Global Patent Index - EP 0958671 A1

EP 0958671 A1 19991124 - A METHOD OF USING TRANSIENT FAULTS TO VERIFY THE SECURITY OF A CRYPTOSYSTEM

Title (en)

A METHOD OF USING TRANSIENT FAULTS TO VERIFY THE SECURITY OF A CRYPTOSYSTEM

Title (de)

VERFAHREN ZUR VERWENDUNG VORÜBERGEHENDER FEHLER BEI DER PRÜFUNG DER SICHERHEIT EINES KRYPTOSYSTEMS

Title (fr)

PROCEDE D'UTILISATION DE DEFAUTS TRANSITOIRES AFIN DE VERIFIER LA SECURITE D'UN SYSTEME CRYPTOGRAPHIQUE

Publication

EP 0958671 A1 19991124 (EN)

Application

EP 98907364 A 19980204

Priority

  • US 9802086 W 19980204
  • US 3692597 P 19970207

Abstract (en)

[origin: WO9835467A1] A useful method of verifying the integrity of a cryptosystem involves using erroneous outputs to obtain secret information (700). In certain signature schemes which use the Chinese Remainder Theorem, a correct signature of a message and an erroneous signature of the same message permit the modulus to be easily obtained. If the content of the message is known, such cryptosystems may be cracked with only an erroneous signature of the message. Certain other authorization schemes may be cracked by analyzing a number of erroneous outputs caused by a particular type of error called a "register fault". A security expert or cryptosystem designer may intentionally induce a tamper proof device to generate a faulty computation by subjecting the device, such as a smart card, to physical stress, such as certain types of radiation, atypical voltage levels, or a higher clock rate than the device was designed to accommodate. Cryptosystems should be impervious to the attacks described herein. If not, the system should be modified or discarded.

IPC 1-7

H04K 1/00

IPC 8 full level

G09C 1/00 (2006.01); H04L 9/10 (2006.01); H04L 9/32 (2006.01)

CPC (source: EP)

H04L 9/004 (2013.01); H04L 9/302 (2013.01); H04L 9/3218 (2013.01); H04L 9/3249 (2013.01); H04L 2209/26 (2013.01)

Citation (search report)

See references of WO 9835467A1

Designated contracting state (EPC)

DE FR GB IT SE

DOCDB simple family (publication)

WO 9835467 A1 19980813; AU 6319098 A 19980826; CA 2278754 A1 19980813; EP 0958671 A1 19991124; JP 2000509521 A 20000725

DOCDB simple family (application)

US 9802086 W 19980204; AU 6319098 A 19980204; CA 2278754 A 19980204; EP 98907364 A 19980204; JP 53484698 A 19980204