物联网环境下LED轻量级密码算法的安全性分析  

Security Analysis of the LED Lightweight Cipher in the Internet of Things

作　　者：李玮[1,2,3] 谷大武[2] 赵辰[1] 刘志强[2] 刘亚[2] 

机构地区：[1]东华大学计算机科学与技术学院,上海201601 [2]上海交通大学计算机科学与工程系,上海200240 [3]上海市信息安全综合管理技术研究重点实验室,上海200240

出　　处：《计算机学报》2012年第3期434-445,共12页Chinese Journal of Computers

基　　金：国家自然科学基金(61003278;61073150);上海市信息安全综合管理技术研究重点实验室开放课题资助基金;中央高校基本科研业务费专项资金资助~~

摘　　要：LED算法是于2011年CHES会议中提出的一种新型轻量级密码算法,用于在物联网环境下保护RFID标签以及智能卡等设备的通信安全.文中提出并讨论了一种针对LED算法的差分故障攻击方法.该方法采用面向半字节的随机故障模型,通过在LED算法中导入故障,分别仅需要3个错误密文和6个错误密文,即可恢复LED算法的64bit和128bit原始密钥.实验结果表明,针对LED算法的差分故障攻击方法不仅扩展了故障诱导的攻击范围,而且提高了故障诱导的效率,减少了错误密文数,从而为故障攻击其它轻量级密码算法提供了一种通用的分析手段.LED,proposed in CHES 2011,is a new lightweight cipher which is applied in the Internet of Things to provide security for RFID tags and smart cards etc.On the basis of the half byte-oriented fault model and the differential analysis,a differential fault analysis on the LED cipher by inducing faults is proposed.Simulating experiment shows that our attack could recover its 64-bit secret key by introducing 3 faulty ciphertexts,and recover 128-bit secret key by introducing 6 faulty ciphertexts,respectively.Our method extends the attacking scope of faults,thereby increasing the efficiency of fault injection and decreasing the number of faulty ciphertexts.Thus,the results in this study will also be beneficial to the analysis of other lightweight ciphers.

关 键 词：物联网 RFID 轻量级密码算法 LED 差分故障分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]