SPRUJB6B November 2024 – May 2025 AM2612
This command coverts an unblinded elliptic curve private key to DPA blinded form, using a random number from the RNG.
| Slot | Name | Description | In ROM? |
|---|---|---|---|
| 3 | S | The private key | No |
| 13 | q | Order of the subgroup generated by (gx,gy). Must be odd. | Yes |
The ECC_KEY_BLIND command will raise an error if q is even. It does not require s<q.
On error, this command clears slots 0 through 12.
Output memory map:
| Slot | Name | Description |
|---|---|---|
| 3 | s0 | First component of blinded private key. |
| 4 | s1 | Second component of blinded private key. |