智能卡中抗高阶功耗攻击AES算法实现技术  

An AES Smartcard Implementation Against High Order DPA Attacks

作　　者：窦强[1] 童元满[1] 窦文华[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2009年第12期16-19,共4页Computer Engineering & Science

摘　　要：在提取AES算法中各种变换的公共操作的基础上,定义相应的基于随机掩码的原子操作,并以硬件方式实现。将AES算法中各种变换转换为随机掩码原子操作的序列,密码算法运算过程中使用不同的随机量对所有中间结果进行掩码。在此基础上,以软硬件结合的方式实现AES算法,掩码的原子操作以硬件方式实现,而运算流程控制以软件方式实现;并且结合运算流程随机化技术进一步提高实现的安全性。安全分析表明,这种实现技术可以抗一阶功耗攻击和高阶功耗攻击。实验结果表明,所提出的AES算法实现方法的硬件实现开销较小,并且具有高安全性,适合于智能卡实现。Several primitive operations are extracted from the transformations of the AES algorithm. The randomized mask based implementations of these primitive operations are proposed. And these masked operations are implemented in hardware. All the transformations in AES are then transformed to the sequence of these primitive operations. The execution flow is implemented in software. Combined with the random execution, the proposed software and hardware hybrid implementation scheme is proved to be secure against the first order DPA（differentiaI power analysis） and the high order DPA （HODPA） attacks. The experimental results show that our scheme is etticient and suitable tor smartcard implementation.

关 键 词：AES DPA HODPA 随机掩码 原子操作 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]