Protecting a white-box implementation against attacks

    公开(公告)号:US09954676B2

    公开(公告)日:2018-04-24

    申请号:US15407661

    申请日:2017-01-17

    Applicant: NXP B.V.

    Inventor: Wil Michiels

    Abstract: A method of performing a keyed cryptographic operation mapping an input message to an output message, wherein the cryptographic operation includes at least one round including a non-linear mapping function configured to map input data to output data, including: splitting the input data into n split input data, wherein the splitting of the input data varies based upon the value of the input message; inputting each split input data into the non-linear mapping function to obtain n split output data, wherein a combination the n split output data indicates an output data, wherein the output data results when the input data is input to the non-linear mapping function.

    Diversifying Control Flow of White-Box Implementation
    45.
    发明申请
    Diversifying Control Flow of White-Box Implementation 审中-公开
    白盒实施多样化控制流程

    公开(公告)号:US20160350520A1

    公开(公告)日:2016-12-01

    申请号:US14725801

    申请日:2015-05-29

    Applicant: NXP B.V.

    Abstract: A non-transitory machine-readable storage medium encoded with instructions for execution by a keyed cryptographic operation by a cryptographic system mapping an input message to an output message, including: instructions for receiving input data for a round of the keyed cryptographic operation; instructions for determining the order of computing output portions for the round of the cryptographic function based upon portions of the input data; and instructions for computing the portions of the output data in the determined order based upon the input data.

    Abstract translation: 一种非暂时的机器可读存储介质,其编码有用于通过将输入消息映射到输出消息的加密系统通过密钥加密操作执行的指令,包括:用于接收用于一轮密钥加密操作的输入数据的指令; 用于基于所述输入数据的部分来确定所述加密函数的所述一轮计算输出部分的顺序的指令; 以及用于基于输入数据以确定的顺序计算输出数据的部分的指令。

    PROTECTING THE INPUT/OUTPUT OF MODULAR ENCODED WHITE-BOX RSA
    46.
    发明申请
    PROTECTING THE INPUT/OUTPUT OF MODULAR ENCODED WHITE-BOX RSA 审中-公开
    保护模块化编码白盒RSA的输入/输出

    公开(公告)号:US20160328543A1

    公开(公告)日:2016-11-10

    申请号:US14815540

    申请日:2015-07-31

    Applicant: NXP B.V.

    Abstract: A method of obscuring the input and output of a modular exponentiation function, including: receiving modular exponentiation parameters including an exponent e having N bits and a modulus m; generating randomly a pre-multiplier; calculating a post-multiplier based upon the pre-multiplier, exponent e, and modulus m; multiplying an input to the modular exponentiation function by the pre-multiplier; performing the modular exponentiation function; and multiplying the output of the modular exponentiation function by the post-multiplier, wherein multiplying an input to the modular exponentiation function by the pre-multiplier, performing the modular exponentiation function, and multiplying the output of the modular exponentiation function by the post-multiplier are split variable operations.

    Abstract translation: 一种模糊模幂函数的输入和输出的方法,包括:接收包括具有N位和模数m的指数e的模幂运算参数; 随机生成预乘数; 基于预乘数,指数e和模数m计算后乘数; 通过预乘数将输入与模幂运算函数相乘; 执行模幂运算; 并将乘幂函数乘以后乘法器,其中通过预乘数将输入与模幂运算函数相乘,执行模幂运算函数,并将模幂运算函数的输出乘以后乘法器 是分割变量操作。

    Method for including an implicit integrity or authenticity check into a white-box implementation
    47.
    发明授权
    Method for including an implicit integrity or authenticity check into a white-box implementation 有权
    将隐含完整性或真实性检查包含在白盒实现中的方法

    公开(公告)号:US09485226B2

    公开(公告)日:2016-11-01

    申请号:US14263429

    申请日:2014-04-28

    Applicant: NXP B.V.

    CPC classification number: H04L63/0428 G06F21/51 H04L63/123

    Abstract: A method of performing a cryptographic operation using a cryptographic implementation in a cryptographic system, including: receiving, by the cryptographic system, an identifying string value; receiving, by the cryptographic system, an input message; performing, by the cryptographic system, a keyed cryptographic operation mapping the input message into an output message wherein the output message is the correct result when the identifying string value equals a binding string value.

    Abstract translation: 一种使用加密系统中的密码实现进行加密操作的方法,包括:密码系统接收识别字符串值; 通过加密系统接收输入消息; 通过加密系统执行将输入消息映射到输出消息中的密钥加密操作,其中当识别字符串值等于绑定字符串值时,输出消息是正确的结果。

    Behavioral fingerprint in a white-box implementation
    48.
    发明授权
    Behavioral fingerprint in a white-box implementation 有权
    行为指纹在白盒实现中

    公开(公告)号:US09455833B2

    公开(公告)日:2016-09-27

    申请号:US14263372

    申请日:2014-04-28

    Applicant: NXP B.V.

    Abstract: A method of determining a fingerprint identification of a cryptographic implementation in a cryptographic system, including: receiving, by the cryptographic system, an input message that is a fingerprint identification message; performing, by the cryptographic system, a keyed cryptographic operation mapping the fingerprint identification message into an output message that includes a fingerprint identification; and outputting the output message.

    Abstract translation: 一种在密码系统中确定密码实现的指纹识别的方法,包括:密码系统接收作为指纹识别消息的输入消息; 通过加密系统执行将指纹识别消息映射到包括指纹识别的输出消息中的密钥加密操作; 并输出输出消息。

    CODE INTEGRITY PROTECTION BY COMPUTING TARGET ADDRESSES FROM CHECKSUMS
    49.
    发明申请
    CODE INTEGRITY PROTECTION BY COMPUTING TARGET ADDRESSES FROM CHECKSUMS 有权
    通过从检查单位计算目标地址来确保完整性保护

    公开(公告)号:US20160171246A1

    公开(公告)日:2016-06-16

    申请号:US14572356

    申请日:2014-12-16

    Applicant: NXP B.V.

    CPC classification number: G06F21/64 G06F8/70 G06F21/14 G06F21/54 G06F2221/2123

    Abstract: A method of obscuring software code including a plurality of basic blocks, including: calculating, by a processor, a checksum value of the current basic block and a pointer to the end of the current basic block; determining a preceding basic block for the current basic block; inserting the checksum value for the current basic block into the preceding basic block; and inserting instructions into the preceding basic block to determine a pointer to the beginning of the current basic block based upon the checksum value of the current basic block.

    Abstract translation: 一种模糊包括多个基本块的软件代码的方法,包括:由处理器计算当前基本块的校验和值和指向当前基本块的结束的指针; 确定当前基本块的前一个基本块; 将当前基本块的校验和值插入到前一个基本块中; 以及基于当前基本块的校验和值,将指令插入到前述基本块中以确定指向当前基本块的开头的指针。

    REMAPPING CONSTANT POINTS IN A WHITE-BOX IMPLEMENTATION
    50.
    发明申请
    REMAPPING CONSTANT POINTS IN A WHITE-BOX IMPLEMENTATION 有权
    在白盒实施中重新取代恒定点

    公开(公告)号:US20160078250A1

    公开(公告)日:2016-03-17

    申请号:US14484925

    申请日:2014-09-12

    Applicant: NXP B.V.

    Abstract: A non-transitory machine-readable storage medium encoded with instructions for execution by a keyed cryptographic operation by a cryptographic system mapping an input message to an output message, wherein the cryptographic operation includes at least one round including a non-linear mapping function configured to map input data to output data, including: instructions for determining that the input data has a diversification number less than a diversification level threshold number; instructions for remapping the input data to a remapped input data, wherein the remapped input data corresponds to an input data having a diversification number greater than or equal to the diversification threshold value, and instructions for inputting the remapped input data into the non-linear mapping function to obtain output data.

    Abstract translation: 一种非暂时的机器可读存储介质,其编码有用于通过将输入消息映射到输出消息的加密系统通过密钥加密操作执行的指令,其中所述密码操作包括至少一个循环,所述至少一个循环包括非线性映射函数, 将输入数据映射到输出数据,包括:用于确定输入数据具有小于多样化级别阈值数目的多样化数量的指令; 用于将输入数据重新映射到重新映射的输入数据的指令,其中重新映射的输入数据对应于具有大于或等于多样化阈值的多样化数量的输入数据,以及用于将重映射的输入数据输入到非线性映射中的指令 功能来获取输出数据。

Patent Agency Ranking