摘要： 针对无线射频识别（RFID）系统安全性较低的问题，提出一种适用于RFID标签的超轻量级流密码算法Willow。根据正差集性质选取函数抽头，以增加猜测确定攻击的复杂度。采用动态初始化方式并使用位数较小的计数器进行密钥索引和初始化，从而降低算法的电路面积和功耗。在Design Compiler上进行对比实验，结果表明，与Grain-v1、Plantlet等算法相比，Willow算法的延迟和功耗均较低，其在硬件性能和安全性上取得了较好的折中。

关键词: 超轻量级流密码, 无线射频识别, 动态初始化, 硬件实现, 时间存储数据折中攻击

Abstract: To address the low security of Radio Frequency Identification(RFID) system,an ultra-lightweight stream cipher algorithm Willow for RFID tags is proposed.Function taps are selected according to the property of positive difference set to increase the complexity of guess-and-determine attack.In order to reduce the circuit area and power consumption of the algorithm,a dynamic initialization method is adopted,and a counter with a smaller number of digits is used for key indexing and initialization.A comparative experiment is carried out on Design Compiler,and results show that the delay and power consumption of Willow algorithm are lower than those of Grain-v1 and Plantlet algorithm,and it achieves a good balance between hardware performance and security.

Key words: ultra-lightweight stream cipher, Radio Frequency Identification(RFID), dynamic initialization, hardware implementation, time-memory-data tradeoff attack

中图分类号: 

• TP391