False key-controlled aggressive voltage scaling
Methods and systems are provided for single false key-controlled (SFKC) aggressive voltage scaling (AVS) and multiple parallel false key controlled (MPFKC) AVS countermeasure systems. When a plaintext value is input into a cryptographic circuit for modification by a correct key, power supplied to the cryptographic circuit is scaled based on a result of the plaintext value modified by a false key or by a random number of parallel false keys, which occurs during every clock cycle. The scaling may be triggered when the operating frequency of the cryptographic circuit falls below a threshold, which indicates occurrence of a leakage power attack. A key that is detectable within a power trace of the scaled power provided to the cryptographic circuit, with a highest correlation coefficient relative to a known key, is a key other than the correct key. The MPFKC AVS technique also inhibits unriddling of the input power scaling scheme.
1. A system for false key-controlled voltage scaling, the system comprising:
a power supply comprising an analog input, and an output that provides power to a cryptographic circuit;
an electronic controller operatively coupled to the analog input of the power supply, wherein the electronic controller:
receives a plaintext value that is also input to the cryptographic circuit, wherein the cryptographic circuit modifies the plaintext value with a correct key;
controls, based on a result of the plaintext value modified by a first false key, the analog input to scale the power provided via the output of the power supply to the cryptographic circuit; and
wherein the electronic controller selects a random number of parallel false keys, and for every selected parallel false key, modifies an instance of the plaintext value with a respective one of the selected parallel false keys during a same clock period for determining a magnitude of the scaling of the power provided to the cryptographic circuit.
2. The system of claim 1 , wherein the electronic controller controls the analog input to scale the power provided to the cryptographic circuit during the same clock period when the cryptographic circuit modifies the plaintext value with the correct key.
3. The system of claim 1 further comprising:
a data converter that receives the result of the plaintext value modified by the first false key and generates an analog signal to drive the analog input, wherein the result of the plaintext value modified by the first false key determines a magnitude of the scaling of the power provided to the cryptographic circuit.
4. The system of claim 1 further comprising:
a frequency comparator that detects when an operating frequency of the cryptographic circuit falls below a reference frequency threshold, wherein the electronic controller controls the power provided to the cryptographic circuit further based on the detection of the operating frequency of the cryptographic circuit falling below the reference frequency threshold.
5. The system of claim 1 , wherein the modification of the plaintext value with the first false key occurs in response to an operating frequency of the cryptographic circuit falling below a reference frequency threshold.
6. The system of claim 1 , wherein the electronic controller determines the result of the plaintext value modified by the first false key based on a logical combination of the plaintext value and a value of the first false key.
7. The system of claim 1 , wherein the electronic controller controls the power provided to the cryptographic circuit further based on the plaintext value modified by a second false key during the same clock period.
8. The system of claim 1 , wherein a random number of false keys are used to modify the plaintext value in every clock period for the scaling of the power provided to the cryptographic circuit.
9. The system of claim 1 , wherein a key that is detectable within a power trace of the scaled power provided to the cryptographic circuit with a highest correlation coefficient relative to a known key is a key other than the correct key.
10. A method for false key-controlled voltage scaling, the method comprising:
providing power to a cryptographic circuit via an output of a power supply;
receiving by an electronic controller operatively coupled to an analog input of the power supply, a plaintext value that is also input to the cryptographic circuit, wherein the cryptographic circuit modifies the plaintext value with a correct key;
controlling, by the electronic controller and based on a result of the plaintext value modified by a first false key, the analog input to scale the power provided to the cryptographic circuit; and
wherein the electronic controller selects a random number of parallel false keys, and for every selected parallel false key, modifies an instance of the plaintext value with a respective one of the selected parallel false keys during a same clock period for determining a magnitude of the scaling of the power provided to the cryptographic circuit.
11. The method of claim 10 , wherein controlling the power provided to the cryptographic circuit is further based on the result of the plaintext value modified by the first false key occurs during the same clock period when the cryptographic circuit modifies the plaintext value with the correct key.
12. The method of claim 10 further comprising:
receiving, by a data converter, the result of the plaintext value modified by the first false key;
generating an analog signal to drive the analog input; and
determining a magnitude of the scaling of the power provided to the cryptographic circuit based on the result of the plaintext value modified by the first false key.
13. The method of claim 10 further comprising:
detecting when an operating frequency of the cryptographic circuit falls below a reference frequency threshold; and
determining when to scale the power provided to the cryptographic circuit based on the detection of the operating frequency of the cryptographic circuit falling below the reference frequency threshold.
14. The method of claim 10 , wherein the modification of the plaintext value with the first false key occurs in response to an operating frequency of the cryptographic circuit falling below a reference frequency threshold.
15. The method of claim 10 , wherein the result of the plaintext value modified by the first false key is determined based on a logical combination of the plaintext value and a value of the first false key.
16. The method of claim 10 , wherein controlling the analog input to scale the power provided to the cryptographic circuit is further based on the result of the plaintext value modified by the first false key and the plaintext value modified by a second false key during the same clock period.
17. The method of claim 10 , wherein a random number of false keys are used to modify the plaintext value in every clock period for the scaling of the power provided to the cryptographic circuit.
18. The method of claim 10 , wherein a key detected within a power trace of scaled power provided to the cryptographic circuit with a highest correlation coefficient relative to a known key is a key other than the correct key.