针对OpenSSL的RSA实现算法的计时攻击  

Timing Attack against OpenSSL＇ s Implementation of RSA

作　　者：陈财森[1] 王韬[1] 郑媛嫒[1] 杨杰[1] 

机构地区：[1]军械工程学院计算机工程系,河北石家庄050003

出　　处：《军械工程学院学报》2009年第2期71-74,共4页Journal of Ordnance Engineering College

基　　金：项目来源：国家自然科学基金资助项目（60772082）

摘　　要：通过对OpenSSL中的RSA算法的研究，发现RSA算法在解密过程中会发生Montgomery约简，从而导致对于不同的密文产生不同的解密时间差异，由该时间差异信息能够提取密钥的信息，进行密钥破解。为了能够产生更加明显的时间差异，提高攻击执行效率，提出了添加临近值的改进方法，并设计了计时攻击的流程。实验结果表明，改进的方法能够提高计时攻击的效率和准确性。Based on the research on the OpenSSL＇ s implementation of RSA, we finds that the Montgomery reduction,which happens during the course of RSA decryption and results in the timing differences with respect to different ciphertext given to an decryption algorithm, and the timing differences enable an attacker to extract secret information about private key, to crack a cryptosystem with timing measurement. In order to get more obvious timing difference, this paper proposes an improved approach with neighborhoods and designs the attack flow. The results of experiments show that the improved approach can improve the effect and veracity of timing attack.

关 键 词：RSA 计时攻击 蒙哥马利约简 中国剩余定理 邻近值 

分 类 号：TN918[电子电信—通信与信息系统]