摘要:
A cipher processing apparatus for arithmetic operations of an FO function and an FL function comprising: an FL function operating unit for generating a 2N-bit output based on a first extension key; a partial function operating unit for generating an N-bit output based on second and third extension keys; an N-bit intermediate register for storing an output of the partial operating unit; a 2N-bit first data register for storing data based on the output of the FL function operating unit; and a controller for making the partial function operating unit perform six cycles, inputting an output of the intermediate register to the FL function operating unit, and storing the data based on the output of the FL function operating unit in the first data register, in a first case in which the FL function uses a result of an arithmetic operation of the FO function.
摘要:
A randomly selected point on an elliptic curve is set as the initial value of a variable and calculation including a random point value is performed in an algorithm for calculating arbitrary scalar multiple operation on an elliptic curve when scalar multiplication and addition on an elliptic curve are defined, then a calculation value obtained as a result of including a random point is subtracted from the calculation result, whereby an intended scalar multiple operation value on an elliptic curve is determined.
摘要:
A non-invasive (having sufficiently small diameter so as not to give much pain to a subject) ultrasonic ultrasound probe of high spatial resolution and high signal-to-noise ratio, an ultrasonograph using the probe, and an ultrasonography are provided. The ultrasound probe is inserted into the tissue under examination and transmits an ultrasonic wave. The probe is characterized by comprising a hollow outer frame having one of needle shape, a puncture needle portion having the one end and inserted into the tissue of the subject, and an extended portion having the other end, an ultrasonic wave generating source positioned in the hollow part of the extended portion and generating an ultrasonic wave, an acoustic waveguide disposed along the length direction in the hollow part of the outer frame, capable of ultrasonic vibration, and adapted to transmit an ultrasonic wave, and direction changing means for changing the direction of the ultrasonic wave beam transmitted by the acoustic waveguide to the direction toward the position of the tissue under examination.
摘要:
A decryption processor for calculating a plaintext through decryption of a ciphertext c includes, a first part that calculates m′p through modular exponentiation modulo a first prime number p wherein an exponent is a shifted value of d (mod (p−1)), and a base is a value of c (mod p); a second modular exponentiation part that calculates m′q through modular exponentiation modulo a second prime number q, wherein an exponent is a value of d (mod (q−1)) and a base is a value of c (mod q); a composition part that calculates ms through calculation of ((u×(m′q−m′p) (mod q))×p+m′p by using the values m′p and m′q and a private key u corresponding to p−1 (mod q); and a shift release part that calculates the plaintext m through calculation of ms×(cs (mod n)) (mod n) by using the value ms.
摘要:
An elliptic curve cryptosystem apparatus performing an elliptic curve cryptosystem process has a coordinate transforming unit for transforming coordinates (X:Y:Z) on a point P on an elliptic curve over a finite field GF(p^m) to coordinates (r1×(X−s1):r2×(Y−s2):r3×(Z−s3)) (where, p is a prime number, m is an integer not less than 1, r1, r2 and r3 are integers not less than 1 and not larger than (p−1), s1, s2 and s3 are integer not less than 0 and not larger than (p−1), and a code “^” represents power), and a scalar multiplication operating unit for performing scalar multiplication on the point on the elliptic curve transformed by the coordinate transforming unit, wherein at least one of the parameters s1, s2 and s3 has a value other than 0. The apparatus can perform the scalar multiplication in the elliptic curve cryptosystem, with resistance to side channel attacks.
摘要:
Ciphertext X and a constant C having relationships C>p and C>q with respect to secret keys p and q are input, and correction values C−dp and C−dq (dp=d mod (p−1), dq=d mod (q−1)) are obtained. Then, the ciphertext X is multiplied by the constant C. A remainder operation using the secret key p or q as a remainder value is conducted with respect to the multiplication result. A modular exponentiation operation based on a Chinese remainder theorem is conducted with respect to the remainder operation result, and a correction operation using a correction value C−dp or C−dq is conducted. Thereafter, plaintext Y before being encrypted is calculated.
摘要翻译:输入密文X和关于秘密密钥p和q具有关系C> p和C> q的常数C,并且校正值C SUP和D D < (dp = d mod(p-1),dq = d mod(q-1))。 然后,将密文X乘以常数C.使用秘密密钥p或q作为余数值的余数运算相对于相乘结果进行。 对余数运算结果进行基于中文余数定理的模幂运算,使用校正值C u> -dp或C-Dq SUP>的修正运算是 进行。 此后,计算加密前的明文Y。
摘要:
A cryptographic processing device, comprising: a storage unit; initial setting unit for setting a value to be stored in the storage unit; Montgomery modular multiplication operation unit for performing a Montgomery modular multiplication operation plural times for a value set by the initial setting unit; and fault attack detection unit for determining whether or not a fault attack occurred for each of at least some parts of the Montgomery modular multiplication operations performed plural times.
摘要:
A decryption processor for calculating a plaintext through decryption of a ciphertext c includes, a first part that calculates m′p through modular exponentiation modulo a first prime number p wherein an exponent is a shifted value of d(mod(p−1)), and a base is a value of c(mod p); a second modular exponentiation part that calculates m′q through modular exponentiation modulo a second prime number q, wherein an exponent is a value of d(mod(q−1)) and a base is a value of c(mod q); a composition part that calculates ms through calculation of ((u×(m′q−m′p)(mod q))×p+m′p by using the values m′p and m′q and a private key u corresponding to p−1(mod q); and a shift release part that calculates the plaintext m through calculation of ms×(cs(mod n))(mod n) by using the value ms.
摘要:
The computing device calculates an equivalence H0≡2m*k+1 (mod n) relating to a divisor n of 2m*k+1 (step A), computes an equivalence H≡2E(p, m, k) (mod n) of 2E(p, m, k) (mod n) from H0 by an REDC operation (step B), and performs a correction operation by H=REDC (H, G)n for g=2k*G(p, m, k) when 2p>m×k (step C).
摘要翻译:计算装置计算与2m * k + 1的除数n相关的等价H0≡2m* k + 1(mod n)(步骤A),计算等价H≡2E(p,m,k)(mod n) 通过REDC操作(步骤B)从H0得到2E(p,m,k)(mod n),并且通过H = REDC(H,G)n执行校正操作,g = 2k * G(p, k)当2p> m×k(步骤C)时。
摘要:
An encrypting apparatus includes a digest part using a SHA-2 algorithm of which a basic unit of operation is 32*Y (Y=1 or 2) bits. The digest part includes a shift register including a series of registers, and a predetermined number of adders performing an addition operation based on data stored in the shift register. The shift register includes a (32*Y)/X-bit register, where X=2k (k is an integer such that 1≦k≦4 when Y=1 and 1≦k≦5 when Y=2). Each of the adders has a data width of (32*Y)/X bits and performs the addition operation in each cycle in which the data stored in the shift register is shifted between the registers with the data width of (32*Y)/X bits.