密码侧信道分析前沿案例综述  

A Review of Advanced Cases of Cryptographic Side-Channel Analysis

作　　者：张厚来 齐骥 刘宇博 韩天泽 王安 ZHANG Houlai;QI Ji;LIU Yubo;HAN Tianze;WANG An(School of Cyberspace Science and Technology,Beijing Institute of Technology,Beijing 100081,China)

机构地区：[1]北京理工大学网络空间安全学院,北京100081

出　　处：《信息安全与通信保密》2024年第11期32-48,共17页Information Security and Communications Privacy

基　　金：国家重点研发计划(2022YFB3103800);国家自然科学基金(62302036、62272047);产业基础再造和制造业高质量发展专项(0747-2361SCCZA193)。

摘　　要：侧信道分析技术是国际密码学研究的热点方向,不同于传统密码分析技术,侧信道分析者能够利用声、光、电磁等侧信道直接获取密码运算中间值的信息,或通过干扰密码运算过程获得错误密文,进而推断出密钥的值。对近年来国际学者们利用侧信道分析破解商用密码模块或安全产品的技术与案例进行归纳,分别从声学分析、光学分析、电磁分析、故障分析等角度进行详细阐述,并对未来发展趋势进行了探讨,希望能够引起业界对侧信道安全问题的重视。Side-channel analysis becomes a forefront point in international cryptographic research.Distinguished from conventional cryptanalytic approaches by its ability to extract information about the intermediate states of cryptographic computations through side-channels such as acoustics,optics,and electromagnetic emanations or obtain the wrong ciphertext by interfering with the cryptographic operation process and then infer the value of the key.This paper summarizes the techniques and cases of international scholars using side-channel analysis to crack commercial cryptographic modules or security products in recent years,and explores methodologies including acoustic cryptanalysis,optical analysis,electromagnetic analysis and fault analysis,etc.Additionally,the paper discusses the future direction of this field and hopes to draw attention to side-channel security issues in the industry.

关 键 词：侧信道分析 电磁分析 声学分析 密码产品分析 故障分析 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]