ZUC序列密码算法的选择IV相关性能量分析攻击  

Chosen-IV Correlation Power Analysis Attack of ZUC Stream Cipher

作　　者：严迎建[1] 杨昌盛[1] 李伟[1,2] 张立朝[1,3] 

机构地区：[1]解放军信息工程大学,郑州450000 [2]复旦大学微电子学院,上海200433 [3]天津大学电子信息工程学院,天津300072

出　　处：《电子与信息学报》2015年第8期1971-1977,共7页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(61404175;61302107)资助课题

摘　　要：为了分析ZUC序列密码算法在相关性能量分析攻击方面的免疫能力,该文进行了相关研究。为了提高攻击的针对性,该文提出了攻击方案的快速评估方法,并据此给出了ZUC相关性能量分析攻击方案。最后基于ASIC开发环境构建仿真验证平台,对攻击方案进行了验证。实验结果表明该方案可成功恢复48 bit密钥,说明ZUC并不具备相关性能量分析攻击的免疫力,同时也证实了攻击方案快速评估方法的有效性。相比Tang Ming等采用随机初始向量进行差分能量攻击,初始向量样本数达到5000时才能观察到明显的差分功耗尖峰,该文的攻击方案只需256个初始向量,且攻击效果更为显著。To analyze the immunity of ZUC stream cipher in aspect of correlation power analysis attack, some relevant researches are conducted. In order to improve the pertinence of attack, a rapid assessment method of the attack scheme is presented, and accordingly a correlation power analysis scheme of ZUC is proposed. Finally, based on the simulation platform raised by ASIC development environment, the attack scheme is validated. Experiment results turn out that the scheme can successfully attack 48-bit key, confirming that ZUC is unable to resist the correlation power analysis attack, and the proposed assessment method of attack scheme takes effect. Compared with Tang Ming＇s experimental, which conducted differential power analysis of ZUC with random initial vectors and observing distinct differential power peak with 5000 initial vectors, the proposed attack scheme only uses 256 initial vectors, and gets better results.

关 键 词：密码学 序列密码 ZUC 能量分析攻击 评估 

分 类 号：TN918.4[电子电信—通信与信息系统]