Montgomery Exponentiation with no Final Subtractions: Improved Results

  • Authors:
  • Gaël Hachez;Jean-Jacques Quisquater

  • Affiliations:
  • -;-

  • Venue:
  • CHES '00 Proceedings of the Second International Workshop on Cryptographic Hardware and Embedded Systems
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Montgomery multiplication is commonly used as the core algorithm for cryptosystems based on modular arithmetic. With the advent of new classes of attacks (timing attacks, power attacks), the implementation of the algorithm should be carefully studied to thwart those attacks. Recently, Colin D. Walter proposed a constant time implementation of this algorithm [17,18]. In this paper, we propose an improved (faster) version of this implementation. We also provide figures about the overhead of these versions relatively to a speed optimised version (theoretically and experimentally).