Keeping Secrets on Low-Cost Chips

In the mass markets in which chips are integrated into everyday objects, the cost pressures are great, but so is the need for security. To help resolve the conflict between cost and security, a new strategy embeds cryptographic algorithms into a cryptographic protocol such that they only need to be protected against single-execution side-channel attacks. To do this, the strategy introduces a key derivation function that's particularly easy to implement and protect.