Edwards曲线上抗SPA快速标量乘算法  

SPA resistant scalar multiplication on Edwards curve

作　　者：刘双根[1] 姚华童 李发根[2] LIU Shuanggen;YAO Huatong;LI Fagen(School of Telecommunication and Information Engineering, Xi’an University of Posts and Telecommunications, Xi’an 710121, China;School of Computer Science and Engineering, University of Electronic Science and Technology, Chengdu 611731, China)

机构地区：[1]西安邮电大学通信与信息工程学院,西安710121 [2]电子科技大学计算机科学与工程学院,成都611731

出　　处：《计算机工程与应用》2017年第1期103-106,共4页Computer Engineering and Applications

基　　金：国家自然科学基金(No.61272525);陕西省教育厅科研计划资助项目(No.2013JK1097)

摘　　要：针对Edwards曲线上标量乘法的效率及安全性,提出了马尔科夫点加-倍点链(Markov Addition-Double Chain,MADC)。基于MADC的椭圆曲线标量乘算法每次循环都固定执行"点加-倍点"运算,从而能够天然抵抗简单能量攻击。此外,倍点运算占总运算量的一半,由于Edwards曲线的倍点公式相对点加公式所需的运算量极少,新算法的运算量将大大减少。实验结果表明,MADC的最佳链长为160,MADC-160相对于EAC-320、SAC-260和GRAC-258,效率分别提高了27%、10.4%和9.7%。In view of the efficiency and safety of Edwards curve scalar multiplication, this paper proposes MarkovAddition-Double Chain(MADC). The each loop of scalar multiplication algorithm based on MADC executes fixed“point additiondouble”operation, which can resist the simple power analysis naturally. In addition, the timing cost of new algorithm willbe reduced greatly because that the calculation of double operation accounts for half of the total and the computation ofdouble operation needs very little calculation compared with point addition for Edwards curve. The experimental resultsshow that, the length of MADC is 160 in the best case and the efficiency is increased by 27%, 10.4%and 9.7% respectivelyrelative to EAC-320, SAC-260 and GRAC-258.

关 键 词：Edwards曲线 标量乘法 马尔科夫点加-倍点链(MADC) 简单能量攻击 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]