基于密钥编排故障的SMS4算法的差分故障分析  

Differential fault analysis on the SMS4 cipher by inducing faults to the key schedule

作　　者：李玮[1] 谷大武[1] 

机构地区：[1]上海交通大学计算机科学与工程系,上海200240

出　　处：《通信学报》2008年第10期135-142,共8页Journal on Communications

基　　金：国家自然科学基金资助项目(60573031);教育部"新世纪优秀人才支持计划"基金资助项目(NCET-05-0398)~~

摘　　要：提出并讨论了一种针对SMS4密钥编排方案的差分故障攻击方法。该方法采用面向字节的随机故障模型,通过在SMS4算法的密钥编排方案中导入故障,仅需要8个错误密文即可恢复SMS4算法的128bit原始密钥。数学分析和实验结果表明,该方法不仅扩展了故障诱导的攻击范围,而且提高了故障诱导的攻击成功率,减少了错误密文数,为故障攻击其他分组密码提供了一种通用的分析手段。On the basis of the byte-oriented fault model and the differential analysis, a differential fault analysis on the SMS4 cipher by inducing faults in its key schedule was proposed. Mathematical analysis and simulating experiment show that the attack could recover its 128-bit secret key by introducing only eight faulty ciphertexts. Simultaneously, a method of distinguishing effective faults was presented to increase the efficiency of fault injection and decrease the number of faulty ciphertexts. Thus, experiment results are beneficial to the analysis of other iterated block ciphers.

关 键 词：密码分析 旁路攻击 差分故障分析 SMS4 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]