抵御侧信道分析的AES双路径掩码方法  

AES Dual-path Masking Method for Resisting Side-channel Analysis

作　　者：张翌维 龚冰冰[2] 刘烈恩[2] 唐有[3] 

机构地区：[1]国民技术股份有限公司,广东深圳518057 [2]深圳大学光电工程学院,广东深圳518060 [3]深圳大学信息工程学院,广东深圳518060

出　　处：《计算机工程》2012年第13期108-111,共4页Computer Engineering

基　　金：国家发展和改革委员会信息安全专项基金资助项目([2010]3044号)

摘　　要：为抵御功耗、电磁辐射等侧信道分析攻击,提出一种高级加密标准(AES)双路径掩码方法。采用2条数据路径,将随机数和随机S盒用于掩码操作,使一个加、解密轮次内的所有中间运算结果与AES算法的标准中间结果都不相同,且各中间结果的汉明重量随明文随机变化。实验结果表明,AES算法中间结果的汉明重量与该方法产生的能量特征之间的相关性被完全消除,可抵御各种侧信道分析攻击。In order to resist the side-channel analysis as power and EM attack, a dual-path masking method is proposed for Advanced Encryption Standard（AES） algorithm implementation. Through two data paths, the random numbers and random S-boxes are used to mask operation, which makes all intermediate variables among the proposed AES scheme different from that of the standard method, and the Hamming distance corresponding to each intermediate variable changes with the plaintext. It is simple in structure, and conducive to software and hardware implementation. Experimental result shows the correlation between the intermediates of standard AES and the energy characteristics of proposed AES scheme are completely removed. Thus, the proposed method bears strong immunity to all known side-channel analysis.

关 键 词：侧信道分析 高级加密标准算法 差分功耗分析 掩码方法 S盒 时序折叠 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]