Differential fault attack injection attack aimed at SMS4 cryptographic algorithm

Abstract

The invention discloses a differential fault attack injection attack aimed at a SMS4 cryptographic algorithm. The attack injects fault into last four rounds of operation of encryption process of the SMS4 cryptographic algorithm, consequently makes the last four rounds of the encryption process generate any error, and attacks through an error cipher text generated by the error. In selection of the error cipher text, by comparing with a correct cipher text, the error cipher text with same plain text, different cipher text and complete data information is selected out for being used in subsequent differential analysis. Aimed at each round of attack, the error cipher text used is identical, and classification of the cipher text according to the requirement of each round is not needed. The method provided by the invention solves the problem of failure of directionally inducing special bytes to generate a special error and the problem of performing fault injection again for each round of attack at the present stage.

Description

technical field [0001] The invention relates to the field of cryptographic algorithm analysis and detection, in particular to a differential fault injection attack aimed at the SMS4 cryptographic algorithm. Background technique [0002] Under normal circumstances, hardware devices or software programs that run cryptographic algorithms can correctly execute various cryptographic algorithms, but in the case of interference, the cryptographic operation module may have register errors or operations, and use these erroneous behaviors or information to recover The key method is called cryptographic error analysis. Most cryptographic devices are implemented based on electronic technology, the interface is relatively simple, and they are more susceptible to external interference, which makes fault injection analysis one of the most effective bypass analysis methods. [0003] Fault injection is to change the working conditions of the encryption chip at certain appropriate times, so ...

AI Technical Summary

Problems solved by technology

[0033] The purpose of the present invention is to provide a differential fault attack method against the SMS4 cryptographic algorithm to solve two practical problems: (1) the problem that some special bytes in an intermediate state cannot be induced to generate specific faults, that is, the current theory The research all adopts the byte-oriented random fault model, and there is a precondition for the success of the attack, which is to induce a specific byte of an intermediate value to change, and this assumption is difficult in the actual fault induction. control

Images