The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 23, 2025

Filed:

Apr. 28, 2022
Applicants:

Institute of Information Engineering, Chinese Academy of Sciences, Beijing, CN;

Data Assurance and Communications Security Research Center, Chinese Academy of Sciences, Beijing, CN;

Inventors:

Wei Wang, Beijing, CN;

Yuo Fu, Beijing, CN;

Jingqiang Lin, Beijing, CN;

Li Song, Beijing, CN;

Qiongxiao Wang, Beijing, CN;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/32 (2006.01); H04L 9/06 (2006.01); H04L 9/40 (2022.01);
U.S. Cl.
CPC ...
H04L 9/3252 (2013.01); H04L 9/0643 (2013.01); H04L 63/1466 (2013.01);
Abstract

The invention discloses a calculation method and device for elliptic curve digital signature to resist memory disclosure attacks aiming signing private keys, which belongs to the field of cryptography technology. The method described in the invention includes the following steps. During initialization phase happened in a trusted environment, the key of symmetric cryptographic algorithm is used to encrypt the random number k1 and the private key used for signing, the scalar multiplication k1×G is calculated. At each signing phase, the plaintext data used to calculate s is calculated based on the selected signature algorithm and the value of scalar multiplication k1×G. The plaintext data used to calculate s include r or the data calculated based on r. Inside registers, s is calculated based on the above plaintext data and the ciphertext of random number k1 and the ciphertext of the private key. The signature of the message is (r, s). The invention ensures that operations executed in memory will not expose any information related to the private key and the random number because calculations involve sensitive data are executed inside registers. The invention also reduces performance overhead, improves compatibility and scalability, and has a wide range of application.


Find Patent Forward Citations

Loading…