Device and method for resisting non-invasive attacks
View Patent ↗A device and method for resisting, non-invasive attacks are disclosed herein. The device includes a random number generator that generates a random number, and a multiplier that multiplies first data and second data in a unit of a bit length determined based on the random number.
1. A semiconductor device for performing cryptographic operations, the semiconductor device comprising:
a random number generator circuit configured to generate a random number;
a controller circuit coupled with the random number generator circuit and configured to determine a bit length based on the random number; and
a multiplier circuit coupled with the controller circuit and configured to perform a multiplication operation within a cryptographic operation to multiply a multiplicand and a multiplier, wherein during the multiplication operation the multiplier circuit is configured to suppress a non-invasive attack by dividing the multiplier into partial units having the bit length determined based on the random number and to multiply the partial units based on the determined bit length, wherein the multiplier circuit comprises a plurality of multiplier modules, wherein the plurality of multiplier modules are configured to multiply in mutually different bit lengths, and wherein the controller circuit is further configured to select one multiplier module from the plurality of multiplier modules in accordance with the random number.
2. The semiconductor device of claim 1 , wherein the multiplier circuit is configured to multiply a plurality of bit lengths.
3. The semiconductor device of claim 1 , wherein the random number generator circuit is configured to generate a random number each time the multiplier circuit performs the multiplication operation.
4. A method for performing a cryptographic operation, the method comprising:
generating a random number in a random number generator circuit;
in a controller circuit coupled with the random number generator circuit, determining a bit length based on the random number;
in a multiplier circuit coupled with the controller circuit, performing a multiplication operation within the cryptographic operation to multiply a multiplicand and a multiplier, wherein performing the multiplication operation comprises suppressing a non-invasive attack by dividing the multiplier into partial units having the bit length determined based on the random number and multiplying the partial units based on the determined bit length, wherein the semiconductor device comprises a plurality of multiplier modules, and wherein performing the multiplication operation within the cryptographic operation comprises the semiconductor device using the plurality of multiplier modules to multiply in mutually different bit lengths; and
selecting, by the semiconductor device, one multiplier module from the plurality of multiplier modules in accordance with the random number.
5. The method of claim 4 , wherein performing the multiplication operation within the cryptographic operation comprises multiplying in a plurality of bit lengths.
6. The method of claim 4 , further comprising generating a random number each time the semiconductor device performs the multiplication operation.