Template attack method in allusion to SM4 cipher algorithm round output

Abstract

The invention discloses a template attack method in allusion to SM4 cipher algorithm round output. According to the method disclosed by the invention, special channel input is taken as a premise, the SM4 algorithm round output is used as an attack point, the hamming weight or the hamming distance of the round output is selected to establish a template, and template attack in allusion to the SM4 cipher algorithm round output can be realized by a small number of templates. Meanwhile, selective input is taken as a basis in a template matching stage, a support vector machine is used to act as a tool for judgment and analysis, a bit of linear transformation output can be broken by only two times of matching, and then a round sub-key is reversely derived by inverse transformation of nonlinear transformation and linear transformation. The method disclosed by the invention effectively solves a problem that template attack in allusion to the SM4 cipher algorithm round number is infeasible at the present stage.

Description

technical field [0001] The invention relates to the field of analysis and detection of cryptographic algorithms, in particular to a template attack method aimed at the round output of SM4 cryptographic algorithms. Background technique [0002] With the development of information and analysis circuit technology, the cracking of hardware cryptographic electronic equipment no longer simply stays on the protocol and algorithm, but starts with the information leaked in the process of processing data. In the process of processing information, hardware cryptographic electronic equipment leaks information such as energy, electromagnetics, errors, and time. Using these leaked information to attack cryptographic electronic equipment is the so-called Side Channel Attacks (Side Channel Attacks). It can be divided into energy analysis attack, electromagnetic attack, error attack, etc. Among them, energy analysis attack has become the main means of side channel because of its high efficie...

AI Technical Summary

Problems solved by technology

[0059] The purpose of the present invention is to provide a kind of template attack method for output of SM4 cipher algorithm round, to solve the problem that template attack is not feasible directly to SM4 cipher algorithm round output, namely: nonlinear transformation τ and linear transformation L of SM4 cipher algorithm Spread the influence of the wheel key to more bits of the wheel output, so when performing template attacks on the round output of the SM4 cipher algorithm, it is necessary to use the 32-bit method of the wheel output to build a template. At this time, the key search space and template space is [0, 2 32 -1], this space greatly increases the difficulty of data processing and computational complexity, making it infeasible to directly conduct template attacks on the SM4 cipher round output

Images