New Strategy of Efficient SPA-Resistant Exponentiations

Abstract

In this paper, we propose a new strategy of SPA-resistant exponentiation. Unlike the previous strategy that attackers can only detect one computation type, the attacker can detect the square-only and the square-and-multiply computations in evaluating exponentiation. If the probabilities of digits in these two computations are the same, the attackers do not get any information.