초록 ▼

A method and apparatus for hiding cryptographic keys based on autocorrelation timing attacks is provided. The method and apparatus of the present invention utilize a autocorrelation timing attack to allow independent software entities to authenticate themselves without storing a private cryptographi

A method and apparatus for hiding cryptographic keys based on autocorrelation timing attacks is provided. The method and apparatus of the present invention utilize a autocorrelation timing attack to allow independent software entities to authenticate themselves without storing a private cryptographic key. This is accomplished by storing timing statistics related to the evaluation of an equation in the software entity rather than the cryptographic key itself. When the software entity authenticates itself, the cryptographic key is derived based on information provided by the timing statistics contained in the software entity.

대표청구항 ▼

[ What is claimed is:] [1.] A method comprising:generating a plurality of timing statistics based on an amount of time required to evaluate a particular function given a known input for a series of computations used in deriving the cryptographic key:deriving the cryptographic key in a bitwise fashio

[ What is claimed is:] [1.] A method comprising:generating a plurality of timing statistics based on an amount of time required to evaluate a particular function given a known input for a series of computations used in deriving the cryptographic key:deriving the cryptographic key in a bitwise fashion based, at least in part, on a comparison of the generated timing statistics and timing statistics stored in the electronic device to determine whether bits of a derived cryptographic key correspond to bits in the cryptographic key; andusing a subset of the derived cryptographic key for authentication prior to complete derivation of the cryptographic key.