Qualcomm Incorporated

Nicolas Thaddee Courtois

Frederic Amiel

Matthew Scott McGregor

Tanya Mahajan

Gur Prasad Srivastava

Florian Reneld Ghislain Caullery

Systems and techniques are described herein for information protection. For example, a process may include obtaining a security information asset at a randomizing engine; performing a first randomization of the security information asset to obtain a randomized security information asset; providing the randomized security information asset to a secure storage device; obtaining the randomized security information asset from the secure storage device; performing a second randomization of the security information asset to obtain an updated randomized security information asset; and providing the updated randomized security information asset to a security component, wherein the updated randomized security information asset is used to perform a security operation.

Key management and protection in secure execution environments

Systems and techniques are provided for secure processing. For instance, a process can include: providing an input value to generate a first output value; obtaining a plurality of first intermediate output values based on a function of the first output value and a tweak value; embedding the plurality of first intermediate output values into a mathematical structure; obtaining a plurality of second intermediate output values, wherein the plurality of second intermediate output values are a function of the plurality of first intermediate output values, a random number, and an inverse of the tweak value; determining a most common value of the plurality of second intermediate output values; obtaining a third intermediate value, the third intermediate value based on a function of the most common value and an inverse of the random number; projecting the third intermediate value from the mathematical structure to obtain a second output value for output.

Triplication-based fault attack countermeasure

Data blocks of an input data unit may be received in parallel as a data segment on a data bus. For each received data segment, tweak values corresponding to the data blocks may be generated using a key and an input vector. The data blocks may be encrypted using parallel encryption circuitry blocks, based on a symmetric block cipher that uses another key and one of the tweak values. The encrypted data blocks may be combined into an output data unit.

Growing community of inventors

Mougins, France

Nicolas Thaddee Courtois