The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 21, 2023

Filed:

Dec. 18, 2018
Applicant:

Secure-ic Sas, Cesson-Sevigne, FR;

Inventors:

Sylvain Guilley, Paris, FR;

Cédric Murdica, Rennes, FR;

Assignee:

SECURE-IC SAS, Cesson-Sevigne, FR;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/30 (2006.01); H04L 9/00 (2022.01);
U.S. Cl.
CPC ...
H04L 9/302 (2013.01); H04L 9/004 (2013.01); H04L 9/3066 (2013.01); H04L 2209/04 (2013.01); H04L 2209/08 (2013.01);
Abstract

There is provided a device for protecting the execution of a cryptographic operation from attacks, the cryptographic operation being implemented by a cryptographic algorithm, the cryptographic operation comprising at least one modular operation between a main base (m) representing a data block and at least one scalar (d) in at least one finite starting group. The device is configured to determine at least one intermediary group (E') different from the at least one starting group (E), the number of intermediary groups being equal to the number of starting groups E. The device is further configured to determine at least one final group (E″) from the at least one starting group E and the at least one intermediary group E′. The base m being mapped to an auxiliary element (x) in the at least one intermediary group and to an auxiliary base (m″) in the at least one final group E″. The device performs a first elementary operation in each final group (E″i), the first elementary operation consisting in executing the modular operation between the auxiliary base (m″) and an auxiliary scalar (d) in each final group E″, which provides at least one result, the auxiliary scalar (d) being determined from the auxiliary element (x) and from the main scalar (d). The device further performs a second elementary operation in each starting group E, the second elementary operation consisting in executing the modular operation between an additional auxiliary base and an additional auxiliary scalar d′in each starting group, at least one of the additional auxiliary base and of the additional scalar being derived from the result of the first elementary operation.


Find Patent Forward Citations

Loading…