轻量级密码算法TWINE的唯密文故障分析  

Ciphertext-only fault analysis of the TWINE lightweight cryptogram algorithm

作　　者：李玮[1,2,3,4] 汪梦林[1] 谷大武 李嘉耀[1] 蔡天培 徐光伟 LI Wei;WANG Menglin;GU Dawu;LI Jiayao;CAI Tianpei;XU Guangwei(School of Computer Science and Technology,Donghua University,Shanghai 201620,China;Department of Computer and Science and Engineering,Shanghai Jiao Tong University,Shanghai 200204,China;Shanghai Key Laboratory of Scalable Computing and System,Shanghai Jiao Tong University,Shanghai 200204,China;Shanghai Key Laboratory of Integrate Administration Technologies for Information Security,Shanghai Jiao Tong University,Shanghai 200093,China)

机构地区：[1]东华大学计算机科学与技术学院,上海201620 [2]上海交通大学计算机科学与工程系,上海200204 [3]上海交通大学上海市可扩展计算与系统重点实验室,上海200204 [4]上海交通大学上海市信息安全综合管理技术研究重点实验室,上海200093

出　　处：《通信学报》2021年第3期135-149,共15页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61772129);国家密码发展基金资助项目(No.MMJJ20180101);上海市自然科学基金资助项目(No.19ZR1402000);上海市可扩展计算与系统重点实验室开放课题基金资助项目;上海市信息安全综合管理技术研究重点实验室开放课题基金资助项目。

摘　　要：研究了唯密文攻击下TWINE密码的安全性,即在唯密文故障攻击下,利用SEI、MLE、HW、GF、GF-SEI、GF-MLE、Parzen-HW、MLE-HE、HW-HE和HW-MLE-HE等一系列区分器进行分析,能够以至少99%的成功概率恢复TWINE密码的主密钥。仿真实验表明,所提新型区分器MLE-HE、HW-HE和HW-MLE-HE可以有效地减少故障数并提高攻击效率。研究结果为分析物联网中轻量级密码算法的安全性提供了重要参考。The security analysis of TWINE against the ciphertext-only fault analysis was proposed.The secret key of TWINE could be recovered with a success probability at least 99%using a series of distinguishers of SEI、MLE、HW、GF、GF-SEI、GF-MLE、Parzen-HW、MLE-HE、HW-HE and HW-MLE-HE.Among them,the novel proposed distinguishers of MLE-HE、HW-HE and HW-MLE-HE can effectively reduce the faults and improve the attack efficiency in simulating experiments.It provides a significant reference for analyzing the security of lightweight ciphers in the Internet of Things.

关 键 词：轻量级密码 TWINE 唯密文故障分析 物联网 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]