适于软硬件实现的安全轻量S盒的设计  

Design of secure lightweight S-box for software and hardware implementation

作　　者：李凡 张文英[1] 邢朝辉 Li Fan;Zhang Wenying;Xing Zhaohui(College of Information Science&Engineering,Shandong Normal University,Jinan 250014,China)

机构地区：[1]山东师范大学信息科学与工程学院,济南250014

出　　处：《计算机应用研究》2020年第12期3717-3721,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61672330)。

摘　　要：随着物联网的发展,轻量级分组密码算法的设计显得尤为重要。S盒是对称密码算法的关键部件。许多加密算法的硬件实现过程易受侧信道攻击,门限实现是一种基于秘密共享和多方计算的侧信道攻击对策。通过简单地对三次布尔函数中的变量进行循环移位,构建密码性质最优的4×4安全轻量S盒,并且为所构造的S盒设计了门限实现方案来抵御侧信道攻击,该方案是可证安全的。该方法构造的S盒的四个分量函数的实现电路相同,极大地降低了硬件实现的复杂度。给定S盒的一个分量,其余的三个分量可通过该分量的循环移位获得,这样大大降低了硬件实现成本,易于快速软件实现。With the development of the Internet of Things,the design of lightweight block cipher algorithms is particularly important.The S-box is a vital component of the symmetric cryptographic algorithm.The hardware implementation of many cryptographic algorithms is vulnerable to side-channel attacks,threshold implementation is a side-channel attack strategy based on secret sharing and multiparty computing.This paper constructed safe lightweight 4×4 S-box with optimal cryptographic properties by simply cyclically shifting the variables in the Boolean functions with degree 3.It designed the threshold implementation for the constructed S-boxes to resist side channel attacks,which was provably secure.The implementation of the four component functions of the S-boxes constructed by this method were the same,greatly reduced the complexity of the hardware implementation.It gave out a component of the S-box,the remaining three components could be obtained by cyclic shifting of the component,which greatly reduced the hardware implementation cost and was easy to implement in a fast software.

关 键 词：轻量级分组密码 S盒 差分均匀度 非线性度 WALSH谱 侧信道攻击 门限实现 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]