摘要：

针对一阶差分功耗分析(DPA)攻击问题，借鉴现有的频谱变换S盒防护方法，利用Walsh谱变换的单比特输出特性，并运用Walsh谱变换与构造相应掩码变量，提出一种基于Walsh谱变换的安全S盒算法。阐述算法的具体实现过程，分析所有敏感数据的掩码安全性。以数据加密标准算法为例，描述该算法在实际应用中的具体实现。通过50万条功耗曲线的DPA攻击进行实验，结果表明，与基于傅里叶变换的S盒算法相比，该算法在保证安全性的同时，可避免复杂的算术掩码操作。

关键词: 旁路分析, S盒, 差分功耗分析, 傅里叶变换, Walsh谱变换, 掩码, 数据加密标准

Abstract:

Inheriting ideas of spectrum conversion, this paper takes advantage of one-bit output property of Walsh spectrum transform to propose a secure S-box algorithm against first-order Differential Power Analysis(DPA), the algorithm is actually achieved by application of Walsh spectrum transform and construction of proper mask variables. Given elaboration of implementation, the paper theoretically proves the algorithm’s security with mask analysis of all sensitive variables. The algorithm’s provably simple enough with some simplifications used in module operation. In case of Data Encryption Standard(DES), this paper introduces its application in reality and demonstrates its strong security by a DPA experiment of 500 000 random plaintexts, results show that, compared with S-box algorithm based on Fourier transform, the algorithm prevents complicated arithmetic mask successfully with strong security guaranteed meanwhile.

Key words: Side Channel Analysis(SCA), S-box, Differential Power Analysis(DPA), Fourier transform, Walsh spectrum transform, mask, Data Encryption Standard(DES)

中图分类号: 

• TP309