分组密码抗ASCA安全性研究

发布时间：2018-04-16 00:15

本文选题：代数侧信道分析 + 汉明重模型　；参考：《计算机学报》2016年03期

【摘要】：代数侧信道攻击(ASCA)已经成为一种对分组密码非常有效的分析方法.得到ASCA分析所需要的最少轮次,将有利于构造密码算法抗侧信道分析的轻量化防护策略.文中基于信息论方法,提出了一种在汉明重模型下评估分组密码抗ASCA安全性的方法,并给出了一种抗基于汉明重模型ASCA分析的安全性指标,称为汉明重扩散度(HWE),以度量分组密码的非线性部件及轮函数对抗ASCA分析的能力.文中从理论上证明了在同时考虑ASCA和线性分析或差分分析时,HWE与非线性度以及差分均匀性这两项重要的密码学指标之间存在矛盾.因为差分均匀性和代数免疫度之间的关系,同理可知HWE和代数免疫度指标之间也存在矛盾.文中的实验结果表明,ASCA方法分析MIBS算法时至少需要4个加密轮次,才有足够的泄漏信息满足ASCA中所有方程求解,与文中提出的理论度量结果一致.作者的研究工作从理论上对迭代型分组密码抗ASCA能力进行度量指标的设计与研究,研究结果发现现有分组密码具有ASCA的防御脆弱性.
[Abstract]:Algebraic channel attack (ASCA) has become a very effective analysis method for block ciphers.Getting the minimum number of rounds required for ASCA analysis will be helpful to construct a lightweight protection strategy for anti-side-channel analysis of cryptographic algorithms.Based on the information theory method, this paper presents a method to evaluate the anti- security of block ciphers under hamming weight model, and gives a security index against ASCA analysis based on hamming heavy model.Called hamming heavy diffusivity (HW), the nonlinear components and wheel functions of block ciphers are used to measure the ability of block ciphers to counter ASCA analysis.In this paper, it is theoretically proved that there is a contradiction between ASCA and linear analysis or difference analysis, nonlinearity and difference uniformity, which are two important cryptographic indexes.Because of the relationship between difference uniformity and algebraic immunity, it can be seen that there are contradictions between HWE and algebraic immunity.The experimental results show that the MIBS algorithm needs at least four encryption rounds to satisfy all the equations in ASCA, which is consistent with the theoretical measurement results proposed in this paper.The author's research work theoretically designs and studies the measurement index of the iterative block cipher's anti- ability. The research results show that the existing block cipher has the defensible vulnerability of ASCA.
【作者单位】：武汉大学计算机学院;武汉大学空天信息安全与可信计算教育部重点实验室;北京南瑞智芯微电子科技有限公司;
【基金】：国家自然科学基金(61472292,61202386) 金融IC卡及读写机具密码检测与安全防护技术研究及能力建设(2014ZX01032401-001)资助~~
【分类号】：TP309

【相似文献】