对称加密算法AES和DES的差分错误分析  

Differential Fault Analysis on AES and DES

作　　者：孙维东[1] 俞军[1] 沈磊[1] 

机构地区：[1]复旦大学微电子研究院专用集成电路与系统国家重点实验室,上海200433

出　　处：《复旦学报（自然科学版）》2013年第3期297-302,共6页Journal of Fudan University：Natural Science

摘　　要：分析对称加密算法AES和DES对差分错误分析的安全性.描述了一种针对AES加密算法的差分错误分析方法,通过软件模拟成功恢复根密钥.实验结果表明,只需20次左右的错误注入就能实现AES差分错误分析.提出一种新的DES差分错误分析方法,该方法与AES差分错误分析在原理上类似,软件模拟结果表明破解DES需要的错误注入次数更多.因此无任何防护手段的AES和DES加密算法很容易受到差分错误分析的攻击.最后提出引入错误侦测机制能有效抵御此类攻击.The ability of symmetric encryption algorithm AES and DES against the differential fault analysis is examined.Two kinds of differential fault analysis on AES are described,and the initial key is recovered by software emulation.The result shows that the attack on AES can be realized by 20 times of fault-inductions.Then a new differential fault analysis on DES is described.The principle of this attack is analogous to differential fault analysis on AES.Result shows that attack on DES needs more fault-inductions.Therefore symmetric encryption algorithm AES and DES without any protection are vulnerable to differential fault analysis.It is presented that such attacks can be resisted by fault-detection.

关 键 词：高级加密标准 数据加密标准 差分错误分析 智能卡 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]