摘要： 为抵御功耗、电磁辐射等侧信道分析攻击，提出一种高级加密标准(AES)双路径掩码方法。采用2条数据路径，将随机数和随机S盒用于掩码操作，使一个加、解密轮次内的所有中间运算结果与AES算法的标准中间结果都不相同，且各中间结果的汉明重量随明文随机变化。实验结果表明，AES算法中间结果的汉明重量与该方法产生的能量特征之间的相关性被完全消除，可抵御各种侧信道分析攻击。

关键词: 侧信道分析, 高级加密标准算法, 差分功耗分析, 掩码方法, S盒, 时序折叠

Abstract: In order to resist the side-channel analysis as power and EM attack, a dual-path masking method is proposed for Advanced Encryption Standard(AES) algorithm implementation. Through two data paths, the random numbers and random S-boxes are used to mask operation, which makes all intermediate variables among the proposed AES scheme different from that of the standard method, and the Hamming distance corresponding to each intermediate variable changes with the plaintext. It is simple in structure, and conducive to software and hardware implementation. Experimental result shows the correlation between the intermediates of standard AES and the energy characteristics of proposed AES scheme are completely removed. Thus, the proposed method bears strong immunity to all known side-channel analysis.

Key words: side-channel analysis, Advanced Encryption Standard(AES) algorithm, Differential Power Analysis(DPA), masking method, S-box, timing folding

中图分类号: 

• TP309