Second-order frequency domain power analysis attack method for SM4 first-order mask algorithm

Abstract

The invention discloses a second-order frequency domain power analysis attack method for an SM4 first-order mask algorithm. The method comprises steps that S1, a time domain power consumption curve is acquired, and a power consumption matrix is established; S2, the time domain power consumption of the S1 is converted to the frequency domain power consumption; S3, a round sub key byte is guessed, a combined intermediate value is calculated, and the combined intermediate value is mapped to a hypothesis power consumption matrix; S4, input output of S boxes XOR Sin_Xor_Sout is selected as an attack point, and CPA attack on a power spectrum matrix is carried out; S5, the S2, S3 and S4 steps are repeated to respectively acquire a round of sub keys of the four S boxes to acquire a round key, and S6, four rounds of the S2, S3, S4 and S5 steps are repeated to acquire four rounds of sub keys, and an initial key is acquired through reverse secret key expansion. The method provides a new way for second-order power analysis, the second-order power analysis is expanded from time domain analysis to frequency domain analysis, and a problem of un-aligned time points in a time domain CPA can be effectively avoided.

Description

technical field [0001] The present invention relates to the field of cryptographic algorithm analysis and detection, especially for the second-order frequency-domain side channel energy analysis realized by the SM4 cryptographic algorithm with mask protection, and particularly relates to the secondary SM4 cryptographic algorithm with the same input and output middle mask value of the S box. First-order frequency-domain side-channel energy analysis. Background technique [0002] With the development of information and analysis circuit technology, the cracking of hardware cryptographic electronic equipment no longer simply stays on the protocol and algorithm, but starts with the information leaked in the process of processing data. In the process of processing information, hardware cryptographic electronic equipment leaks information such as energy, electromagnetics, errors, and time. Using these leaked information to attack cryptographic electronic equipment is the so-called ...

Images