公开(公告)号：US08873745B2

公开(公告)日：2014-10-28

申请号：US13543053

申请日：2012-07-06

申请人： Yannick Teglia

发明人： Yannick Teglia

IPC分类号： G06F21/00 ,  G06F7/72

CPC分类号： G06F7/725 ,  G06F2207/7233 ,  G06F2207/7238

摘要： A method for protecting a calculation on an elliptic curve, by an electronic circuit, wherein a point of an elliptic curve is multiplied by a digital quantity, comprising the steps of: initializing a first variable with a value which is a function of a random quantity; initializing at least a second variable with a value which is a function of the digital quantity; at least for a bit at 1 of the digital quantity, the first variable is updated by: a) subtracting a multiple of the random quantity; and b) adding the content of the second variable; and once all the bits of the digital quantity have been processed, subtracting from the first variable the product of the point by the random quantity to provide the result.

摘要翻译： 一种用于通过电子电路保护椭圆曲线上的计算的方法，其中椭圆曲线的点乘以数字量，包括以下步骤：用作为随机数的函数的值初始化第一变量 ; 使用数字量的函数的值初始化至少第二变量; 至少对于数字量的1处的一位，第一变量通过以下来更新：a）减去随机数的倍数; 和b）添加第二变量的内容; 并且一旦处理了数字量的所有比特，则从第一个变量减去该点的乘积随机数量以提供结果。

公开(公告)号：US08635460B2

公开(公告)日：2014-01-21

申请号：US11304236

申请日：2005-12-14

申请人： Pierre-Yvan Liardet ,  Yannick Teglia

发明人： Pierre-Yvan Liardet ,  Yannick Teglia

IPC分类号： G06F11/30 ,  G06F12/14

CPC分类号： H04L9/002 ,  H04L2209/046 ,  H04L2209/08

摘要： A method and a circuit for masking a digital word by application of a random bijection, including applying at least one first operation including selecting a non-disjoint subset of the word having its position and size depending on a first random quantity, and assigning to each bit of the subset, the state of the bit having a symmetrical position with respect to the middle of the subset, to obtain a masked digital quantity.

摘要翻译： 一种用于通过应用随机双射屏蔽数字字的方法和电路，包括应用至少一个第一操作，包括根据第一随机数选择具有其位置和大小的字的非不相交子集，并分配给每个 该比特的状态相对于子集的中间具有对称位置，以获得掩蔽的数字量。

公开(公告)号：US08566609B2

公开(公告)日：2013-10-22

申请号：US12547357

申请日：2009-08-25

申请人： Albert Martinez ,  Yannick Teglia

发明人： Albert Martinez ,  Yannick Teglia

IPC分类号： G06F21/00

CPC分类号： H04L9/3249 ,  G09C1/00 ,  H04L9/004 ,  H04L9/0631

摘要： A method for protecting the integrity of data ciphered by a ciphering algorithm providing at least an intermediary state meant to be identical in ciphering and in deciphering, this intermediary state being sampled during the ciphering to generate a signature.

摘要翻译： 一种用于保护通过加密算法加密的数据的完整性的方法，所述加密算法至少提供加密和解密中相同的中间状态，该中间状态在加密期间被采样以生成签名。

公开(公告)号：US08554813B2

公开(公告)日：2013-10-08

申请号：US12852853

申请日：2010-08-09

申请人： Pierre-Yvan Liardet ,  Yannick Teglia

发明人： Pierre-Yvan Liardet ,  Yannick Teglia

IPC分类号： G06F7/58

CPC分类号： G06F7/58 ,  G06F7/588 ,  H03K3/84

摘要： A method and a circuit for detecting a loss in the equiprobable character of a first output bit flow originating from at least one first element of normalization of an initial bit flow, including analyzing the flow rate of the normalization element.

摘要翻译： 一种用于检测源自起始位流的归一化的至少一个第一元素的第一输出位流的等能特性损失的方法和电路，包括分析归一化元件的流量。

公开(公告)号：US08306218B2

公开(公告)日：2012-11-06

申请号：US10467698

申请日：2002-02-06

申请人： Fabrice Romain ,  Yannick Teglia

发明人： Fabrice Romain ,  Yannick Teglia

IPC分类号： G06F21/00

CPC分类号： H04L9/0625 ,  G06F2207/7219 ,  H04L9/003 ,  H04L2209/046 ,  H04L2209/24

摘要： The protected method of cryptographic computation includes N computation rounds successively performed to produce an output data from an input data and a private key. The method also includes a first masking stage to mask the input data, so that each intermediate data used or produced by a computation round is masked, and a second masking stage to mask data manipulated inside each computation round.

摘要翻译： 受保护的密码计算方法包括从输入数据和私钥产生输出数据的N次计算循环。 该方法还包括用于屏蔽输入数据的第一掩蔽阶段，使得由计算轮次使用或产生的每个中间数据被屏蔽，以及第二掩蔽阶段来掩蔽在每个计算周期内操纵的数据。

公开(公告)号：US20120106732A1

公开(公告)日：2012-05-03

申请号：US13286962

申请日：2011-11-01

申请人： Yannick Teglia

发明人： Yannick Teglia

IPC分类号： H04L9/28

CPC分类号： H04L9/06 ,  H04L9/002 ,  H04L9/065 ,  H04L9/30

摘要： A method of protecting a circuit from attacks aiming to discover secret data used during the execution of a cryptographic calculation by the circuit, by, executing a transformation calculation implementing a bijective transformation function, receiving as input a secret data, and supplying a transformed data, executing a cryptographic calculation receiving as input a data to process and the transformed data, and executing an inverse transformation calculation receiving as input the result of the cryptographic calculation, and supplying a result that the cryptographic calculation would have supplied if it had been applied to the data to process and directly to the secret data, the data to process belong to a stream of a multiplicity of data, the transformed data being supplied as input to the cryptographic calculation for all the data of the stream.

摘要翻译： 一种保护电路免受攻击的方法，用于发现由电路执行密码计算期间使用的秘密数据，通过执行实现双射变换功能的变换计算，接收作为输入的秘密数据并提供经变换的数据， 执行作为输入接收要处理的数据的加密计算和经变换的数据，并且执行接收作为输入的加密计算的结果的逆变换计算，并且将如果已经应用于加密计算的结果提供给 要处理的数据并直接传送到秘密数据，要处理的数据属于多个数据流，转换的数据作为流的所有数据的密码计算的输入提供。

公开(公告)号：US08102997B2

公开(公告)日：2012-01-24

申请号：US11547195

申请日：2004-03-29

申请人： Yannick Teglia ,  Fabrice Romain ,  Pierre-Yvan Liardet ,  Pasqualina Fragneto ,  Fabio Sozzani ,  Guido Bertoni

发明人： Yannick Teglia ,  Fabrice Romain ,  Pierre-Yvan Liardet ,  Pasqualina Fragneto ,  Fabio Sozzani ,  Guido Bertoni

IPC分类号： H04L9/28 ,  H04K1/00

CPC分类号： H04L9/0631 ,  H04L9/003 ,  H04L2209/046 ,  H04L2209/08 ,  H04L2209/122

摘要： A processor for executing a Rijndeal algorithm which applies a plurality of encryption rounds to a data block array in order to obtain an array of identical size, each round involving a key block array and a data block substitution table, wherein said processor comprises: a first input register (102) containing an input data block column; an output register (111) containing an output data block column or an intermediate block column; a second input register (101) containing a key block column or the intermediate data blocks; a block substitution element (104) receiving the data one block at a time following the selection (103) thereof in the first register and providing, for each block, a column of blocks; an element (109) applying a cyclic permutation to the substitution circuit column blocks; and an Exclusive-OR combination element (110) combining the permutation circuit column blocks with the content of the second register, the result of said combination being loaded into the output register.

摘要翻译： 一种用于执行Rijndeal算法的处理器，该Rijndeal算法将多个加密回合应用于数据块阵列，以便获得相同大小的阵列，每轮涉及密钥块阵列和数据块替换表，其中所述处理器包括：第一 输入寄存器（102），其包含输入数据块列; 包含输出数据块列或中间块列的输出寄存器（111）; 包含密钥块列或中间数据块的第二输入寄存器（101）; 块替换元件（104）在第一寄存器中的选择（103）之后的时间接收数据一个块，并为每个块提供一列块; 向替代电路列块施加循环置换的元件（109）; 以及将置换电路列块与第二寄存器的内容组合的异或组合元件（110），所述组合的结果被加载到输出寄存器中。

公开(公告)号：US08045712B2

公开(公告)日：2011-10-25

申请号：US11175915

申请日：2005-07-06

申请人： Joan Daemen ,  Pierre Guillemin ,  Claude Anguille ,  Michel Bardouillet ,  Pierre-Yvan Liardet ,  Yannick Teglia

发明人： Joan Daemen ,  Pierre Guillemin ,  Claude Anguille ,  Michel Bardouillet ,  Pierre-Yvan Liardet ,  Yannick Teglia

IPC分类号： H04L9/00

CPC分类号： G06F12/1408 ,  H04L9/065 ,  H04L2209/12

摘要： A method and an element of ciphering by an integrated processor of data to be stored in a memory, including applying a ciphering algorithm which is a function of a key specific to the integrated circuit and of an initialization vector, and of memorizing at least the ciphered data, the initialization vector depending at least on the address of storage of the data in the memory.

摘要翻译： 一种由存储在存储器中的数据的集成处理器进行加密的方法和元件，包括应用作为集成电路特有的密钥和初始化向量的函数的加密算法，以及至少记忆密码 数据，初始化向量至少取决于存储器中数据的存储地址。

公开(公告)号：US20110119762A1

公开(公告)日：2011-05-19

申请号：US12943478

申请日：2010-11-10

申请人： Yannick Teglia

发明人： Yannick Teglia

IPC分类号： G06F21/00

CPC分类号： G06F21/83 ,  G06F21/52 ,  G06F21/71 ,  G06F21/77

摘要： The invention concerns a method of detecting a fault attack including providing a plurality of blinding values; generating a first set of data elements including a first group of data elements and at least one additional data element generated by performing the exclusive OR between at least one data element in the first group and at least one of the blinding values; generating a second set of data elements corresponding to the exclusive OR between each data element of the first set and a selected one of the plurality of blinding values; generating a first signature by performing a commutative operation between each of the data elements of the first set; generating a second signature by performing the commutative operation between each of the data elements of the second set; and comparing the first and second signatures to detect a fault attack.

摘要翻译： 本发明涉及一种检测故障攻击的方法，包括提供多个盲目值; 生成包括第一组数据元素的第一组数据元素和通过执行第一组中的至少一个数据元素与至少一个盲目值之间的异或生成的至少一个附加数据元素; 产生与第一组的每个数据元素和多个盲目值中的所选择的一个之间的异或相对应的第二组数据元素; 通过在第一组的每个数据元素之间执行交换操作来产生第一签名; 通过执行第二组的每个数据元素之间的交换操作来产生第二签名; 以及比较第一和第二签名以检测故障攻击。

公开(公告)号：US07941639B2

公开(公告)日：2011-05-10

申请号：US11481432

申请日：2006-07-05

申请人： Yannick Teglia ,  Pierre-Yvan Liardet ,  Alain Pomet

发明人： Yannick Teglia ,  Pierre-Yvan Liardet ,  Alain Pomet

IPC分类号： G06F9/30

CPC分类号： G06F21/77 ,  G06F11/0757 ,  G06F21/75 ,  G06Q20/341 ,  G07F7/082 ,  G07F7/084 ,  G07F7/1008

摘要： A method for protecting the execution of a main program against possible traps, including, on occurrence of an instruction from the main program, starting a time counter of a given count according to next instructions of the main program, and executing, once the counter has reached its count, at least one instruction of a secondary program from which the result of the main program depends.

摘要翻译： 一种用于保护主程序的执行免受可能的陷阱的方法，包括在发生来自主程序的指令时，根据主程序的下一个指令启动给定计数的时间计数器，一旦计数器具有 达到其计数，至少一个辅助程序的指令，主程序的结果从该程序所依赖。