Method For Validating A Cryptographic Parameter And Corresponding Device

• US 20140369493A1
• Filed: 04/30/2014
• Published: 12/18/2014
• Est. Priority Date: 04/30/2013
• Status: Active Grant

• Current Assignee: IDEMIA France (Advent International Corporation)
• Original Assignee: Oberthur Technologies SA (Advent International Corporation)
• Inventors: Dottax, Emmanuelle, Rondepierre, Franck
• Granted Patent: US 10,038,560 B2
• Time in Patent Office: Days
• US Class Current: 380/28
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 2209/72 Signcrypting, i.e. digital signing and encrypting simultaneously
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/3066 involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes

Abstract

An electronic device is proposed, which is configured to receive at least one cryptographic parameter and validate the at least one cryptographic parameter. The electronic device is is configured to validating the parameter by determining an imprint from a one-way function and from at least the cryptographic parameter; detecting at least one part of the imprint in a dedicated memory zone of the electronic device, and delivering a piece of information on validation should there be effective detection.

Claims

1. An electronic device comprising:

means for receiving at least one cryptographic parameter; and

means for validating said at least one cryptographic parameter, wherein said means for validating comprises;

means for determining an imprint from a one-way function and from at least said cryptographic parameter; and

means for detecting at least one part of said imprint in a dedicated memory zone of said electronic device, said dedicated memory zone comprising a preliminarily stored imprint, said means for detecting delivering a piece of information on validation if there is effective detection.

2. The electronic device according to claim 1, wherein said means for receiving furthermore comprise means for receiving an identifier of said at least one cryptographic parameter.

3. The electronic device according to claim 2, wherein said one-way function is applied to a concatenation of at least one part of said identifier and of said cryptographic parameter.

4. The electronic device according to claim 2, wherein said identifier is used as an index during the use of the means for detecting.

5. The electronic device according to claim 2, wherein the device further comprises means for concatenating at least one part of said identifier with said imprint, used following the use of the means for determining, said means for concatenating delivering another imprint which is used for the means for detecting.

6. The electronic device according to claim 1, wherein said at least one cryptographic parameter corresponds to the domain of parameters of the hyperelliptic curve of the g≧

1 type.

7. The electronic device according to claim 6, wherein said type of said curve is equal to 1 and said domain of parameters comprises the following elements:

a number q verifying the relationship q=p^m, with m being an integer greater than or equal to 1, and p being a prime number greater than or equal to 2;

coefficients a and b which are elements belonging to the q-element finite field defining an equation of an elliptic curve;

a point P, belonging to the elliptic curve; and

a number n corresponding to an order of said point P.

8. The electronic device according to claim 7, wherein said domain of parameters furthermore comprises one or more of the following elements:

a value corresponding to an indication on the manner of representing an element belonging to the finite field F_q;

a value corresponding to a seed enabling the generation of the elements a and b;

a value of the cofactor of the elliptic curve.

9. The electronic device according to claim 7, wherein said elliptic curve corresponds to a curve referenced in any one of the following standards:

ANSI X9.62, FIPS 186-2, IEEE P1363, ISO/IEC 15946, SECG.

10. The electronic device according to claim 1, wherein said at least one cryptographic parameter corresponds to the group of parameters consisting of:

a generator g, a prime number p and a prime number q corresponding to the order of said generator.

11. The electronic device according to claim 1, wherein said one-way function is a cryptographic hash function.

12. The electronic device according to claim 1, wherein said one-way function is an encryption function using an encryption key stored in said device.

13. The electronic device according to claim 2, wherein:

said at least one cryptographic parameter corresponds to the domain of parameters of the hyperelliptic curve of the g≧

1 type;

said one-way function is an encryption function using an encryption key stored in said device; and

said encryption key stored in said device corresponds to said identifier of said curve.

14. The electronic device according to claim 1, wherein the means for detecting enable the detection of the totality of said imprint in a dedicated memory zone of said electronic device.

15. The electronic device according to claim 1, wherein when said at least one cryptographic parameter is confidential, said means for determining and detecting use masking operations with at least one random number.

16. The electronic device according to claim 1, wherein the device comprises means for personalizing enabling the storage of at least one part of said imprint obtained via the means for determining when the means for detecting deliver a piece of non-validating information if there is no effective detection.

17. The electronic device according to claim 1, claim 1, wherein said dedicated memory zone comprising a preliminarily stored imprint is a non-volatile memory.

18. A method of cryptographic processing implemented by an electronic device, comprising:

receiving at least one cryptographic parameter by the electronic device; and

validating said at least one cryptographic parameter with the electronic device, wherein validating comprises;

determining an imprint from the application of a one-way function to at least said cryptographic parameter;

detecting at least one part of said imprint in a dedicated memory zone of said electronic device, said dedicated memory zone comprising a preliminarily stored imprint, wherein detecting delivers a piece of information on validation if there is effective detection.

19. The method according to claim 18, wherein said at least one parameter corresponds to the domain of parameters of a g≧

1 type hyperelliptic curve

20. The method according to claim 18, wherein the method is integrated into a phase of checking the preliminarily stored imprint, subsequently to personalizing the electronic device.

21. (canceled)

22. A computer readable and non-transient storage medium storing a computer program comprising a set of instructions executable by a computer to implement a method comprising:

receiving at least one cryptographic parameter by an electronic device; and

validating said at least one cryptographic parameter with the electronic device, wherein validating comprises;

determining an imprint from the application of a one-way function to at least said cryptographic parameter;

detecting at least one part of said imprint in a dedicated memory zone of said electronic device, said dedicated memory zone comprising a preliminarily stored imprint, wherein detecting delivers a piece of information on validation if there is effective detection.