作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2018, Vol. 44 ›› Issue (11): 148-153. doi: 10.19678/j.issn.1000-3428.0051707

• 安全技术 • 上一篇    下一篇

基于秘密共享的SM4算法S盒实现方案

李新超a,b,钟卫东a,b,刘明明a,b,李栋a,b   

  1. 武警工程大学 a.网络与信息安全武警部队重点实验室; b.密码工程学院,西安 710086
  • 收稿日期:2018-05-31 出版日期:2018-11-15 发布日期:2018-11-15
  • 作者简介:李新超(1992—),男,硕士研究生,主研方向为密码学、信息安全;钟卫东,教授;刘明明、李栋,硕士研究生。
  • 基金资助:

    国家自然科学基金(U1636114);国家社会科学基金(16btj033)

S-box Implementation Scheme of SM4 Algorithm Based on Secret Sharing

LI Xinchao a,b,ZHONG Weidong a,b,LIU Mingming a,b,LI Dong a,b   

  1. a.Key Laboratory for Network and Information Security of Chinese Armed Police Force; b.School of Cryptographic Engineering, Engineering University of the Chinese Armed Police Force,Xi’an 710086,China
  • Received:2018-05-31 Online:2018-11-15 Published:2018-11-15

摘要:

针对现有的SM4算法掩码方案不能完全抵抗差分功耗分析(DPA)攻击的现状,提出一种基于秘密共享抵抗DPA攻击的方案。通过将输入变换到复合域中求逆,结合秘密共享、门限方案构造一个新型S盒。S盒利用秘密共享函数代替仿射变换,在乘法器分组中采用虚拟值法,并在反相器中引入分解法,使得实现方案具有较少的运算次数和较低的空间占比。安全性分析与实验结果表明,该方案所构造的S盒可有效抵御高阶DPA攻击及glitch攻击,且具有较低的功率消耗。

关键词: SM4算法, 差分功耗分析, S盒, 秘密共享, 虚拟值, 复合域

Abstract:

Aiming at the current situation that the existing SM4 algorithm mask scheme cannot completely resist the Differential Power Analysis(DPA) attack,a scheme based on secret sharing resistance DPA attack is proposed.This method constructs a new S-box by transforming the input into the composite domain and combining with the secret sharing as well as the threshold scheme.The new S-box uses secret sharing function instead of affine transformation,adopts the virtual value method in the multiplier grouping,and introduces the decomposition method in the inverter,which makes the scheme have less computation times and lower space proportion.Security analysis and experimental results show that the S-box constructed by this scheme can effectively resist high-order DPA attacks and glitch attacks,and has low power consumption.

Key words: SM4 algorithm, Differential Power Analysis(DPA), S-box, secret sharing, virtual value, composite field

中图分类号: