分组密码DPA汉明重量区分函数选择方法  

Approach to Selecting Hamming Weight Decision Function in Block Cipher's Differential Power Analysis Attacks

作　　者：严迎建[1] 郭建飞[1] 李默然[1] 李志强[1] 

机构地区：[1]解放军信息工程大学,郑州450004

出　　处：《微电子学》2013年第5期690-693,共4页Microelectronics

摘　　要：为了解决分组密码差分能量分析攻击(DPA)汉明重量区分函数选择问题,提出了一种基于相对非线性度的选择方法。该方法利用分组密码算法S盒输出相对非线性度与DPA之间的关系,通过比较相对非线性度的大小来选择汉明重量区分函数。通过仿真验证和实测验证,证明采用该方法能够正确地选择攻击效果较好的汉明重量区分函数。To deal with the problem of selecting Hamming weight decision function in block cipher% differential power attacks （DPA）, a selecting method was proposed based on relative nonlinearity of S-boxes~ outputs. In this method, the relationship between relative nonlinearity of S-boxes＇ output in block cipher and DPA was analyzed, and Hamming weight decision function was selected by comparing different outputs ＇ nonlinearities. Experimental results showed that Hamming weight decision function that has better effect could be properly selected by using the proposed method.

关 键 词：差分能量分析攻击 汉明重量 区分函数 数据加密算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]