针对S盒的ARIA-128差分故障分析  

Differential Fault Analysis on ARIA-128 with S-box

作　　者：吴杨[1] 赵新杰[1] 矫文成[1] 吴克辉[1] 

机构地区：[1]军械工程学院计算机工程系,河北石家庄050003

出　　处：《军械工程学院学报》2011年第3期52-55,共4页Journal of Ordnance Engineering College

基　　金：国家自然科学基金资助项目，河北省自然科学基金数学研究专项资助项目

摘　　要：针对ARIA-128分组密码进行差分故障分析,并将差分故障分析简化为求解S盒输入与输出差分问题,同时进行仿真实验。实验结果表明：ARIA-128分组密码易遭受差分故障分析攻击,8次故障注入可恢复1轮扩展轮密钥,32次故障注入即可恢复主密钥。该方法也适用于其他SPN结构的分组密码算法。This paper presents a differential fault analysis on ARIA-128,simplifies the differential fault analysis process to getting the input and output difference of S-box,and presents the simulating experiment.Experimental results show that：the block cipher ARIA-128 is vulnerable to differential fault analysis attack,8 faulty injections can recover a round key,32 faulty injections can recover the main 128-bit key.On the other hand,the differential fault analysis method in this paper can also be used on other block ciphers with SPN structure.

关 键 词：ARIA-128 分组密码 S盒 差分故障分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]