A mask protection method and system against arbitrary order side channel attacks

Abstract

The invention discloses a mask protection method and system capable of resisting arbitrary-order side channel attacks. A look-up table is generated by reconstruction to replace a nonlinear component; in the look-up table {L, M, R}, elements of a vector L are exclusive-or values of an output of the nonlinear component and n-1 random numbers; the random numbers are stored in a matrix M; a vector R is used for storing an address of a second query; the table satisfies inputting of x<1>, x<2>,..., x<n> and outputting of independent random y<1>, y<2>,..., y<n>, and meanwhile any information of an original input x and an original output y is not leaked; and a table query process comprises the following steps: firstly, generating the look-up table {L, M, R}; then, reconstructing the table through the x<1>, x<2>,..., x<n-1> firstly; performing table refreshing once between every two table reconstructions; and lastly, querying the table {L, M, R} through the x<n> to obtain the y<1>, y<2>,..., y<n>. Through the scheme, the arbitrary-order side channel attacks can be effectively resisted. The method and the system have the characteristics of high security, high practicability and high extensibility.

Description

technical field [0001] The invention relates to the technical field of cryptographic security, in particular to an arbitrary-order masking scheme and system for different software and hardware carriers, which can effectively resist arbitrary-order side channel attacks. Background technique [0002] The carrier form of cryptographic chips or encryption devices has been subjected to various types of analysis and attacks, especially Side Channel Attack (SCA) targeting hardware circuits, which has become the main threat to the hardware form of cryptographic algorithms. The so-called side channel attack refers to the use of various side channels in the circuit working process to leak information, such as: energy consumption, time, faults, electromagnetic radiation, etc. keys) to realize the extraction of secret information. [0003] The mask confrontation scheme is a widely used side channel countermeasure method. Since the mask confrontation scheme was proposed [7], it has grad...

AI Technical Summary

Problems solved by technology

However, these countermeasures can only resist the first-order SCA attack. The first-order masking scheme can no longer meet the security requirements, and the higher-order masking scheme is gradually developed.

While pursuing higher security, the high-order masking scheme is also constantly developing towards generalization, mainly in the design of a generalized S-box masking scheme to ensure that it can be applied to any S-box design and can resist any order of SCA attack, but high-order masking will greatly increase additional overhead, so it is difficult to apply high-order masking schemes on resource-constrained devices

Images