基于秘密共享的SM4算法S盒实现方案  

S-box Implementation Scheme of SM4 Algorithm Based on Secret Sharing

作　　者：李新超 钟卫东[1,2] 刘明明 李栋 LI Xinchao;ZHONG Weidong;LIU Mingming;LI Dong(Key Laboratory for Network and Information Security of Chinese Armed Police Force;Xi’an 710086,China;School of Cryptographic Engineering,Engineering University of the Chinese Armed Police Force,Xi’an 710086,China)

机构地区：[1]武警工程大学网络与信息安全武警部队重点实验室,西安710086 [2]武警工程大学密码工程学院,西安710086

出　　处：《计算机工程》2018年第11期148-153,共6页Computer Engineering

基　　金：国家自然科学基金(U1636114);国家社会科学基金(16btj033)

摘　　要：针对现有的SM4算法掩码方案不能完全抵抗差分功耗分析(DPA)攻击的现状,提出一种基于秘密共享抵抗DPA攻击的方案。通过将输入变换到复合域中求逆,结合秘密共享、门限方案构造一个新型S盒。S盒利用秘密共享函数代替仿射变换,在乘法器分组中采用虚拟值法,并在反相器中引入分解法,使得实现方案具有较少的运算次数和较低的空间占比。安全性分析与实验结果表明,该方案所构造的S盒可有效抵御高阶DPA攻击及glitch攻击,且具有较低的功率消耗。Aiming at the current situation that the existing SM4 algorithm mask scheme cannot completely resist the Differential Power Analysis(DPA)attack,a scheme based on secret sharing resistance DPA attack is proposed.This method constructs a new S-box by transforming the input into the composite domain and combining with the secret sharing as well as the threshold scheme.The new S-box uses secret sharing function instead of affine transformation,adopts the virtual value method in the multiplier grouping,and introduces the decomposition method in the inverter,which makes the scheme have less computation times and lower space proportion.Security analysis and experimental results show that the S-box constructed by this scheme can effectively resist high-order DPA attacks and glitch attacks,and has low power consumption.

关 键 词：SM4算法 差分功耗分析 S盒 秘密共享 虚拟值 复合域 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]