一种DEFAULT密码算法抵抗差分故障攻击新方法  

A new method of DEFAULT block cipher resisting differential fault attack

作　　者：颜林洋 郝婕 李灵琛 YAN Linyang;HAO Jie;LI Lingchen(School of Computer Science and Information Security,Guilin University of Electronic Technology,Guilin 541004,China;Beijing Economic Management School,Beijing 100142,China)

机构地区：[1]桂林电子科技大学计算机与信息安全学院,广西桂林541004 [2]北京市经济管理学校,北京100142

出　　处：《桂林电子科技大学学报》2023年第3期223-230,共8页Journal of Guilin University of Electronic Technology

基　　金：国家自然科学基金(62162026)。

摘　　要：针对DEFAULT轻量级分组密码算法无法抵抗差分故障攻击的问题,利用横向混淆和线性码提出一种抵抗差分故障攻击的方法。该方法在算法实现冗余部分针对算法结构使用横向混淆(或纵向隐藏)的方式实现,并结合[10,4,6]线性码的1 bit纠错和4 bit检错能力对每个S盒进行防护。研究结果表明,该方法不仅提供了对算法半字节的纠错和所有比特位的检测能力,而且仅需要约25.08%的额外软件实现性能消耗。相较于已有的防护方法,该方法在通用性、故障检测效果及实现代价方面均有明显优势。Aiming at the problem that DEFAULT cannot resist to the differential fault attack,a protection method is proposed by using both the horizontal obfuscation and the linear codes.This method is implemented via horizontal confusion(or vertical hiding)in the redundant implementation.In particular,each S-box is masked by combining the 1-bit error correction and 4-bit error detection capabilities of [10,4,6 ]linear code.The experimental results illustrate that this method can provide half byte error correction and all bit error detection capability for cipher with only 25.08% additional software consumption.Compared with previous works,this approach achieves the advantages in terms of universality,fault detection ability and implementation cost.

关 键 词：分组密码 差分故障攻击 DEFAULT算法 横向混淆 线性码 

分 类 号：TN918.4[电子电信—通信与信息系统]