通信学报 ›› 2013, Vol. 34 ›› Issue (7): 134-142.doi: 10.3969/j.issn.1000-436x.2013.07.015

• 技术报告 • 上一篇    下一篇

基于汉明重的LED代数旁路攻击研究

冀可可1,王韬1,郭世泽2,赵新杰1,刘会英1   

  1. 1 军械工程学院 信息工程系, 河北 石家庄 050003;
    2 北方电子设备研究所,北京 100083
  • 出版日期:2013-07-25 发布日期:2017-06-24
  • 基金资助:
    国家自然科学基金资助项目

Research of Hamming weight-based algebraic side-channel attack on LED

Ke-ke JI1,Tao WANG1,Shi-ze GUO2,Xin-jie ZHAO1,Hui-ying LIU1   

  1. 1 Department of Information Engineering, Ordnance Engineering College, Shijiazhuang 050003, China;
    2 The Institute of North Electronic Equipment, Beijing 100083, China
  • Online:2013-07-25 Published:2017-06-24
  • Supported by:
    The National Natural Science Foundation of China

摘要:

对CHES 2011会议提出的LED轻型分组密码抗代数旁路攻击能力进行了评估。给出了密码算法代数旁路攻击模型及LED密码代数方程表示方法;利用示波器采集微控制器ATMEGA324P 上的LED实现功耗泄露,选取功耗特征较为明显的部分泄露点,基于 Pearson相关系数方法推断加密中间状态汉明重;分别基于可满足性问题、伪布尔优化问题、线性编程问题给出了LED密码和汉明重泄露的3种代数方程表示方法;使用CryptoMinisat和SCIP 2种解析器对建立的代数方程求解恢复密钥,在已知明文、未知明密文、容错等场景下进行了大量的攻击实验。结果表明,LED易遭受代数旁路攻击,一条功耗曲线的1轮汉明重泄露分析即可恢复64 bit完整密钥。

关键词: 汉明重, LED, 代数旁路攻击, 可满足性, 伪布尔优化, 线性编程

Abstract:

Abstract:The security of LED against the algebraic side-channel attack (ASCA)was evaluated, which is a lightweight block cipher proposed in CHES 2011.Firstly, the attack model of ASCA was analyzed, and then the design and algebraic representations of LED were described. Secondly, the power leakages of LED on ATMEGA324P microcontroller were measured by a digital oscilloscope; some leakage points with obvious power patterns were chosen as the targeted points and used to deduce the Hamming weight via computing the Pearson correlation factor; satisfiability-based, Pseu-do-Boolean optimization-based, linear programming-based methods were used to representing Hamming weights with algebraic equations. Finally, the CryptoMinisat and the SCIP solver were applied to solve for the key and many attacks are conducted under different scenarios. Experiment results demonstrate that LED is vulnerable to ASCA, full 64 bit master key can be derived via analyzing the HW leakages of the first round in LED.

Key words: Hamming weight, LED, ASCA, satisfiability, pseudo-Boolean optimization, linear programming

No Suggested Reading articles found!