针对8051芯片RSA算法的选择明文SPA攻击  

Chosen-plaintext SPA Attacks Against RSA Algorithms of 8051 Chip

作　　者：曹娜娜[1] 万武南[1] 陈运[1] 吴震[1] 

机构地区：[1]成都信息工程学院信息安全研究所,四川成都610225

出　　处：《成都信息工程学院学报》2011年第4期357-361,共5页Journal of Chengdu University of Information Technology

基　　金：国家自然科学基金资助项目(60873216)

摘　　要：针对随机数据作明文时,8051芯片RSA算法功耗曲线轮间差异不明显,提出采用特殊数据(如N-1,R-1等)作为明文,可获得功耗差异比较明显的曲线。验证真实环境下采用特殊数据作明文对8051芯片RSA算法进行SPA攻击,可以降低8051芯片密钥的破解难度,提高其功耗曲线攻击效率。最后,根据实验结果提出了提高智能卡安全的防御方法。In this paper,we proposes a new method of obtaining the obvious difference power traces by using special data(N-1,R-1,etc.) as plaintexts,according to the problem that the various multiplication signals of RSA algorithms can not be distinguished by direct observation in the 8051 chip.Our SPA attack can easily find the various multiplication signals by applying special data as plaintexts,the difficulty of cipher code cracking for 8051 chip is greatly dropped,and the attack efficiency improved greatly by experiments in real environment.We also propose an efficient countermeasure which is secure against the special plaintext attack.

关 键 词：信息安全 模幂 简单功耗分析 选择明文 芯片 

分 类 号：TN918.91[电子电信—通信与信息系统]