轻量级分组密码算法DoT的模板攻击

doi:10.19678/j.issn.1000-3428.0057724

摘要/Abstract

摘要： 模板攻击是一种重要的侧信道分析方法，其在实际密码算法破译中具有较强的区分能力。轻量级分组密码算法DoT在硬件和软件实现中都表现出优秀的性能，尽管目前针对DoT算法的传统数学攻击已经取得了一定效果，但是该算法在具体实现中是否足以抵御侧信道攻击仍有待研究。基于DoT算法结构及其S盒特点，提出一种针对DoT算法的模板攻击方法。基于汉明重量模型来刻画加密算法运行时的能耗特征，将S盒输出值的具体分布作为中间状态值构造区分器，从而进行密钥恢复。测试结果表明，该模板攻击仅需6组明文就可恢复出8 bit密钥信息，DoT密码算法在该模板攻击下具有脆弱性。

关键词: DoT密码算法, 模板攻击, 汉明重量, 掩码, 侧信道攻击

Abstract: As an important way of side channel analysis,template attacks have excellent distinguishing ability in the cracking of encryption algorithms.Recently,a lightweight block cipher algorithm called DoT performs well in both hardware and software implementation.Although some progress has been made in the traditional mathematical attacks against DoT,whether DoT can resist side channel attacks in practice remains to be an unsolved problem.This paper proposes a template attack method against DoT based on the structure of the DoT algorithm and its characteristics of S-box.This attack method uses the Hamming weight model to present the energy consumption features of the running encryption algorithms,takes the specific distribution of S-box output as the intermediate state value to construct the differentiator,and thus recovers the secret key.Experimental results show that the DoT algorithm is vulnerable to this kind of template attacks,which require only 6 groups of plaintexts to recover 8 bit key information.

Key words: DoT cipher algorithm, template attack, Hamming weight, mask, side channel attack

中图分类号:

TP391

孙家异, 韦永壮. 轻量级分组密码算法DoT的模板攻击[J]. 计算机工程, 2021, 47(3): 155-159,165.

SUN Jiayi, WEI Yongzhuang. Template Attacks Against Lightweight Block Cipher Algorithm DoT[J]. Computer Engineering, 2021, 47(3): 155-159,165.

https://www.ecice06.com/CN/Y2021/V47/I3/155

图/表 7

20210322171611

20210322171616

20210322171619

20210322171622

20210322171626

20210322171629

20210322171632

参考文献

[1] CHARI S,RAO J R,ROHATGI P.Template attacks[EB/OL].[2020-01-15].https://www.semanticscholar.org/paper/Template-Attacks-Chari-Rao/f7a0d42044b26be8d509310ba20fd8d665943eba?p2df.
[2] MANGARD S,OSWALD E,POPP T.Power analysis attacks[M].Translated by FENG Dengguo,ZHOU Yongbin,LIU Jiye,et al.Beijing:Science Press,2010.(in Chinese) MANGARD S,OSWALD E,POPP T.能量分析攻击[M].冯登国,周永彬,刘继业,等译.北京:科学出版社,2010.
[3] OSWALD E.Enhancing simple power-analysis attacks on elliptic curve cryptosystems[J].Cryptographic Hardware and Embedded Systems,2002,2523:82-97.
[4] BRIER E,CLAVIER C,OLIVIER F.Correlation power analysis with a leakage model[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2004:16-29.
[5] KOCHER P C,JAFFE J,JUN B.Differential power analysis[M].Berlin,Germany:Springer,2007.
[6] ZHANG Shaohui,WU Liji,ZHANG Xiangmin,et al.A template attack-resistant masking scheme for RC4 based on FPGA[C]//Proceedings of the 11th International Conference on Computational Intelligence and Security.Washington D.C.,USA:IEEE Press,2015:16-25.
[7] HU Yongbo,ZHENG Yeyang,YU Jun.A new template attack method of advanced encryption standard[J].Computer Engineering,2013,39(8):166-168.(in Chinese)胡永波,郑业扬,俞军.一种新的高级加密标准模板攻击方法[J].计算机工程,2013,39(8):166-168.
[8] EISENBARTH T,KUMAR S.A survey of lightweight-cryptography implementations[J].IEEE Design & Test of Computers Magazine,2007,24(6):522-533.
[9] BANIK S,PANDEY S K,PEYRIN T,et al.GIFT:a small present[C]//Proceedings of International Conference on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2017:15-29.
[10] ZHUKOV A.Lightweight cryptography:modern development paradigms[EB/OL].[2020-01-15].https://dl.acm.org/doi/epdf/10.1145/2799979.2799981.
[11] JAGDISH P,GAURAV B,KUMAR S K.DoT:a new ultra-lightweight SP network encryption design for resource-constrained environment[C]//Proceedings of International Conference on Data Engineering and Communication Technology.Berlin,Germany:Springer,2019:145-169.
[12] YANG G,ZHU B,SUDER V,et al.The simeck family of lightweight block ciphers[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2015:125-148.
[13] NECHVATAL J,BARKER E,BASSHAM L,et al.Report on the development of the advanced encryption standard[J].Journal of Research of the National Institute of Standards and Technology,2001,106(3):14-25.
[14] MATSUI M.Linear cryptanalysis method for DES cipher[M].Berlin,Germany:Springer,1994.
[15] BIHAM E,SHAMIR A.Differential cryptanalysis of DES-like cryptosystems[J].Journal of Cryptology,1991,4(1):3-72.
[16] KOCHER P C.Timing attacks on implementations of Diffie-Hellman,RSA,DSS,and other systems[C]//Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology.Berlin,Germany:Springer,1999:598-631.
[17] KELSEY J,SCHNEIER B,WAGNER D,et al.Side channel cryptanalysis of product ciphers[C]//Proceedings of European Symposium on Research in Computer Security.Berlin,Germany:Springer,1998:455-468.
[18] GANDOLFI K,MOURTEL C,OLIVIER F.Electromagnetic analysis:concrete results[C]//Proceedings of International Workshop on Cryptographic Hardware and Embedded Systems.Berlin,Germany:Springer,2001:251-261.
[19] OU Changhai,WANG Zhu,HUANG Weiqing,et al.Amplified template attacks on cryptographic devices using Hamming weight model[J].Journal of Cryptologic Research,2015,2(5):477-486.(in Chinese)欧长海,王竹,黄伟庆,等.基于汉明重量模型的密码设备放大模板攻击[J].密码学报,2015,2(5):477-486.
[20] TIAN Long,LIU Zongtian.Piecewise line fitting with least square method[J].Computer Science,2012,39(S1):482-484.(in Chinese)田垅,刘宗田.最小二乘法分段直线拟合[J].计算机科学,2012,39(S1):482-484.
[21] ENDERLEIN J.Maximum-likelihood criterion and single-molecule detection[J].Applied Optics,1995,34(3):514-515.
[22] STANDAERT F,ROUVROY G,QUISQUATER J J.FPGA implementations of the DES and triple-DES masked against power analysis attacks[EB/OL].[2020-02-15].https://static.aminer.org/pdf/PDF/000/214/572/design_strategies_and_modified_descriptions_to_optimize_cipher_fpga_implementations.pdf.
[23] NORBERT P,ELISABETH O,STEFAN M.A masked AES ASIC implementation[EB/OL].[2020-02-15].https://www.semanticscholar.org/paper/A-Masked-AES-ASIC-Implementation-%E2%88%97-Pramstaller-Oswald/935f6b3b0489de79ddcee51bb4c8741dde5b3c40.

选择文件类型/文献管理软件名称

选择包含的内容