Piccolo相关性功耗分析攻击技术研究

发布时间：2018-05-14 05:22

本文选题：轻量级密码算法 + Piccolo　；参考：《哈尔滨工业大学学报》2013年09期

【摘要】：为了评测轻量级密码算法Piccolo抗功耗分析攻击的能力,提出一种针对首轮的功耗分析攻击模型,搭建了功耗模拟采集平台,对该算法进行了相关性功耗分析攻击.针对Piccolo算法首轮运算中包含白化密钥和轮置换操作的特点,将首轮相关攻击密钥(包括轮密钥RK0L、RK0R、WK0、WK1)分成6段子密钥,逐个完成各段子密钥的攻击,将80位种子密钥的搜索空间从280降低到(2×220+2×24+2×28+216),使种子密钥的恢复成为可能.攻击结果表明,只需500条功耗曲线即可恢复首轮攻击密钥,由此可见,未加任何防护措施的Piccolo硬件实现极易遭受相关性功耗分析攻击,研究并采取切实有效的防护措施势在必行.据现有资料,这是首次评估Piccolo密码算法在相关性功耗分析攻击方面的安全性.
[Abstract]:In order to evaluate the ability of the lightweight cryptographic algorithm Piccolo to resist power analysis attack, a power analysis attack model for the first round is proposed, and a power consumption analog acquisition platform is built, and the correlation power analysis attack is carried out on the algorithm. According to the characteristics of whitening key and round substitution operation in the first round operation of Piccolo algorithm, the first round correlation attack key (including RK0L / RK0RK0RK0WK0 / WK1) is divided into six sub-keys, and the attack of each segment key is completed one by one. The search space of the 80 bit seed key is reduced from 280 to 2 脳 220 2 脳 24 2 脳 28 216, which makes it possible to restore the seed key. The result of attack shows that the first attack key can be recovered with only 500 power consumption curves. It can be seen that the hardware implementation of Piccolo without any protective measures is easy to be attacked by correlation power analysis. It is imperative to study and take effective protective measures. According to the available data, this is the first time to evaluate the security of the Piccolo cryptographic algorithm in relation to power analysis attacks.
【作者单位】：哈尔滨工业大学微电子中心;哈尔滨工业大学信息与电气工程学院;
【基金】：国家自然科学基金资助项目(60973162)
【分类号】：TP393.08

【参考文献】