Generation of a random number that is non-divisible by a set of prime numbers
View Patent ↗A random number that is co-prime with a set of prime numbers is generated, without having to calculate the greatest common denominator of the numbers. The value of 1−x λ (mod π), where x is a randomly generated value and λ is the Carmichael function, is tested to determine whether it is non-zero. If it equals zero, x is chosen as the random number of interest. Otherwise the value for x is updated, and the procedure is repeated. Due to the minimal amount of computation resources required to select x, the process is particularly well suited for generating cryptographic keys in portable electronic devices, such as smart cards.
1. A method performed on a portable electronic device for generating a random number that is co-prime with a set of prime numbers p i , comprising the following steps:
(i) calculating the value λ=λ(π), where λ is the Carmichael function and π=Πp i ,
(ii) Selecting a random value x<π;
(iii) Determining whether U=(1−x π ) mod π is equal to zero;
(iv) Repeating from step (iii) with a new value of x, if U does not equal zero, until U=0;
(v) Using the generated random number x as a key in a cryptographic process when U=0.
2. The method of claim 1 , wherein the new value for x is determined by combining an update factor with a current value for x.
3. The method of claim 2 wherein said update factor is based upon a random number r.
4. The method of claim 3 wherein said update factor is the product of said random number r and U.
5. The method of claim 3 wherein said random number r is less than π.
6. The method of claim 3 wherein π=Πp i δ i , where δ i is positive, and said update factor is calculated as r δ U, where δ is the maximum value for δ i .
7. The method of claim 2 wherein said update factor is determined by a hash function.
8. The method of claim 7 wherein said hash function is performed on x.
9. The method of claim 2 further including the step of determining whether said update factor is equal to zero, and combining said update factor with the current value for x only if it has a non-zero value, modulo π.
10. The method of claim 1 , wherein the value for λ is pre-calculated and stored in memory for use in said method.
11. A portable electronic device having stored therein a program which executes the following steps:
(i) calculating the value λ=λ(π), where λ is the Carmichael function and π=Πp 1 ,
(ii) selecting a random value x<π;
(iii) determining whether U=(1−x λ ) mod π is equal to zero;
(iv) providing x as the generated random number when U=0; and
(v) repeating steps (iii) and (iv) with a new value for x when U does not equal zero.
12. The portable electronic device of claim 11 further including an arithmetic coprocessor that performs steps (iii) and (iv).
13. The portable electronic device of claim 11 wherein the new value for x is determined by combining an update factor with a current value for x.
14. The portable electronic device of claim 13 wherein said program executes the further steps of determining whether said update factor is equal to zero, and combining said update factor with the current value for x only if it has a non-zero value, modulo π.
15. The portable electronic device of claim 11 further including a memory storing the calculated value for λ for use during each execution of said program.