Signature generation apparatus, signature method, non-transitory computer readable medium storing signature generation program

• US 8,966,264 B2
• Filed: 04/06/2011
• Issued: 02/24/2015
• Est. Priority Date: 05/28/2010
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Morioka, Sumio
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Cribbs, Malcolm
• Application Number:
  US13/700,202
• Publication Number:
  US 20130073873A1
• Time in Patent Office: 1,420 Days
• Field of Search: None
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 9/003 for power analysis, e.g. differential power analysis [DPA] or simple power analysis [SPA]
• CPC Class Codes: H04L 9/3249 using RSA or related signature schemes, e.g. Rabin scheme

Abstract

A signature generation apparatus includes basic operation execution units each executing a basic operation included in a signature generation procedure; and a whole operation controller connected to the basic operation execution units to control operations in the basic operation execution units and monitor operation states of the basic operation execution units, in which when there is a basic operation execution unit among the basic operation execution units which is executing a secret operation which uses data to be concealed as an argument, the whole operation controller causes basic operation execution units other than the basic operation execution unit to simultaneously execute a random number operation which uses a random number originally used for signature generation as an argument.

Claims

1. A signature generation apparatus comprising:

a plurality of basic operation execution units each executing a basic operation included in a signature generation procedure; and

a whole operation controller connected to the plurality of basic operation execution units to control operations in the basic operation execution units and monitor operation states of the basic operation execution units,

wherein when there is a basic operation execution unit among the plurality of basic operation execution units which is executing a secret operation which uses data to be concealed as an argument, the whole operation controller causes basic operation execution units other than the basic operation execution unit to simultaneously execute a random number operation which uses a random number originally used for signature generation as an argument.

2. The signature generation apparatus according to claim 1, wherein

the signature generation apparatus receives a message and key information including a private key, and executes a complex operation using a plurality of random numbers that are generated, to generate a signature for the message,

the data to be concealed is data including the private key, and a first random number used to mask the private key among the plurality of random numbers, and

when there is a basic operation execution unit among the plurality of basic operation execution units which is executing the secret operation which uses the data to be concealed as an argument, the whole operation controller causes basic operation execution units other than the basic operation execution unit to simultaneously execute a random number operation which uses a second random number different from the first random number as an argument among the plurality of random numbers, or the whole operation controller newly generates a third random number that is different from the plurality of random numbers to simultaneously execute a random number operation which uses the third random number as an argument.

3. The signature generation apparatus according to claim 2, wherein when there is a basic operation execution unit among the plurality of basic operation execution units which is executing the secret operation which uses the data to be concealed as an argument, the whole operation controller determines whether basic operation execution units other than the basic operation execution unit are able to start the random number operation which uses the second random number as an argument, causes the basic operation execution units other than the basic execution unit to simultaneously execute the random number operation which uses the second random number as an argument when it is determined that the random number operation can be started, and causes the basic operation execution units other than the basic operation execution unit to simultaneously execute the random number operation which uses the third random number as an argument when it is determined that the random number operation cannot be started.

4. The signature generation apparatus according to claim 1, wherein when there are a plurality of basic operation execution units that are executing the secret operation among the plurality of basic operation execution units, the whole operation controller performs control so that the number of basic operation execution units that simultaneously operate the random number operation is equal to or larger than the number of basic operation execution units that are executing the secret operation.

5. The signature generation apparatus according to claim 1, further comprising a local bus for data transfer for connecting the plurality of basic operation execution units and the whole operation controller, wherein

the signature generation procedure comprises an RSA operation, an elliptic curve operation, an integer operation, and a hash operation, and

the plurality of basic operation execution units comprises:

a plurality of RSA operation circuits each executing the RSA operation;

a plurality of elliptic operation circuits each executing the elliptic curve operation;

a plurality of integer operation circuits each executing the integer operation; and

a hash operation circuit for executing the hash operation.

6. The signature generation apparatus according to claim 5, further comprising a plurality of signal lines connecting the plurality of respective basic operation execution units and the whole operation controller, wherein

the whole operation controller comprises:

an operation controller for controlling an operation in each of the operation circuits forming the plurality of basic operation execution units; and

a power waveform disturbance controller for monitoring an operation state of each of the operation circuits from an operation state transmission signal transmitted through the plurality of signal lines, and transmitting to each of the operation circuits a random number operation instruction signal to forcibly start the random number operation and random number data which is an argument of the random number operation.

7. The signature generation apparatus according to claim 6, wherein the power waveform disturbance controller further comprises a linear feedback register for generating the random number data.

8. The signature generation apparatus according to claim 5, further comprising a random number generation circuit for generating a random number.

9. The signature generation apparatus according to claim 8, further comprising a random number seed holding non-volatile memory in which a random number seed used for an initial value of random number generation processing is stored in advance.

10. The signature generation apparatus according to claim 1, further comprising a local bus for data transfer for connecting the plurality of basic operation execution units and the whole operation controller, wherein

the plurality of basic operation execution units are formed using a plurality of processor cores each executing any of the operations included in the basic operation, and

the whole operation controller dynamically reconstructs a configuration of the plurality of processor cores used to execute the basic operation.

11. The signature generation apparatus according to claim 1, wherein the signature generation procedure is a procedure for generating a group signature.

12. A signature generation method, wherein

a signature generation apparatus executes basic operations included in a signature generation procedure in parallel, and

when a secret operation which uses data to be concealed as an argument is executed while the basic operations are executed in parallel, the signature generation apparatus simultaneously executes a random number operation which uses a random number originally used for signature generation as an argument.

13. A non-transitory computer readable medium storing a signature generation program for causing a computer to execute the following processing of:

executing basic operations included in a signature generation procedure in parallel; and

simultaneously executing a random number operation which uses a random number originally used for signature generation as an argument while executing a secret operation which uses data to be concealed as an argument in the processing of executing the basic operations in parallel.