Securing RSA against Fault Analysis by Double Addition Chain Exponentiation

Abstract. Fault Analysis is a powerful cryptanalytic technique that enables to break cryptographic implementations embedded in portable devices more efficiently than any other technique. For an RSA implemented with the Chinese Remainder Theorem method, one faulty execution suffices to factorize the public modulus and fully recover the private key. It is therefore mandatory to protect embedded implementations of RSA against fault analysis. This paper provides a new countermeasure against fault analysis for exponentiation and RSA. It consists in a self-secure exponentiation algorithm, namely an exponentiation algorithm that provides a direct way to check the result coherence. An RSA implemented with our solution hence avoids the use of an extended modulus (which slows down the computation) as in several other countermeasures. Moreover, our exponentiation

• Type: Conference
• Year: 2009
• Where: CTRSA
• Authors: Matthieu Rivain
• Keywords: Cryptology, CTRSA 2009, Exponentiation Algorithm, Fault Analysis, Self-secure Exponentiation Algorithm