基于ZDN约减的CRT算法实现的选择明文SPA攻击  

A chosen-message SPA attacks against ZDN-based CRT algorithm hardware implementation

作　　者：陈艾东[1,2] 张路桥[1,2] 刘青林[2] 

机构地区：[1]电子科技大学,成都610054 [2]成都信息工程学院,成都610225

出　　处：《四川大学学报（自然科学版）》2012年第3期605-608,共4页Journal of Sichuan University(Natural Science Edition)

基　　金：国家自然科学基金(60873216);四川省科技攻关重点项目(2012GZ0017);四川省应用基础研究基金(2011JY0100)

摘　　要：通过对ZDN(Zwei Drittel N,德语的2/3N)模幂算法与CRT算法实现的分析,提出一种选取特殊明文SPA(Side Channel Attack)的方法,将指数信息直观的映射到功耗曲线上.在Infineon SLE78芯片搭建的真实环境中进行实验,表明单条曲线恢复密钥率可达99%.最后,对防范方法进行了分析和总结.This paper proposes a new method of chosenmessage SPA attacks based on the analysis of the CRT and the ZDN algorithm. It reveals the difference between the modular square and the modular multiplication to the power trace directly. In the experiment on the 8051 chip, the accuracy rate of recovery key achieves 99%. The amount of the plaintext in this method we can choose is large. If the defense is depend on the method forbidding given plaintexts only, it can’t defense the new attack. This method can be used to check up whether or not the chip has defenses on the base number. At last,it summarizes the countermeasure against this method.

关 键 词：选择明文攻击 ZDN算法 CRT 边信道攻击 

分 类 号：TN918.91[电子电信—通信与信息系统]