Complexity-variable arbitrary-order mask protection method

Abstract

The invention discloses a complexity-variable arbitrary-order mask protection method. The method comprises the following steps: using St and d k-bit input sharing factors x1, x2, ..., xd of k' logic function configuration sequences with length of 2k-bit as the input, obtaining d k-bit output sharing factors y1, y2, ..., yd, wherein St represents the logic function configuration sequence corresponding to the t-th output bit in the S box in an original encryption algorithm, and t is not less than 1 and not more than k', the input sharing factor meets the FORMULA, and the output sharing factor meeting the FORMULA. Through the adoption of the method disclosed by the invention, the resource expenditure is relatively low, and the resource expenditure and the running efficiency can be adjusted according to actual application environment; the arbitrary-order side channel attack can be effectively resisted, the security is high; the method disclosed by the invention is strong in practicability, simple to implement, strong in expandability and can be applied to different software / hardware carriers.

Description

technical field [0001] The invention belongs to the technical field of cryptographic security, and in particular relates to a high-order masking method for different software and hardware carriers, which can effectively resist arbitrary-order side channel attacks. Background technique [0002] The carrier form of cryptographic chips or encryption devices has been subjected to various types of analysis and attacks, especially Side Channel Attack (SCA) targeting hardware circuits, which has become the main threat to the hardware form of cryptographic algorithms. The so-called side channel attack refers to the use of various side channels in the circuit working process to leak information, such as: energy consumption, time, faults, electromagnetic radiation, etc. (such as keys) to realize the extraction of secret information. [0003] The mask confrontation scheme is a widely used side channel countermeasure method. Since the mask confrontation scheme was proposed ([Document 7...

AI Technical Summary

Problems solved by technology

However, these countermeasures can only resist the first-order SCA attack. The first-order masking scheme can no longer meet the security requirements, and the higher-order masking scheme is gradually developed.

While pursuing higher security, the high-order masking scheme is also constantly developing towards generalization, mainly in the design of a generalized S-box masking scheme to ensure that it can be applied to any S-box design and can resist any order of SCA attack, but high-order masking will greatly increase additional overhead, so it is difficult to apply high-order masking schemes on resource-constrained devices

Images