Encryption device and method for defending a physical attack

1. An integrated circuit for executing an encryption algorithm using an encryption key by receiving an input data to be encrypted, the integrated circuit comprising:

a plurality of encryption key modules;

an encryption key module selector to select one of the plurality of encryption key modules;

a processor to execute the encryption algorithm using an encryption key provided by the selected encryption key module; and

a plurality of standard cells, wherein the plurality of encryption key modules are disposed at random positions among layouts of the plurality of standard cells.

2. The integrated circuit of claim 1 , wherein the encryption key module selector selects an encryption key module corresponding to a pre-assigned identification index from among the plurality of encryption key modules.

3. The integrated circuit of claim 1 , wherein:

the encryption key provided by the selected encryption key module does not leak out of the integrated circuit, and an additional encryption key for executing the encryption algorithm does not flow in the integrated circuit.

4. The integrated circuit of claim 1 , wherein the encryption key module comprises a non-volatile memory to store a pre-generated encryption key.

5. The integrated circuit of claim 1 , wherein the encryption key module comprises a non-memory module to generate and provide the encryption key.

6. The integrated circuit of claim 1 , wherein the integrated circuit is disposed in a smart card to execute the encryption algorithm in applications of the smart card.

7. An encryption device for executing an encryption algorithm using an encryption key by receiving an input data to be encrypted, the encryption device comprising:

an encryption module, comprising an encryption key module to provide an encryption key, to execute the encryption algorithm using the encryption key, the encryption key module comprising nodes,

wherein the nodes comprise conductive layers of a semiconductor, and

wherein whether the nodes are shorted is probabilistically determined by violating a design rule provided in a semiconductor manufacturing process, and the encryption key module generates and provides the encryption key based on a result of reading whether the nodes are shorted.

8. The encryption device of claim 7 , wherein the design rule is associated with a size of a via or a contact formed between the conductive layers of the semiconductor, and the encryption key module generates and provides the encryption key based on whether the via or the contact shorts the conductive layers.

9. The encryption device of claim 8 , wherein the via or the contact has a size by which a difference between a probability that the via or the contact shorts the conductive layers and a probability that the via or the contact does not short the conductive layers is within a predetermined error range by violating the design rule.

10. The encryption device of claim 7 , wherein the encryption key module comprises N unit structures, each one of which generates a 1-bit digital value using a single pair of conductive layers and a single via or a contact connecting the conductive layers, and generates an N-bit digital value generated through the N unit structures as the encryption key,

wherein N denotes a natural number.

11. The encryption device of claim 10 , wherein the encryption key module generates an N/k-bit digital value as the encryption key, by dividing the generated N-bit digital value into k units, comparing a first group to a second group, among the plurality of groups, determining digital values representing the first group and the second group to be “1” when a value comprising k digital bits included in the first group is greater than a value comprising k digital bits included in the second group, and determining the digital values representing the first group and the second group to be “0” when the value comprising k digital bits included in the first group is less than or equal to the value comprising k digital bits included in the second group,

wherein k denotes a natural number.

12. The encryption device of claim 7 , wherein:

the design rule is associated with a gap between the conductive layers of the semiconductor, and the encryption key module generates and provides the encryption key based on whether the conductive layers of the semiconductor are shorted.

13. An encryption device for executing an encryption algorithm using an encryption key by receiving an input data to be encrypted, the encryption device comprising:

an encryption module, comprising an encryption key module to provide an encryption key, to execute the encryption algorithm using the encryption key,

wherein:

the encryption key module comprises N unit cells, each to output a 1-bit digital value, each of the N unit cells generates the 1-bit digital value based on a semiconductor manufacturing process variation, and

the encryption key module generates and provides an encryption key of N bits,

wherein N denotes a natural number.

14. The encryption device of claim 13 , wherein a first unit cell among the N unit cells comprises:

a first inverter having a first logic threshold; and

a second inverter having a second logic threshold,

wherein the first inverter and the second inverter form a feedback structure in which an input terminal of the first inverter and an output terminal of the second inverter are connected to a first node, and an output terminal of the first inverter and an input terminal of the second inverter are connected to a second node, and

the first logic threshold is different from the second logic threshold based on the semiconductor manufacturing process variation, and a 1-bit digital value corresponding to the first unit cell is determined based on a logical level of the first node and a logical level of the second node.

15. An encryption device for executing an encryption algorithm using an encryption key by receiving an input data to be encrypted, the encryption device comprising:

an encryption module, comprising an encryption key module to provide an encryption key, to execute the encryption algorithm using the encryption key,

wherein the encryption key module comprises N differential amplifiers,

wherein, when two input terminals of a first differential amplifier, among the N differential amplifiers, are shorted, logical levels of two output terminals of the first differential amplifier differ from each other based on the semiconductor manufacturing process variation, and a 1-bit digital value corresponding to the first differential amplifier is determined based on the logical levels of the two output terminals, and

the encryption key module generates and provides an encryption key of N bits,

wherein N denotes a natural number.

16. An encryption method comprising:

receiving by an encryption module, an input data to be encrypted, wherein the encryption module comprises a plurality of encryption key modules and a plurality of standard cells;

selecting one of the plurality of encryption key modules; and

encrypting the data by executing an encryption algorithm using the encryption key provided by the selected encryption key module,

wherein the plurality of encryption key modules are disposed at random positions among layouts of the plurality of standard cells.