication to a second device.

Low-cost, high-security solutions for digital signature algorithm

Generally discussed herein are devices, systems, and methods for secure cryptographic masking. A method can include generating a first random number, determining a result of the first random number modulo a prime number resulting in a second random number, subtracting the second random number from the prime number resulting in a first subtraction result, adding a private key value to the first subtraction result resulting in a first split, and responsive to determining the private key value is less than the random number, providing the first split and the second random number as splits of the private key.

Simplified masking for signed cryptography operations

A hardware architecture configured to implement ASCON cryptographic algorithms and protect against side-channel attacks that includes a co-processor having a controller, a logic gate operably configured to receive a data input and ASCON state memory data in an initial cycle of permutation iterations, a multiplexor operably configured to direct data input from the logic gate based on a signal received from the controller and in the initial cycle of permutation iterations, an ASCON state memory operably configured to receive the processed data in the initial cycle of permutation iterations, and that is operably configured to implement a permutation round configured to receive the data input directly from the logic gate through the multiplexor and process the data input utilizing a permutation function to generate processed data and in the initial cycle of permutation iterations.

Growing community of inventors

Raleigh, NC, United States of America

Emre Karabulut