摘要： BLS短签名是基于双线性对构造的数字签名方案,与传统ECDSA签名方案相比具有签名长度短的优势。目前,椭圆曲线密码的故障攻击已经得到深入研究,而基于双线性对构造的密码故障攻击研究则较少。针对BLS短签名的安全问题,从故障攻击的角度进行分析,通过将现有的适用于二元扩域椭圆曲线的无效曲线故障攻击方法推广到三元扩域,从而对BLS短签名方案实施攻击。仿真实验结果表明,在具备单比特故障注入的条件下,该方法只需导入1次单比特的故障即可以较大的概率破解BLS短签名的密钥。

关键词: 故障攻击, 双线性对, BLS短签名, 旁路攻击, 椭圆曲线, 无效曲线攻击

Abstract: BLS short signature is a digital signature scheme based on bilinear pairings,compared with the traditional ECDSA signature,BLS scheme has the advantage of its short signature length.Recently,a lot of researches are made in the field of fault attack on elliptic curve cryptography.However,fault attack on the bilinear pairings-based cryptography is rarely researched.This paper studies the security of BLS short signature scheme through analyzing in fault attack scenario.The main idea is to create the invalid curve attack method suitable for GF(3l) by applying the current invalid curve attack method suitable for GF(2m).This attack method can be used to attack the BLS short signature scheme.Simulation experimental result shows that the key of the BLS short signature can be broken with high probability by this method and only one time with single bit fault injection is required.

Key words: fault attack, bilinear pairings, BLS short signature, side channel attack, elliptic curve;invalid curve attack

中图分类号: 

• TP309.7