一种针对采用SPA-FA防御措施的RSA故障分析算法  

A RSA Fault Analysis Algorithm of SPA-FA Resistant Measures

作　　者：范黎恒 陈财森[2] 曾剑隽[3] 

机构地区：[1]总装重庆军代局,重庆400060 [2]军械工程学院计算机工程系,石家庄050003 [3]北京交通大学电子信息工程学院,北京100080

出　　处：《兵工自动化》2011年第6期91-93,96,共4页Ordnance Industry Automation

基　　金：国家自然科学基金(60772082);河北省自然科学基金(08M010)资助

摘　　要：在对RSA密码算法和安全错误攻击原理进行研究的基础上,以硬件模乘法器实现的模幂算法为分析对象,提出一种针对采用抗SPA-FA防御措施的RSA故障分析算法。攻击者利用在模幂运算过程中对其中的乘数寄存器注入故障,再通过判断最后输出结果的正确性来判断相应密钥位的值,并从3个方面给出算法的可行性分析。结果证明了RSA算法在采用硬件乘法器情况下的安全漏洞,能为有效防护算法的安全和研究提供参考。To research the principle of safe-error attack and RSA algorithm,the modular measures based on the hardware modular multiplier is taken as the analyzed target.Propose a fault analysis on RSA using SPA-FA resistant.The attacker inject fault into one of the multipliers during the modular exponentiation,and then it can use the output to deduce the corresponding bits of key.The vulnerability of RSA using SPA-FA resistant based on hardware modular multiplier is proved in theory,the practicability of the attack is analyzed in three aspects.The result shows that RSA algorithm can provide effective resistant measures safety and research with reference when there is safety leak in hardware multiplication situation.

关 键 词：旁路攻击 RSA算法 安全错误攻击 故障分析 SPA-FA防御措施 

分 类 号：TP301.6[自动化与计算机技术—计算机系统结构]