The SECP256K1 elliptic curve algorithm is fundamental in cryptocurrency wallets for generating secure public keys from private keys, thereby ensuring the protection and ownership of blockchain-based digital assets. However, the literature highlights several successful side-channel attacks on hardware wallets that exploit SECP256K1 to extract private keys. This work proposes a novel hardware architecture for SECP256K1, optimized for side-channel attack resistance and efficient resource utilization. The architecture incorporates complete addition formulas, temporary registers, and parallel processing techniques, making elliptic curve point addition and doubling operations indistinguishable. Implementation results demonstrate an average reduction of 45% in LUT usage compared to similar works, emphasizing the design's resource efficiency.
翻译:SECP256K1椭圆曲线算法是加密货币钱包中的基础算法,用于从私钥生成安全的公钥,从而确保基于区块链的数字资产得到保护并明确所有权。然而,文献指出,已有多种成功的侧信道攻击针对硬件钱包,通过利用SECP256K1算法来提取私钥。本文提出了一种新颖的SECP256K1硬件架构,该架构针对抗侧信道攻击能力和高效的资源利用率进行了优化。该架构采用了完整的加法公式、临时寄存器以及并行处理技术,使得椭圆曲线点加和倍点操作在功耗轨迹上无法区分。实现结果表明,与同类工作相比,该设计平均减少了45%的查找表(LUT)使用量,突显了其资源效率。