Shift device and method for shifting

• US 7,178,168 B2
• Filed: 07/16/2004
• Issued: 02/13/2007
• Est. Priority Date: 01/16/2002
• Status: Active Grant

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: Gammel, Berndt, Kniffler, Oliver, Klug, Franz
• Primary Examiner(s): Wright; Norman M.
• Application Number:
  US10/893,161
• Publication Number:
  US 20050041810A1
• Time in Patent Office: 942 Days
• Field of Search: 726/26, 726/34, 380/268, 380/262
• US Class Current: 726/26
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06F 5/01 for shifting, e.g. justifying, scaling, normalising digital stores in which the information is moved stepwise, e.g. shift-registers G11C19/00; digital stores in which the information circulates G11C21/00

Abstract

A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, includes a unit for shifting the first place of the data word to the second place of the data word, a unit for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter, and a control for controlling the unit for shifting and the unit for re-encryption so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place. This ensures that data encrypted either with the first encryption parameter or with the second encryption parameter are always shifted, thus making it harder for attackers to eavesdrop on clear text data.

Claims

1. A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, comprising:

a shifter for shifting the first place of the data word to the second place of the data word;

a re-encrypter for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter; and

a controller for controlling the shifter and the re-encrypter so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place.

2. A shift device according to claim 1, wherein the encryption of the first place and the second place is performed using the same encryption algorithm, while the first and the second encryption parameters are different.

3. A shift device according to claim 2, wherein the encryption algorithm involves an XORing or XNORing of the unencrypted first or second place with an encryption parameter, and wherein the re-encrypter is arranged to perform an XORing or XNORing of the encrypted first place with a re-encryption parameter which is equal to an XORing or XNORing of the first and the second encryption parameter.

4. A shift device according to claim 3,

wherein the re-encrypter has an XNOR or an XOR gate with three inputs, a first input, to which a encrypted place can be applied, a second input, to which the first encryption parameter can be applied, and a third input, in which the second encryption parameter can be applied.

5. A shift device according to claim 2, wherein the data word is a binary number, wherein a place of the data word is a bit, und wherein XORing or XNORing consists of bitwise XORing or XNORing.

6. A shift device according to claim 1,

wherein the shifter has a multiplexer for each place.

7. A shift device according to claim 1,

wherein the re-encrypter is so arranged as to perform re-encryption without an intermediate result being created in which the first place is unencrypted.

8. A shift device according to claim 1, further comprising:

an inserter for inserting a value into a place of the data word which was occupied before shifting the place but is no longer occupied after shifting the place.

9. A shift device according to claim 8, wherein the inserter for inserting the value is arranged to encrypt a value for insertion with the encryption parameter for this place, and to insert the value for insertion in encrypted form.

10. A shift device in accordance with claim 1, wherein the re-encrypter is operative to re-encrypt the first place of the data word such that a decryption of the re-encrypted first place of the data word to obtain a plaintext second place of the data word is possible using the second encryption parameter and without using the first encryption parameter.

11. A method for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, with the following steps:

shifting the first place of the data word to the second place of the data word and re-encrypting the shifted first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter;

or

re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter and shifting the unencrypted place of the data word to the second place of the data word.

12. A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, comprising:

a shifter for shifting the first place of the data word to the second place of the data word, wherein the shifter has a multiplexer for each place;

a re-encrypter for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter;

a controller for controlling the shifter and the re-encrypter so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place; and

an inserter for inserting a value into a place of the data word which was occupied before shifting the place but is no longer occupied after shifting the place, the inserter being arranged to encrypt a value for insertion with the encryption parameter for this place, and to insert the value for insertion in encrypted form.

13. A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, wherein the encryption of the first place and the second place is performed using the same encryption algorithm, while the first and the second encryption parameters are different, wherein the encryption algorithm involves an XORing or XNORing of the unencrypted first or second place with an encryption parameter, comprising:

a shifter for shifting the first place of the data word to the second place of the data word;

a re-encrypter for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter, wherein the re-encrypter is arranged to perform an XORing or XNORing of the encrypted first place with a re-encryption parameter which is equal to an XORing or XNORing of the first and the second encryption parameter, wherein the re-encrypter has an XNOR or an XOR gate with three inputs, a first input, to which a encrypted place can be applied, a second input, to which the first encryption parameter can be applied, and a third input, to which the second encryption parameter can be applied; and

a controller for controlling the shifter and the re-encrypter so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place.

14. A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, comprising:

a shifter for shifting the first place of the data word to the second place of the data word;

a re-encrypter for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter, wherein the re-encrypter is so arranged as to perform re-encryption without an intermediate result being created in which the first place is unencrypted; and

a controller for controlling the shifter and the re-encrypter so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place.

15. A shift device for shifting a first place of a data word, which consists of a plurality of places, to a second place so as to obtain a shifted data word, wherein the first place is encrypted using a first encryption parameter and wherein the second place is encrypted using a second encryption parameter, comprising:

a shifter for shifting the first place of the data word to the second place of the data word;

a re-encrypter for re-encrypting the first place from an encryption using the first encryption parameter into an encryption using the second encryption parameter; and

a controller for controlling the shifter and the re-encrypter so that the first place is first shifted to the second place and is then re-encrypted, or that the first place is first re-encrypted and is then shifted to the second place.