智能卡功耗分析平台设计与实现  

Smart card power analysis platform design and implementation

作　　者：乌力吉[1] 李贺鑫[1] 任燕婷[1] 张向民[1] 李翔宇[1] 蔡坚[1] 杨永生[2] 

机构地区：[1]清华大学微电子学研究所,清华大学信息科学与技术国家实验室,北京100084 [2]中国信息安全测评中心,北京100085

出　　处：《清华大学学报（自然科学版）》2012年第10期1409-1414,共6页Journal of Tsinghua University(Science and Technology)

摘　　要：功耗分析是一种有效的密码芯片侧信道攻击方法,攻击者不需要清楚芯片的内部信息,仅通过监测芯片的功耗曲线就可以分析出卡片内的密钥,对智能卡的安全构成极大威胁。为了测试智能卡的安全性,搭建了TH-PAP-01平台。该平台由PC机、示波器、读卡器、转接卡以及相应的平台控制程序和功耗数据分析软件组成,平台能够与读卡器通信并采集智能卡的功耗信息,在200M Sa/s采样率下每小时可采集2 400条功耗曲线。对采集功耗信号的转接卡做了优化设计,将攻破一款三重数据加密算法(triple data encryption standard,TDES)智能卡芯片需要的功耗曲线条数从80 000条降低到40 000条,系统的信噪比提高为原来的约3.8倍。对另一款TDES智能卡在12 000条功耗曲线时就实现了128位密钥信息的提取。TH-PAP-01功耗分析平台可以满足智能卡安全性分析要求,通过适当的扩展,该平台还可以实现对智能卡的电磁分析功能。Power analysis is an effective method to count side channel attacks.The attacker does not need to have full knowledge of the chip but by only monitoring the power traces can recover the secret key within the chip,which poses a great threat to the security of smart cards.A power analysis platform designed to test smart card security.The platform consists of a PC,oscilloscope,card reader,transfer card and corresponding control and analysis software.This system communicates with the smart card and continuously records the power traces.With a sampling rate of 200 M Sa/s,the platform can record 2 400 traces per hour.This paper focuses on the optimal design of the transfer card,which can increase the system SNR about 3.8 times so that the number of traces needed to recover the secret key of a triple data encryption standard（TDES） smart card can be reduced from 80 000 to 40 000.Another TDES smart card needed only 12 000 traces to recover the 128 bit secret key.Thus,this power analysis platform can be used to analyze smart card security.Expansion of the hardware and software will enable the platform to also perform electromagnetic analyses of smart cards.

关 键 词：三重数据加密算法(triple data ENCRYPTION standard TDES) 智能卡 差分功耗分析 相关功耗分析 

分 类 号：TN407[电子电信—微电子学与固体电子学]