摘要： 针对典型数据加密标准(DES)掩码实现的安全性问题,提出一种对其进行密钥破解的相关性功耗分析方 法。结合DES 运算后两轮,选择密码运算过程中间值中的分散位作为目标函数,利用汉明重量模型猜测第16 轮运 算的轮密钥,并计算功耗和中间值数据的汉明重量之间的相关性,根据相关性大小进行排序,从而破解掩码DES 算 法的密钥。实验结果表明,该方法取得了较好的效果,可成功破解掩码型DES 算法的64 位密钥。

关键词: 数据加密标准, 旁路攻击, 掩码技术, 相关性功耗分析, S 盒

Abstract: Aiming at the security problem of typical masked Data Encryption Standard (DES) implementation,this paper introduces a Correlation Power Analysis(CPA) method,which combines the last two rounds of DES algorithm and selects discrete bits of intermediate data as target function. Using Hamming Weight (HW) model,it guesses the 16th round of DES key and calculates the correlation between power and HW of data. By ranking the correlation value,it can break the masked DES key. Experimental result of attacking smartcard with masked software DES shows that it can successfully break the 64 bit DES key.

Key words: Data Encryption Standard ( DES ), side channel attack, mask technology, Correlation Power Analysis (CPA), S box

中图分类号: 

• TP309