Encryption system side channel attack test method

Abstract

The invention discloses an encryption system side channel attack test method and relates to information security technologies. The encryption system side channel attack test method includes the following steps: inputting a specific plaintext on a controlled device, using an attacked cryptosystem to conduct encryption, and capturing a power consumption curve. The encryption system side channel attack test method is characterized in that the inputted plaintext is a large number which is low in Hamming weight. The encryption system side channel attack test method has the advantages that attack efficiency is high, the method has certain universality, and attack cannot be prevented with utilization of a single method for shielding special numbers. The encryption system side channel attack test method is beneficial to promotion of development of an information security system with higher safety performance.

Description

technical field [0001] The present invention relates to information security technology. Background technique [0002] The basic idea of ​​SPA attack on the RSA algorithm mechanism is to distinguish the different characteristics of the modular multiplication operation and the modular square operation in the power consumption curve, and crack the key accordingly. In recent years, there have been many attack methods that combine power analysis attack methods with traditional cryptanalysis methods. For example, literature [57] combines fault attack with power analysis, and literature [57,58] combines selected plaintext with simple power analysis to extract keys. Literature [59] combined chosen plaintext with timing attack. Documents [49,60] presented an attack combining chosen plaintext and SPA based on the implementation algorithm of the Chinese Remainder theorem (CRT). [0003] In cryptography or cryptanalysis, chosen-plaintext attack is a traditional method of cryptanalys...

AI Technical Summary

Problems solved by technology

If it is N-1, it will not be executed, and the result will be obtained directly in the designated area, and the signature operation will not be performed. This also prevents the attacker using this method from obtaining the corresponding power consumption curve, and thus cannot carry out this type of attack.

Images