摘要： 密码片上系统（SoC）的数据访存通路是侵入式探针分析的重要目标，为抵御侵入式分析，利用LBlock算法设计一种SoC存储加密总线。将LBlock算法硬件结构每4轮展开为1个时钟周期，使32轮加解密时序压缩到8个时钟周期，同时将数据存储器一般采用的32位总线缓冲至64位，以配合LBlock算法的分组操作。FPGA验证结果表明，该设计方案使得芯片内嵌数据存储器（如RAM、Flash等）的总线即使被探针攻击获取也无法解读，应用64位数据块进行8个时钟周期加密的访存吞吐率达到533 kb/s，且避免了32位分组加密穷举攻击，实现代价低。

关键词: 密码片上系统, 存储总线, 总线加密, LBlock算法, 侵入式分析

Abstract: The data access path of the crypto System on Chip(SoC) is an important target of intrusive probe analysis.To resist intrusive analysis,an SoC memory encryption bus is designed by using the LBlock algorithm.Take every 4 rounds of LBlock algorithm hardware structure expansion as 1 clock cycle,so that the 32 bit encryption and decryption timing is compressed to 8 clock cycles,and the 32 bit bus generally used by the data memory is buffered to 64 bit to work with the packet operation of the LBlock algorithm.FPGA verification results show that the design scheme makes the bus of data memory embedded in a chip(RAM,Flash,etc.) can not be read even if it is acquired by the probe attack.The throughput rate of data access reaches 533 KB/s after 8 clock cycles of encryption using 64 bit data blocks,and exhaustive attacks against 32 bit block encryption can be avoided.The implementation cost is reduced.

Key words: crypto System on Chip(SoC), memory bus, bus encryption, LBlock algorithm, invasive analysis

中图分类号: 

• TP336