journal article·2020-03-02Open access

A Secure Architecture for Modular Division over a Prime Field against Fault Injection Attacks

Xiaoting Hu, Zhongping Qin

Applied Sciences· Volume 10· Issue 5

Abstract

Fault injection attacks pose a serious threat to many cryptographic devices. The security of most cryptographic devices hinges on a key block called modular division (MD) over a prime field. Although a lot of research has been done to implement the MD over a prime field in hardware efficiently, studies on secure architecture against fault injection attack are very few. A few of the studies that focused on secure architecture against fault injection attack can only detect faults but not locate faults. In this regard, this paper designs a novel secure architecture for the MD over a prime field, which can not only detect faults, but also can locate the error processing element. In order to seek the best optimal performance, four word-oriented systolic structures of a main function module (MFM) were designed, and three error detection schemes were developed based on different linear arithmetic codes (LACs). The MFM structures were combined flexibly with the error detection schemes. The time and area overheads of our architecture were analyzed through the implementation in an application-specific integrated circuit (ASIC), while the error detection and location capabilities of our architecture were demonstrated by C++ simulation, in comparison to two existing methods. The results show that our architecture can detect single-bit error (SBE) with 100% accuracy and locate the erroneous processing element (PE), and correctly identify most of the single PE errors and almost all of the multi-PE errors (when there are more than three erroneous PEs). The only weakness of our architecture is the relatively high time and area overhead ratios.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Cryptographic Implementations and Security · Cryptography and Residue Arithmetic · Coding theory and cryptography

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Software Engineering, Huazhong University of Science and Technology, Wuhan 430074, China

School of Computer Science and Technology, Jiangsu Normal University, Xuzhou 221116, China

Funding

National Natural Science Foundation of China · Natural Science Foundation of Jiangsu Province, China

References (42)

Show source-provided references
1. Voyiatzis, A.G., and Serpanos, D.N. (2004, January 23–24). A fault-injection attack on Fiat-Shamir cryptosystems. Proceedings of the 24th International Conference on Distributed Computing Systems Workshops, Tokyo, Japan.10.1109/ICDCSW.2004.1284096 ↗
2. Schmidt, J.M., Hutter, M., and Plos, T. (2009, January 6). Optical fault attacks on AES: A threat in violet. Proceedings of the Sixth International Workshop on Fault Diagnosis and Tolerance in Cryptography, FDTC 2009, Lausanne, Switzerland.10.1109/FDTC.2009.37 ↗
3. Trichina, E., and Korkikyan, R. (2010, January 21). Multi fault laser attacks on protected CRT-RSA. Proceedings of the 2010 Workshop on Fault Diagnosis and Tolerance in Cryptography, Santa Barbara, CA, USA.10.1109/FDTC.2010.14 ↗
4. Hardware designer’s guide to fault attacks10.1109/TVLSI.2012.2231707 ↗
5. Karpovsky, M., Kulikowski, K.J., and Taubin, A. (July, January 28). Robust protection against fault-injection attacks on smart cards implementing the advanced encryption standard. Proceedings of the 2004 International Conference on Dependable Systems and Networks (DSN 2004), Florence, Italy.10.1109/DSN.2004.1311880 ↗
6. Gaubatz, G., and Sunar, B. (2006). Robust finite field arithmetic for fault-tolerant public-key cryptography. Fault Diagnosis and Tolerance in Cryptography, Proceedings of the International Workshop on Fault Diagnosis and Tolerance in Cryptography, Yokohama, Japan, 10 October 2006, Springer.10.1007/11889700_18 ↗
7. Diagnosis of an inverter IGBT open-circuit fault by hilbert-huang transform application10.18280/ts.360201 ↗
8. Berzati, A., Canovas, C., and Goubin, L. (2008, January 10). In (security) against fault injection attacks for CRT-RSA implementations. Proceedings of the 2008 5th Workshop on Fault Diagnosis and Tolerance in Cryptography, Washington, DC, USA.10.1109/FDTC.2008.9 ↗
9. Error detection and fault tolerance in ECSM using input randomization
10. Secure multipliers resilient to strong fault-injection attacks using multilinear arithmetic codes10.1109/TVLSI.2011.2147340 ↗
11. (2020, February 28). IBM 4764 PCI-X Cryptographic Coprocessor. Available online: http://www.ibm.com/support/knowledgecenter/9119-FHB/p7hcd/fc474.htm.
12. Concurrent error detection in ALU’s by recomputing with shifted operands10.1109/TC.1982.1676055 ↗
13. Efficient use of time and hardware redundancy for concurrent error detection in a 32-bit VLSI adder10.1109/4.281 ↗
14. Li, J., and Swartzlander, E.E. (1992, January 4–6). Concurrent error detection in ALUs by recomputing with rotated operands. Proceedings of the 1992 IEEE International Workshop on Defect and Fault Tolerance in VLSI Systems, Dallas, TX, USA.
15. Concurrent error detection and correction in dual basis multiplier over GF (2m)10.1049/iet-cds:20080122 ↗
16. Lo, J.C., Thanawastien, S., and Rao, T.R.N. (1989, January 6–8). Concurrent error detection in arithmetic and logical operations using Berger codes. Proceedings of the 9th Symposium on Computer Arithmetic, Santa Monica, CA, USA.
17. Fault-secure parity prediction arithmetic operators10.1109/54.587743 ↗
18. Fault detection architectures for field multiplication using polynomial bases10.1109/TC.2006.147 ↗
19. Gaubatz, G., Sunar, B., and Karpovsky, M.G. (2006). Non-linear residue codes for robust public-key arithmetic. Fault Diagnosis and Tolerance in Cryptography, Proceedings of the International Workshop on Fault Diagnosis and Tolerance in Cryptography, Yokohama, Japan, 10 October 2006, Springer.10.1007/11889700_16 ↗
20. Hariri, A., and Reyhani-Masoleh, A. (2007, January 10). Fault detection structures for the Montgomery multiplication over binary extension fields. Proceedings of the Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC 2007), Vienna, Austria.10.1109/FDTC.2007.4318983 ↗
21. On concurrent detection of errors in polynomial basis multiplication10.1109/TVLSI.2007.893659 ↗
22. Concurrent error detection in montgomery multiplication over binary extension fields10.1109/TC.2010.258 ↗
23. Wang, Z., Karpovsky, M., and Sunar, B. (2009, January 24–26). Multilinear codes for robust error detection. Proceedings of the 2009 15th IEEE International On-Line Testing Symposium, Lisbon, Portugal.
24. Fault injection attacks on cryptographic devices: Theory, practice, and countermeasures10.1109/JPROC.2012.2188769 ↗
25. Khairallah, M., Sadhukhan, R., Samanta, R., Breier, J., Bhasin, S., Chakraborty, R.S., and Mukhopadhyay, D. (2018, January 19–23). DFARPA: Differential fault attack resistant physical design automation. Proceedings of the 2018 Design, Automation & Test in Europe Conference & Exhibition (DATE), Dresden, Germany.10.23919/DATE.2018.8342190 ↗
26. Computational problems associated with Racah algebra10.1016/0021-9991(67)90047-2 ↗
27. Brent, R.P., and Kung, H.T. (1983). Systolic VLSI arrays for linear time GCD computation. VLSI ‘83:VLSI Design of Digital System, Elsevier Science Pub. Co.
28. A VLSI algorithm for modular division based on the binary GCD algorithm
29. A Hardware Algorithm for Modular Multiplication/Division10.1109/TC.2005.1 ↗
30. A New Systolic Architecture for Modular Division10.1109/TC.2007.20 ↗
31. Efficient algorithm and systolic architecture for modular division10.1080/00207217.2011.567036 ↗
32. Efficient Design and Performance Analysis of a Hardware Right-shift Binary Modular Division Algorithm in GF(p)
33. Chervyakov, N., Lyakhov, P., Babenko, M., Nazarov, A., Deryabin, M., Lavrinenko, I., and Chervyakov, N. (2019). A High-Speed Division Algorithm for Modular Numbers Based on the Chinese Remainder Theorem with Fractions and Its Hardware Implementation. Electronics, 8.10.3390/electronics8030261 ↗
34. Concurrent Error Detection in Finite-Field Arithmetic Operations Using Pipelined and Systolic Architectures10.1109/TC.2009.62 ↗
35. Concurrent Structure-Independent Fault Detection Schemes for the Advanced Encryption Standard10.1109/TC.2010.33 ↗
36. Reliable Concurrent Error Detection Architectures for Extended Euclidean-Based Division Over GF(2m)
37. Fault-secure parity prediction Booth multipliers10.1109/54.785842 ↗
38. On Selection of Modulus of Quadratic Codes for the Protection of Cryptographic Operations against Fault Attacks
39. Secure Systolic Montgomery Modular Multiplier Over Prime Fields Resilient to Fault-Injection Attacks10.1109/TVLSI.2014.2356015 ↗
40. Hu, X., Qin, Z., and Yang, Q. (2019). A Secure Modular Division Algorithm Embedding with Error Detection and Low-Area ASIC Implementation. J. Signal Process. Syst., 1–13. Available online: https://link.springer.com/article/10.1007/s11265-019-01481-6.10.1007/s11265-019-01481-6 ↗
41. Benso, A., and Prinetto, P. (2003). Fault Injection Techniques and Tools for Embedded Systems Reliability Evaluation, Springer Science & Business Media.10.1007/b105828 ↗
42. Torrance, R., and James, D. (2009). The state-of-the-art in IC reverse engineering. International Workshop on Cryptographic Hardware and Embedded Systems, Springer.10.1007/978-3-642-04138-9_26 ↗