TY - GEN
T1 - Lightweight coprocessor for koblitz curves
T2 - International Workshop on Cryptographic Hardware and Embedded Systems, CHES 2015
AU - Roy, Sujoy Sinha
AU - Järvinen, Kimmo
AU - Verbauwhede, Ingrid
PY - 2015/9/13
Y1 - 2015/9/13
N2 - We propose a lightweight coprocessor for 16-bit microcontrollers that implements high security elliptic curve cryptography. It uses a 283-bit Koblitz curve and offers 140-bit security. Koblitz curves offer fast point multiplications if the scalars are given as specific τ-adic expansions, which results in a need for conversions between integers and τ-adic expansions. We propose the first lightweight variant of the conversion algorithm and, by using it, introduce the first lightweight implementation of Koblitz curves that includes the scalar conversion. We also include countermeasures against side-channel attacks making the coprocessor the first lightweight coprocessor for Koblitz curves that includes a set of countermeasures against timing attacks, SPA, DPA and safe-error fault attacks. When the coprocessor is synthesized for 130nm CMOS, it has an area of only 4, 323 GE. When clocked at 16 MHz, it computes one 283-bit point multiplication in 98ms with a power consumption of 97. 70 μW, thus, consuming 9. 56 μJ of energy.
AB - We propose a lightweight coprocessor for 16-bit microcontrollers that implements high security elliptic curve cryptography. It uses a 283-bit Koblitz curve and offers 140-bit security. Koblitz curves offer fast point multiplications if the scalars are given as specific τ-adic expansions, which results in a need for conversions between integers and τ-adic expansions. We propose the first lightweight variant of the conversion algorithm and, by using it, introduce the first lightweight implementation of Koblitz curves that includes the scalar conversion. We also include countermeasures against side-channel attacks making the coprocessor the first lightweight coprocessor for Koblitz curves that includes a set of countermeasures against timing attacks, SPA, DPA and safe-error fault attacks. When the coprocessor is synthesized for 130nm CMOS, it has an area of only 4, 323 GE. When clocked at 16 MHz, it computes one 283-bit point multiplication in 98ms with a power consumption of 97. 70 μW, thus, consuming 9. 56 μJ of energy.
KW - Elliptic curve cryptography
KW - Koblitz curves
KW - Lightweight implementation
KW - Side-channel resistance
UR - http://www.scopus.com/inward/record.url?scp=84946096421&partnerID=8YFLogxK
U2 - 10.1007/978-3-662-48324-4_6
DO - 10.1007/978-3-662-48324-4_6
M3 - Conference contribution
AN - SCOPUS:84946096421
SN - 9783662483237
T3 - Lecture Notes in Computer Science
SP - 102
EP - 122
BT - Cryptographic Hardware and Embedded Systems - CHES 2015
A2 - Güneysu, Tim
A2 - Handschuh, Helena
PB - Springer Verlag
Y2 - 13 September 2015 through 16 September 2015
ER -