Abstract: Systems and techniques are provided for secure computing. For instances, a process can include generating a master private key; generating a set of first dummy values; dividing the master private key into a first set of shares, wherein a sum of shares of the first set of shares equals a value of the master private key; initiating portions of an active memory bank with a sequence of integer modular additions, wherein the integer modular additions comprise: masking the first set of shares of the master private key; and adding the masked first set of shares of the master private key to portions of the active memory bank using a sequence of adds that adds and mixes the masked first set of shares of the master private key with dummy values.

Abstract: Systems and techniques are provided for random number generation. For instance, a process can include generating, using a first random number generator of a plurality of random number generators, a first random number; inputting the first random number to a first flow engine of a plurality of flow engines, wherein the first flow engine is coupled to a random number consumer, of one or more random number consumers, through a first set of flow engines, of the plurality of flow engines, wherein the plurality of flow engines are unclocked; randomly transforming, by the first set of flow engines, the first random number to a second random number; and buffering the second random number from the first set of flow engines for output to the random number consumer.

Abstract: Systems and techniques are provided for secure computing. For instances, a process can include generating a master private key; generating a set of first dummy values; dividing the master private key into a first set of shares, wherein a sum of shares of the first set of shares equals a value of the master private key; initiating portions of an active memory bank with a sequence of integer modular additions, wherein the integer modular additions comprise: masking the first set of shares of the master private key; and adding the masked first set of shares of the master private key to portions of the active memory bank using a sequence of adds that adds and mixes the masked first set of shares of the master private key with dummy values.

Abstract: Systems and techniques are described herein for information protection. For example, a process may include obtaining a security information asset at a randomizing engine; performing a first randomization of the security information asset to obtain a randomized security information asset; providing the randomized security information asset to a secure storage device; obtaining the randomized security information asset from the secure storage device; performing a second randomization of the security information asset to obtain an updated randomized security information asset; and providing the updated randomized security information asset to a security component, wherein the updated randomized security information asset is used to perform a security operation.

Abstract: Systems and techniques are provided for secure processing. For instance, a process can include: providing an input value to generate a first output value; obtaining a plurality of first intermediate output values based on a function of the first output value and a tweak value; embedding the plurality of first intermediate output values into a mathematical structure; obtaining a plurality of second intermediate output values, wherein the plurality of second intermediate output values are a function of the plurality of first intermediate output values, a random number, and an inverse of the tweak value; determining a most common value of the plurality of second intermediate output values; obtaining a third intermediate value, the third intermediate value based on a function of the most common value and an inverse of the random number; projecting the third intermediate value from the mathematical structure to obtain a second output value for output.

Abstract: Systems and techniques are provided for secure computing systems. For example, a process can include obtaining a plurality of instructions, wherein the plurality of instructions comprises a sequential order for execution of the plurality of instructions by a processor. The process can include determining that two or more instructions of the plurality of instructions are capable of being fused. The process can include determining that a random variable satisfies an instruction fusion condition. The process can include executing, based on determining that the two or more instructions of the plurality of instructions are capable of being fused and the random variable satisfies the instruction fusion condition, the two or more instructions of the plurality of instructions as a single fused instruction.

Abstract: Systems and techniques are provided for secure computing systems. For example, a process can include obtaining a plurality of instructions, wherein the plurality of instructions comprises a sequential order for execution of the plurality of instructions by a processor. The process can include determining that two or more instructions of the plurality of instructions are capable of being fused. The process can include determining that a random variable satisfies an instruction fusion condition. The process can include executing, based on determining that the two or more instructions of the plurality of instructions are capable of being fused and the random variable satisfies the instruction fusion condition, the two or more instructions of the plurality of instructions as a single fused instruction.

Abstract: Systems and techniques for securely performing cryptographic operations are described herein. For example, a process can include obtaining a public data and a security information asset. The process can include performing, by a first computation module, a Boolean operation on the public data and the security information asset to generate an output. The process can include obtaining the public data and the security information asset. The process can include performing, by a second computation module, the Boolean operation on the public data and the security information asset to generate the output. The first computation module has a first configuration and the second computation module has a second configuration, different from the first configuration.

Abstract: Systems and techniques are provided for secure processing. For instance, a process can include receiving a plurality of instructions for execution; receiving an indication that the plurality of instructions are independent instructions; randomly reordering the plurality of instructions; executing the randomly reordered plurality of instructions; and outputting a plurality of results corresponding to the plurality of instructions.

Abstract: Systems and techniques are provided for secure processing. For instance, a process can include: providing an input value to generate a first output value; obtaining a plurality of first intermediate output values based on a function of the first output value and a tweak value; embedding the plurality of first intermediate output values into a mathematical structure; obtaining a plurality of second intermediate output values, wherein the plurality of second intermediate output values are a function of the plurality of first intermediate output values, a random number, and an inverse of the tweak value; determining a most common value of the plurality of second intermediate output values; obtaining a third intermediate value, the third intermediate value based on a function of the most common value and an inverse of the random number; projecting the third intermediate value from the mathematical structure to obtain a second output value for output.

Abstract: Systems and techniques are provided for security processing. For example, a process for security processing may include obtaining a cryptographic input at a cryptographic algorithm execution component; obtaining a first mask and a second mask at the cryptographic algorithm execution component; executing a first logic circuit using the first mask and the cryptographic input to obtain a first output; executing a second logic circuit using the second mask and the cryptographic input to obtain a second output; and performing a comparison of the first output and the second output to determine whether the comparison is a successful comparison.

Abstract: Systems and techniques are described herein for information protection. For example, a process may include obtaining a security information asset at a randomizing engine; performing a first randomization of the security information asset to obtain a randomized security information asset; providing the randomized security information asset to a secure storage device; obtaining the randomized security information asset from the secure storage device; performing a second randomization of the security information asset to obtain an updated randomized security information asset; and providing the updated randomized security information asset to a security component, wherein the updated randomized security information asset is used to perform a security operation.

Abstract: The invention relates to a method for generating masks in a communicating object, the masks being intended to mask data to be stored in the communicating object. At least one master mask is stored in the communicating object. According to the invention, the method involves applying at least one diversifier to the master mask so as to generate a diversified mask; masking the datum to be stored in the communicating object by a reversible function using the diversified mask, the mask generating a masked datum; and storing the masked datum in the communicating object with the diversifier used to generate the diversified mask for obtaining the masked datum. The invention also relates to a communicating object including components for implementing such a method.