Microsoft Technology Licensing, LLC

Mojtaba Bisheh Niasar

Bharat S Pillilli

Emre Karabulut

Test inputs are iteratively provided to a target asymmetric cryptographic system. Trace information resulting from operation of the cryptographic system is received corresponding to processing each test input. For each test input, test vector leakage assessment (TVLA) is performed on the trace information for the test input, t-values are stored, and the trace information is erased before proceeding to a next test input. In one example, a mean and variance of the trace information is updated for each test input.

Cryptographic system real-time test vector leakage assessment

A hash-based cryptographic system includes hash input registers and hash generators coupled in parallel with each other. Each hash generator of the hash generators is coupled to receive a corresponding hash input from one of the input registers. A controller is coupled to the input registers and configured to provide the corresponding hash input to the hash registers to cause the parallel hash generators to generate a private key for corresponding leaf nodes of a hash-based signature tree structure.

Hash based cryptography accelerator

Masked scalar blinding circuits for a side channel analysis (SCA) attack countermeasure are provided. A circuit can include logic gates configured to receive a private key and generate a first private key value and a second private key value that sum to the private key, a first multiplier configured to generate a first product based on a first random number and a multiplicative group order, a second multiplier configured to generate a second product based on a second random number and the multiplicative order group, and circuitry configured to generate a result and a carry out, based on the first private key value, second private key value, the first product, and the second product.

Elliptic curve cryptography masked blinding countermeasure

A computer implemented method includes receiving data on which to perform elliptic curve digital signature algorithm (ECDSA) and mapping ECDSA computations from affine coordinates to projective coordinates. A complete addition formula is executed on the data with operations changing based on bits of a secret key by minimizing execution time and power consumption differences via a finite adder. Modular multiplications are executed via a finite multiplier module. At least one countermeasure selected from the group consisting of randomizing a base point, generating a secret key using a two random number seed random number generator, using a randomized secret key to generate a signature, and randomizing signature generation is executed.

Side channel attack resistant cryptographic accelerator

Generally discussed herein are devices, systems, and methods for digital signature generation security. A method can include generating, by a first device, a first random number, in generating a signature for a communication, masking, using the first random number, only a private key, a hash of the communication, or a combination thereof, and providing the signature with the communication to a second device.

Low-cost, high-security solutions for digital signature algorithm

Generally discussed herein are devices, systems, and methods for secure cryptographic masking. A method can include generating a first random number, determining a result of the first random number modulo a prime number resulting in a second random number, subtracting the second random number from the prime number resulting in a first subtraction result, adding a private key value to the first subtraction result resulting in a first split, and responsive to determining the private key value is less than the random number, providing the first split and the second random number as splits of the private key.

Growing community of inventors

Ithaca, NY, United States of America

Mojtaba Bisheh Niasar