Cryptographic circuit protection from differential power analysis
View Patent ↗According to an example embodiment, a device provides cryptographic processing functions using secret data. The device can include protection from differential power analysis (DPA). The encryption processing circuit and its memory can be decoupled from external power source(s) during encryption-related computations. A local power storage element, such as a capacitive element, can provide power while the encryption processing circuit is decoupled from the external power source(s). The local power storage element can then be reconnected and charged once the encryption-related computations are completed or paused.
1. A device comprising:
an integrated circuit die having
a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm; and
an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
a control circuit configured and arranged to
charge the power storage circuit by providing power from an external power source; and
disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source;
a substrate having one or more electrical traces configured and located in an intermediate layer of the substrate and to provide power from the control circuit to the integrated circuit die; and
an inductive coil configured and arranged to receive power from received radio frequency (RF) signals and to at least mitigate detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit.
2. The device of claim 1 , further including a printed circuit board having the one or more electrical traces configured and arranged to provide power from the control circuit to the integrated circuit die.
3. The device of claim 1 , wherein the electrical traces are configured and routed underneath the inductive coil to inhibit detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit.
4. The device of claim 1 , wherein the encapsulation structure is configured and arranged to prevent operation of the cryptographic processing circuit in response to physical tampering with the encapsulation structure.
5. The device of claim 1 , wherein the power storage circuit includes a capacitive circuit with one or more capacitors, the capacitive circuit having sufficient capacitance to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm.
6. The device of claim 1 , wherein the cryptographic algorithm is one of DES, triple DES, AES, RSA and ECC.
7. The device of claim 1 , further including processing circuitry configured and arranged to use output data from the cryptographic processing circuit to provide a security code to an automobile entry system.
8. The device of claim 1 , where the device is an automotive key that further includes a transponder configured and arranged to wirelessly receive power during use of the automotive key.
9. The device of claim 1 , where the device is an automotive key configured and arranged to operate as a passive-keyless-entry (PKE) device powered by a battery located on a substrate that supports the integrated circuit die and the control circuit.
10. A method comprising:
executing, using a cryptographic processing circuit that forms part of an integrated circuit die situated on a substrate, a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
storing, in a power storage circuit that forms another part of the integrated circuit die, power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
controlling a switching circuit to
charge the power storage circuit by providing power from an external power source, and
disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source; and
wherein executing the cryptographic algorithm includes providing power signals from the power storage circuit to the cryptographic processing circuit via connected electrical traces and using an inductive coil to at least mitigate detection of electromagnetic field changes caused by power drawn through the traces.
11. The method of claim 10 , wherein the step of executing a cryptographic algorithm includes using a private key to encode data.
12. The method of claim 10 , wherein the step of charging the power storage circuit includes using the inductive coil to receive power from received RF signals, and using the received power for charging a capacitor located within an encapsulation structure that includes the capacitor and the cryptographic processing circuit.
13. A device comprising:
an integrated circuit die having
a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that is subject to side channel attacks that use power consumption of the cryptographic processing circuit;
a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm;
an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
a first electrical connection port for external connection;
a switching control circuit configured and arranged to
operate in each of two alternative modes, a first mode charging the power storage circuit using power provided from an external power source and a second mode acting to block the power provided from the external power source and to provide power from the power storage circuit to the cryptographic processing circuit,
determine a condition prompting execution of the algorithm and in response to the determination, select between the two alternative modes;
an electrical trace configured and arranged to couple power from the power storage circuit to the cryptographic processing circuit in the second mode;
an inductive coil configured and arranged with the electrical trace to at least mitigate detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit; and
a second electrical connection port for external connection between the switching control circuit and electrical connection port of the integrated circuit die.
14. The device of claim 13 , further including one or more electrical connections between the connection ports of the switching control circuit and the integrated circuit die that are susceptible to monitoring of power consumption.
15. The device of claim 14 , wherein the one or more electrical connections are part of a substrate upon which the integrated circuit die and the switching circuit are located.
16. A device comprising:
an integrated circuit die having
a cryptographic processing circuit configured and arranged to execute a cryptographic algorithm that causes a detectable change in power consumption by the cryptographic processing circuit;
a power storage circuit configured and arranged to store power sufficient for the cryptographic processing circuit to execute the cryptographic algorithm; and
an encapsulation structure that encapsulates the cryptographic processing circuit and the power storage circuit and that is configured and arranged to prevent physical tampering therewith;
a control circuit configured and arranged to
charge the power storage circuit by providing power from an external power source; and
disable, in response to the cryptographic processing circuit executing the cryptographic algorithm, the charging of the power storage circuit using the power from the external power source; and
a circuit-trace support structure having one or more electrical traces configured and arranged to provide power from the control circuit to the integrated circuit die and having an inductive coil configured and arranged to receive power from received radio frequency (RF) signals and to provide the received power to the control circuit, wherein the electrical traces are routed with and relative to the inductive coil and for providing power to the power storage circuit, thereby mitigating detection of electromagnetic field changes caused by power consumption from the cryptographic processing circuit.