结合EDCA和CPA的容错双向选择攻击  

Fault-Tolerant Bidirectional Choice Attack Combining EDCA and CPA

作　　者：张美玲[1,2] 尚利蓉 郑东[1,2] ZHANG Meiling;SHANG Lirong;ZHENG Dong(School of Cyberspace Security,Xi’an University of Posts and Telecommunications,Xi’an 710121,China;Shaanxi Province Wireless Network Security Technology National Engineering Laboratory,Xi’an University of Posts and Telecommunications,Xi’an 710121,China)

机构地区：[1]西安邮电大学网络空间安全学院,西安710121 [2]西安邮电大学陕西省无线网络安全技术国家工程实验室,西安710121

出　　处：《计算机科学与探索》2023年第9期2229-2240,共12页Journal of Frontiers of Computer Science and Technology

基　　金：国家自然科学基金(62072369);陕西省重点研发计划(2021ZDLGY06-04)。

摘　　要：当所设计的攻击方案带有容错功能时,往往需要在非常大的候选空间中挑出正确的密钥。如何有效地实现这个目标是侧信道攻击中非常重要且具有挑战性的问题。针对这一问题,以AES-128为目标研究了结合欧式距离增强碰撞攻击(EDCA)和相关能量分析攻击(CPA)的容错双向选择攻击。为了提高碰撞检测的成功率,提出了EDCA,与传统的相关增强碰撞攻击(CCA)相比,EDCA利用欧式距离来区分两组能量迹之间的相似性,其碰撞检测的成功率更高,从而使优化更加实用和有意义。除此之外,结合EDCA和CPA,将密钥以及对应的碰撞对做分组处理,然后进行双向筛选,得到最优的碰撞链,大大减少了候选空间,从而降低了密钥枚举的复杂性,有效地恢复密钥。实验结果表明,在低信噪比SNR=-3 dB和SNR=-6 dB的条件下,设置碰撞对的阈值ThΔ=5,所提出的方案在3000条能量迹时成功率达到98.78%和80.25%,均优于现有方案。When the designed attack scheme is fault-tolerant,it is often necessary to pick out the correct key in a very large candidate space.How to effectively achieve this goal is a very important and challenging problem in sidechannel attacks.Aiming at this problem,a fault-tolerant bidirectional choice attack combining EDCA(Euclidean distance enhanced collision attack)and CPA(correlation power analysis)is studied with AES-128 as the target.Firstly,in order to improve the success rate of collision detection,the EDCA is proposed.Compared with correlation enhanced collision attack(CCA),EDCA utilizes the Euclidean distance to distinguish the similarity between two sets of energy traces.Its collision detection has a higher success rate,making the optimization more practical and meaningful.In addition,combined with EDCA and CPA,the keys and the corresponding collision pairs are grouped,and then bidirectional screening is performed to obtain the optimal collision chain,which greatly reduces the candidate space and reduces the complexity of key enumeration,effectively recovering the key.Experimental results show that,under the conditions of low signal-to-noise ratio SNR=-3 dB and SNR=-6 dB,setting the threshold of collision pair being 5,the success rate of the proposed scheme reaches 98.78%and 80.25%when there are 3000 energy traces,both of which are better than the existing schemes.

关 键 词：AES-128 碰撞攻击 欧式距离增强碰撞攻击(EDCA) 相关能量分析攻击(CPA) 双向选择 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]