基于Walsh谱变换的S盒算法  

S-box Algorithm Based on Walsh Spectrum Transform

作　　者：孙慧盈 陆继承[3] 魏长征[3] 俞军[1,2,3] 

机构地区：[1]复旦大学专用集成电路与系统国家重点实验室,上海200433 [2]复旦大学微电子学院,上海200433 [3]上海复旦微电子集团股份有限公司,上海200433

出　　处：《计算机工程》2014年第7期18-22,共5页Computer Engineering

摘　　要：针对一阶差分功耗分析(DPA)攻击问题,借鉴现有的频谱变换S盒防护方法,利用Walsh谱变换的单比特输出特性,并运用Walsh谱变换与构造相应掩码变量,提出一种基于Walsh谱变换的安全S盒算法。阐述算法的具体实现过程,分析所有敏感数据的掩码安全性。以数据加密标准算法为例,描述该算法在实际应用中的具体实现。通过50万条功耗曲线的DPA攻击进行实验,结果表明,与基于傅里叶变换的S盒算法相比,该算法在保证安全性的同时,可避免复杂的算术掩码操作。Inheriting ideas of spectrum conversion, this paper takes advantage of one-bit output property of Walsh spectrum transform tc propose a secure S-box algorithm against first-order Differential Power Analysis（DPA）, the algorithm is actually achieved by application ol Walsh spectrum transform and construction of proper mask variables. Given elaboration of implementation, the paper theoretically proves the algorithm＇s security with mask analysis of all sensitive variables. The algorithm＇s provably simple enough with some simplifications used in module operation. In case of Data Encryption Standard（DES）, this paper introduces its application in reality and demonstrates its strong security by a DPA experiment of 500 000 random plaintexts, results show that, compared with S-box algorithm based on Fourier transform, the algorithm prevents complicated arithmetic mask successfully with strong security guaranteed meanwhile.

关 键 词：旁路分析 S盒 差分功耗分析 傅里叶变换 Walsh谱变换 掩码 数据加密标准 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]