The invention discloses a novel
fault attack method aiming at the
Advanced Encryption Standard (AES-128)
algorithm, which comprises the steps that: firstly, an attacker randomly selects a
plaintext, acquires the correct
ciphertext of the
plaintext under the action of an initial secret key; and then the attacker encrypts the randomly selected
plaintext, optionally selects any one of first three columns of sub-secrete keys at the ninth round in an
encryption operation progress, performs multi-
byte random fault induction to the one column of sub-secret keys, and acquires a wrong
ciphertext comprising random faults; next, the attacker performs multi-
byte random fault induction to the rest three columns of sub-secret keys at the ninth round through the same operation till the rest three columns of sub-secret keys are recovered completely and sub-secrete keys at the tenth round are acquired; at last, the initial secret key is acquired through reverse calculation. The novel
fault attack method aiming at the AES-12
algorithm disclosed by the invention attacks the sub-secret keys at the ninth round and operates any column of the needed sub-secret keys without affecting operation results of each other, therefore, an AES-128
password system can be treated by differential
fault attack by a plurality of equipments at the same time, thus acquiring initial secret key information rapidly and saving more time.