RSA密码核时间侧信道检测与量化分析  

Detection and quantitative analysis of timing channel in RSA cryptographic core

作　　者：毛保磊[1] 慕德俊[1] 胡伟[1] 张慧翔[1] 秦茂源 MAO Baolei;MU Dejun;HU Wei;ZHANG Huixiang;QIN Maoyuan(School of Automation, Northwestern Polytechnical University, Xi’an 710072, China)

机构地区：[1]西北工业大学自动化学院,西安710072

出　　处：《计算机工程与应用》2017年第10期8-12,26,共6页Computer Engineering and Applications

基　　金：国家自然科学基金(No.61303224;No.61672433);中国博士后科学基金面上项目(No.2013M532081);中央高校基本科研业务费专项资金(No.3102016JKBJJGZ07)

摘　　要：攻击者通过RSA时间侧信道可有效破解其密钥。但目前缺乏有效的方法检测和评估RSA硬件密码核时间侧信道信息泄漏。针对此问题,利用门级信息流追踪方法检测RSA时间侧信道;提出一种测试框架对密钥位泄露进行定性检测和定量分析。通过对五种不同RSA密码硬件体系结构进行案例研究,实验结果显示,所提方法可有效评估和验证迁移技术对RSA时间侧信道信息泄露的影响。该测试方法可有效辅助硬件设计人员权衡时间侧信道安全性、硬件资源消耗和性能等指标。The attackers can extract the RSA private key by timing channel.Currently,there is a lack of effective method to detect and evaluate information leakage from RSA hardware timing channel.In this paper,Gate Level Information Flow tracking(GLIFT)method is employed to detect RSA timing channel and a test framework is proposed to evaluate RSA timing channel qualitatively and quantitatively.By case studies on5different RSA architectures,the experimental results show that the test framework can evaluate the effect of mitigation techniques on reducing and eliminating information leakage from RSA timing channel effectively and efficiently,which indicates that the test framework can help designers to tradeoff timing channel security,resource utilization and performance.

关 键 词：时间信道 信息流 RSA算法 硬件设计 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]