Method for safety assessment of anti-fault injection attack of integrated circuit based on information entropy

Abstract

The invention discloses a method for safety assessment of an anti-fault injection attack of an integrated circuit based on information entropy. The method utilizes the information entropy to representthe amount of information which is leaked under fault injection as a quantitative index of safety assessment of the circuit. The method comprises the following steps of (1) determining a to-be-testedpassword circuit and specifying a fault model; (2) computing the theoretical information leakage amount of the fault model on the circuit according to the to-be-tested circuit and the fault model; (4) generating a fault value conforming to the fault model; (4) injecting a generated fault value into the to-be-tested circuit to obtain an error output under a fault condition; (5) computing the actually-measured information leakage amount obtained by the actual fault injection according to the fault value of actual injection and the error output under the fault condition; and (6) obtaining a safety coefficient r by computation according to the theoretical information leakage amount obtained in the step (2) and the actually-measured information leakage amount obtained in the step (5), comparing the r with a preset safety assessment level to obtain safety level assessment of the circuit.

Description

technical field [0001] The present invention relates to the direction of hardware security, and mainly relates to the field of security evaluation of integrated circuits, in particular to an integrated circuit anti-fault injection attack security evaluation method based on information entropy. Background technique [0002] Fault injection is an attack method that seriously threatens the security of cryptographic chips. The basic principle is to inject faults into the security weak parts of the chip to cause abnormal function of the chip, test its functions and parameters when the chip is in an abnormal working state, analyze and compare with the normal working state, and obtain important information inside the chip . Therefore, it is particularly important to find the design loopholes of integrated circuits, take anti-fault injection attack protection measures, and ensure the confidentiality and integrity of information in the system in the use environment. [0003] The ba...

AI Technical Summary

Problems solved by technology

If the key is cracked, it is considered that the cryptographic chip has a security risk and cannot resist fault injection attacks; otherwise, it is considered safe

This evaluation method has two limitations: the first is that the evaluation method has two limitations: the first is that the evaluation results are only safe and unsafe, and it is impossible to grade and quantify safety

The second is that the evaluation scheme needs to use a variety of key analysis methods to crack the key, so as to make a relatively comprehensive evaluation of circuit security, the evaluation time is long and the cost is high

Images