基于奇系数Comb的椭圆曲线密码抗功耗攻击方案  

RESISTING POWER ANALYSIS ATTACKS SCHEME FOR ELLIPSE CURVE CRYPTOGRAPHY BASED ON ODD-ONLY Comb METHOD

作　　者：梁芳[1] 沈济南[1,2] 

机构地区：[1]湖北民族学院理学院,湖北恩施445000 [2]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机应用与软件》2016年第3期288-290,293,共4页Computer Applications and Software

基　　金：国家自然科学基金面上项目(61272072)

摘　　要：针对资源受限的密码芯片在抵抗功耗攻击中存在效率和安全两个方面的矛盾。通过将标量采用奇系数梳状算法进行编码,然后结合预计算表将椭圆曲线标量乘法运算转化为一组小标量乘法运算,并利用基点掩码技术实施抗功耗攻击,提出一种基于奇系数Comb的椭圆曲线密码抗功耗攻击方案。算法性能分析结果表明:与传统的抗功耗攻击方案相比,给出的抗功耗攻击方案不仅可以抵抗简单功耗攻击、差分功耗攻击、零值寄存器功耗攻击和零值点功耗攻击,并且能够在存储空间和主循环运算量基本保持不变的情况下具有更高效的运算效率,在各种资源受限的应用系统中具有较好的实际应用价值。The contradictions between efficiency and security lies in the cryptographic chips with limited resource when resisting power analysis attacks. In light of this,we coded the scalar with the odd-only comb algorithm and then converted the ellipse curve scalar multiplication operation to a group of small scalar multiplication operations in combination with the pre-computation table,and utilised the mask technology to exert power analysis attacks resistance,through these we presented an odd-only Comb-based resisting power analysis attacks scheme for ellipse curve cryptography. Performance analysis result of the algorithm showed that compared with traditional resisting power attack scheme,the proposed scheme could resist the simple power analysis attack,the differential power analysis attack,the zero-value register mask technology power attack and the zero-value point power analysis attack. Besides,it also had more efficient operation efficiency in the circumstance of keeping the storage space and main loop operation load basically unchanged,and had better practical applied value in a variety of application systems with limited resource.

关 键 词：椭圆曲线密码 功耗攻击 奇系数梳状算法 预计算表 基点掩码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]