基于真实密码电路的功耗分析攻击研究  

Power Analysis Attacks on Real Cipher Circuits

作　　者：李元[1] 刘政林[1] 邹雪城[1] 韩煜[1] 陈毅成[1] 

机构地区：[1]华中科技大学电子科学与技术系,武汉430074

出　　处：《微电子学》2008年第5期637-641,共5页Microelectronics

基　　金：2007新世纪优秀人才支持计划资助项目;国家高技术研究与发展(863)计划基金资助项目(2006AA01Z226);华中科技大学校基金重点资助项目(2006Z011B);湖北省自然科学基金资助项目(2006ABA080)

摘　　要：采用Atmel AT89C55微控制器,构建真实的密码电路攻击平台:在此低成本平台上,对微控制器指令的操作码和操作数进行了功耗分析实验。测量结果显示,运算中操作数变化的汉明权重与测量功耗差值之间存在线性关系;实验条件下,单位汉明权重能够导致大约5mV功耗偏差。采用差分功耗分析(DPA)和相关功耗分析(CPA),对高级加密标准(AES)的加密操作进行了功耗攻击实验。结果表明,CPA方法具有更高的攻击成功率,并且明文样本数和均值滤波均能够显著影响CPA相关系数信噪比。An Atmel AT89C55 microcontroller was used to construct a real attack platform of cipher circuits. Power analyses against opcode and operand were conducted on this low-cost platform. Measured results showed that there existed a linear relationship between hamming weight of changing operand and difference of measuring power. Unit hamming weight would cause approximately 5 mV of power deviation under experimental conditions. Using dif- ferential power analysis （DPA）and correlation power analysis （CPA）, the encrypted operation of advanced encryption standard （AES）was attacked. Experimental results showed that the CPA method had a higher success rate, and thel number of plaintext samples and average filtering could significantly affect SNR of correlation coefficients.

关 键 词：密码电路 差分功耗分析 相关功耗分析 高级加密标准 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]