基于RISC-V的防御侧信道攻击AES软件实现方案  

AES Software Implementation Scheme for Defending Side Channel Attack Based on RISC-V

作　　者：焦芃源 殷树娟[1] 李翔宇[2] 李涵[1] JIAO Pengyuan;YIN Shujuan;LI Xiangyu;LI Han(School of Applied Science,Beijing Information Science&Technology University,Beijing 100192,China;Institute of Microelectronics,Tsinghua University,Beijing 100084,China)

机构地区：[1]北京信息科技大学理学院,北京100192 [2]清华大学微电子学研究所,北京100084

出　　处：《微处理机》2021年第5期33-36,共4页Microprocessors

摘　　要：为应对能量侧信道攻击对未加攻击防护的加密算法的安全性造成的巨大威胁,满足安全加密的需要,以AES加密算法为研究对象,通过介绍AES算法结构及其四种基本加密运算,设计一套改进的软件实现方案,将算法中非线性运算的字节替代步骤拆分为基于有限域的S盒求逆运算和仿射变换,结合抵抗能量侧信道攻击的布尔掩码对策,使用嵌入式C语言,在一款基于RISC-V架构的处理器上完成了全掩码AES算法的软件实现。实验结果表明该方案具有理论上的正确性与现实中的可行性。In order to deal with the great threat of energy-side channel attack to the security of encryption algorithm without attack protection and meet the needs of secure encryption,AES encryption algorithm is taken as the research object.By introducing the AES algorithm structure and its four basic encryption operations,an improved software implementation scheme is designed.The byte substitution step of nonlinear operation in the algorithm is divided into S-box inversion operation and affine trans-formation based on finite field.Combined with Boolean masking strategy against energy-side channel attack,the software implementation of full masking AES algorithm is completed on a processor based on RISC-V architecture by using embedded C language.The experimental results show that the scheme is correct in theory and feasible in reality.

关 键 词：AES算法 有限域 侧信道攻击 掩码对策 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TN918.1[自动化与计算机技术—计算机科学与技术]