Abstract:Public key cryptographic（PKC） algorithms, such as the RSA, elliptic curve digital signature algorithm（ECDSA） etc., are widely used in the secure communication systems, such as OpenSSL, and a variety of information security systems. If designer do not securely implement them, the secret key will be easily extracted by side-channel attacks（SCAs） or combinational SCA thus mitigating the security of the entire communication system. Previous countermeasures of PKC implementations focused on the core part of the algorithms and ignored the modular inversion which is widely used in various PKC schemes. Many researchers believe that instead of straightforward implementation, constant time modular inversion（CTMI） is enough to resist the attack of simple power analysis combined with lattice analysis. However, we find that the CTMI security can be reduced to a hidden t-bit multiplier problem. Based on this feature, we firstly obtain Hamming weight of intermediate data through side-channel leakage. Then, we propose a heuristic algorithm to solve the problem by revealing the secret（partial and full） base of CTMI. Comparing previous nec-essary input message for masking filtering, our procedure need not any information about the secret base of the inversion. To our knowledge, this is the first time for evaluating the practical security of CTMI and experimental results show the fact that CTMI is not enough for high-level secure communication systems.

A PKI/CA Model Design Based on Threshold and ECC

Distributed Certification Application Via a Trusted Dealer

Secure Information Exchange Model Between PDM Systems

A Design Scheme of Enterprise Secure Communication Platform

Implementation of Non-repudiation in Electronic Payment System Based on CA Technology

Research on Open Identity Authentication Model for PKI

Fast public key infrastructure authentication based on CA caching

PKI:Fundamental of Secure Electronic Commerce

Analysis and Implementation of Hybrid Multi-level PKI Trust Model

PKI Technology for Data Encryption

A PKI-Based Authentication Approach for E-Business Systems

The Research of the Corporation-Rate Certificate Authority

Towards a Scalable PKI for Electronic Commerce Systems.

ECC Based Threshold Decryption Scheme and Its Application in Web Security

To Construct High Level Secure Communication System: CTMI is Not Enough

Digital certificate management: Optimal pricing and CRL releasing strategies

Conformation and Application of Dynamic Public Key Infrastructure

Research and Implementation of Private Enterprise CA Based on Open Source Code

Study on Electronic Signature Technology Based on Combined Public Key

Windows 2000 Public Key Infrastructure and Electronic Commerce

RESEARCH ON A PKI-BASED IoT SECURITY MODEL