抵抗差分功耗攻击的秘密共享S盒实现与优化  

Implementation and Optimization of S-box Resisting DPA Attacks Based on Secret Sharing

作　　者：孟庆全 杨晓元[1] 钟卫东[1,2] 张帅伟[1] MENG Qingquan;YANG Xiaoyuan;ZHONG Weidong;ZHANG Shuaiwei(Department of Electronic Technology, Engineering College of the Chinese Armed Police Force, Xi’an Shaanxi 710086, China;Key Laboratory of Network and Information Security of the Chinese Armed Police, Xi’an Shaanxi 710086, China)

机构地区：[1]武警工程大学电子技术系,陕西西安710086 [2]网络与信息安全武警部队重点实验室,陕西西安710086

出　　处：《信息网络安全》2018年第2期71-77,共7页Netinfo Security

基　　金：国家自然科学基金[61272492]

摘　　要：文章针对抵抗差分功耗攻击的S盒实现方案普遍消耗大且多为小型S盒的问题进行研究,使用经典的分组密码SPN结构构造了一个低消耗的8 bit的S盒。基于利用小S盒构造大S盒的思想,使用两个结构不同的4 bit的S盒在SPN框架下经过细致组合构造了一个8 bit的S盒,降低了因进行秘密共享分组造成的消耗;同时针对分组密码特性,分别对小S盒和寄存器进行复用,简化了门电路的设计,同时较大幅度减少了寄存器的使用,进一步提高了S盒效率。文章根据设计的电路绘制了具体的实现图表,并通过对实际实验数据的处理以及参考相关内容的研究结果,给出了较为理想的具体实现参数。We investigated the problem of the high-consumption implementation of S-box resisting Differential Power Analysis （DPA） Attacks and the more of these are on the small type. Then constructed a low-consumption S-box by the classical SPN framework and we obtained a new S-box based on the idea of secret sharing and optimized it according to the experimental data. With two small 4 bit S-box,we constructed a 8 bit S-box during carefully combination,for which the consumption of secret sharing was decreased. Simultaneously,we have decreased the small S-box and registers by multiplexing it for the feature of block cipher, and have further improved the effectiveness. Through the specific implementationchart and data processing results, we have given the ideal experimental parameters.Key words：S-box; secret sharing DPA attack SPN framework register multiplexing

关 键 词：S盒 秘密共享 DPA攻击 SPN结构 寄存器复用 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]