基于Flush+Reload的DES算法Cache计时攻击  

Cache Timing Attack on DES Algorithm Based on Flush + Reload

作　　者：程志炜 陈财森 邱雪欢 CHENG Zhiwei;CHEN Caisen;QIU Xuehuan(Department of Information Engineering;Academy of Army Armored Force,Beijing 100072,China;Department of Academic Research, Academy of Army Armored Force,Beijing 100072,China)

机构地区：[1]陆军装甲兵学院信息工程系,北京100072 [2]陆军装甲兵学院科研学术处,北京100072

出　　处：《计算机工程》2018年第12期163-167,共5页Computer Engineering

基　　金：国家自然科学基金(61402528)

摘　　要：在数据加密标准(DES)算法上使用Flush+Reload方法的Cache计时攻击,存在难以确定S盒元素行偏移位的问题。为此,利用S盒在Cache中会发生不对齐分布的特征,提出一种偏移位确定方法。采用clflush指令刷新Cache地址行,以驱逐Cache中DES算法的S盒信息,确定S盒元素的位置信息。利用密码算法在查询S盒时泄露的Cache计时信息获取明文与密钥异或后的中间态值,并通过该值和已知明文的相关性恢复密钥。实验结果表明,该方法能够有效确定S盒元素的行偏移位,提高针对DES算法Cache计时攻击的效率。Aiming at the problem that it is difficult to determine the row offset of the S-box elements for the Cache timing attack using the Flush+Reload method on Data Encryption Standard(DES)algorithm,a method is proposed to determine the row offset by using the property that S-box will be misaligned in the Cache.To evict S-box information of the DES algorithm from the Cache,the attack uses the clflush instruction to flush cache line.When the DES algorithm queries the S-box,it leaks the information of Cache timing.The intermediate state value which equals the plaintext and key XOR is recovered by utilizing this leaked information.Utilizing the value and the known plaintext,the key of DES is recovered.Experimental results show that this method can determine the row offset of S-box elements and improve the efficiency of Cache timing attack against DES algorithm.

关 键 词：数据加密标准算法 Flush+Reload攻击 CACHE计时攻击 S盒 行偏移 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]