一种带掩码AES算法的高阶差分功耗分析攻击方案  

A High-order Differential Power Analysis Attack Scheme with Masked AES Algorithm

作　　者：段晓毅[1] 王思翔 崔琦[1] 孙渴望 

机构地区：[1]北京电子科技学院电子信息工程系,北京100070

出　　处：《计算机工程》2017年第10期120-125,共6页Computer Engineering

基　　金：北京市自然科学基金(4163076;4152048);北京电子科技学院基金(328201505;328201508)

摘　　要：鉴于能量分析攻击对密码芯片安全性的严重威胁,对掩码技术进行研究,提出一种通过使用预处理函数对固定值掩码进行攻击的高阶差分功耗分析(HODPA)方案。利用功耗曲线上2个信息点的联合分布绕过掩码对加密系统的保护。开发以MEGA16单片机为核心的侧信道攻击平台,并在该平台上进行实验验证,结果表明,在不明确掩码具体数值的情况下,一阶DPA无法恢复出正确密钥,HODPA方案仅需约500条功耗曲线即可得到正确密钥,且正误密钥之间区分度高,具有较强的实用性。In view of the serious threats that power analysis attacks causes on the security of the cipher chip, based on the in-depth study of masked technology,this paper proposes a High Order Differential Power Analysis （HODPA） scheme which attacks the fixed value mask through the use of preprocessing function. By using the joint distribution of the two points on the power curve, this method successfully bypasses the mask＇ s protection of the system. It develops a side channel attack platform based on MEGA16 and carries out the experimental verification. Experimental result shows that, without knowing the specific masked value,the ordinary first order DPA cannot recover the correct key,but HODPA only needs about 500 power curves to get the correct key, and discrimination between correct key and wrong keys is high, fully proves the validity and practicability of the scheme.

关 键 词：掩码技术 预处理函数 差分功耗分析 功耗曲线 AES算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]