Resistance power signature attack cryptography

摘要

(57) Abstract This invention being the manner which calculates the multiple k of the dot P with respect to the elliptic curved line which is defined on the body, includes the step below. Namely, to display the above-mentioned number k the dot P to form the ordered pair of₁ and P₂, as binary vectors k _{I, the} dot, P₁ and P₂ to differ, being maximum and just P and, to choose sequential each binary digit string k _i, k _{i at the} time of 0, the dot P₁ '', P₂ '' to calculate new set description above k _i vis-a-vis respectively, the above-mentioned dot P₁ '' profit, and P by adding₁ and P₂ most the dot P of the eye₁ by two time calculation doing the above-mentioned dot P₂ '' you obtain. Or, k _{i at the} time of 1, the dot P₁ '', P₂ '' operation new set, the above-mentioned dot P₁ '' you obtain by adding₁ and P_{2 the} second dot P₂ by two time calculation doing, the above-mentioned dot P₂ '' profit, and the dot P. With that, the above-mentioned two time calculation or addition, always is run with the same sequence the above-mentioned binary digit string b _i vis-a-vis respectively, because of this, it is possible to make the timing attack decrease in this manner to the utmost. Execution configuration of this invention is applied both of the multiplication possible group and the addition possible group.