ECC密码算法的差分功耗分析攻击研究  

Research on Differential Power Analysis Attack on ECC Algorithm

作　　者：邓秋成[1] 白雪飞[1] 郭立[1] 王尧[1] 

机构地区：[1]中国科学技术大学电子科学与技术系,安徽合肥230027

出　　处：《微电子学与计算机》2011年第2期149-152,共4页Microelectronics & Computer

基　　金：国家自然科学基金项目(60606005)

摘　　要：对基于有限域GF(2m)上椭圆曲线密码算法的Montgomery Ladder点乘算法进行了差分功耗分析攻击.首先用Verilog HDL实现了该算法并且用Chartered 0.35μm CMOS工艺将RTL代码综合成电路网表,以便更精确的获取电路运行中所产生的功耗信息.然后用差分功耗分析攻击中的ZEMD攻击方法,并采用算法中P2的横坐标作为中间变量对功耗曲线进行分类,攻击结果显示,Montgomery Ladder算法不能抗ZEMD差分功耗分析攻击.证明了该算法并不安全,在实际应用中还应该采取一些保护措施.In this paper,we described a differential power analysis attack on the Montgomery Ladder algorithm based on the finite field GF（2m）.We first implemented the algorithm with Verilog HDL,and then synthesized it to the netlist using the Charted 0.35μm CMOS technology,thus we can get the power information accurately.We performed a ZEMD differential power analysis attack on this algorithm subsequently,and use the abscissa of P2,a variable of the Montgomery Ladder algorithm,as the intermediate variable to classify the power curves,the result shows that the Montgomery Ladder algorithm couldn′t resist the ZEMD differential power analysis attack.So the algorithm is not secure enough,we need to take some more protective measures in practice.

关 键 词：ECC密码算法 差分功耗分析攻击 ZEMD攻击 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]