Thwarting side-channel analysis against RSA cryptosystems with additive blinding.

This paper proposes new countermeasures for RSA cryptosystems using additive blinding. In general, existing countermeasures for RSA cryptosystems have implemented multiplicative blinding while additive blinding methods have been used to protect symmetric cryptosystems, such as AES, DES, and so on. However, we show here that additive blinding can be efficiently and securely implemented with RSA cryptosystems. We prove that the proposed methods can greatly enhance security to protect against power and fault analysis, as compared to existing countermeasures. In addition, the proposed countermeasures are faster than existing ones and can be executed with a low computational cost, as proven herein by conducting a security and performance analysis. [ABSTRACT FROM AUTHOR]