抗侧信道攻击的SM4多路径乘法掩码方法  

SM4 Multi-path Multiplicative Masking Method Against Side-channel Attack

作　　者：谭锐能 卢元元[1] 田椒陵 

机构地区：[1]深圳大学信息工程学院,广东深圳518060 [2]国民技术股份有限公司,广东深圳518057

出　　处：《计算机工程》2014年第5期103-108,114,共7页Computer Engineering

基　　金：国家自然科学基金资助面上项目(61070252)

摘　　要：SM4是国内于2006年公布的第1个商用的分组密码算法。为提高SM4算法安全性,抵御功耗分析、电磁辐射等侧信道攻击,提出一种抗侧信道攻击的SM4多路径乘法掩码方法。该方法在轮函数中采用多条数据路径,并对引进随机数后的S盒用有限域乘法求逆变换加以改进,使中间结果与标准SM4算法的中间结果完全不同,从而掩盖SM4加密过程中的所有关键信息,增加侧信道分析的难度。实验结果表明,与标准SM4算法和普通的SM4乘法掩码算法相比,该方法在芯片的功耗和硬件资源增加不大的情况下,能有效消除中间数据所产生的能量消耗,增强算法安全性,可成功抵御各种侧信道攻击。SM4 is the first bloc cipher published in the year of 2006 by the government of China. In order to resist Side-channel Attack （SCA） such as power analysis and electromagnetic radiation, a multi-path multiplicative masking method is proposed for SM4 algorithm to improve the security of SM4 algorithm. Through multi data paths, and transform S box by multiplicative inversion in the finite field when the random number is joined, which makes all intermediate variables among the proposed SM4 scheme different from that of the standard method. It not only realizes the cover of all the key information in encryption process, but also enhances the difficulties of SCA. Through compared with the traditional algorithm and the existing schemes, the experimental results show that the mask scheme can weaken the correlation between the energy consumption characteristics and the operating of the intermediate data effectively without increasing much power and hardware resources. Thus the proposed method bears all kinds of side-channel attacks and the security of the new SM4 is improved.

关 键 词：侧信道攻击 有限域求逆 乘法掩码 SM4算法 多路径掩码方法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]