Security Evaluation Method of Integrated Circuits Against Fault Injection Attacks Based on Information Entropy

Abstract

The present invention discloses an integrated circuit anti-fault injection attack security assessment method based on information entropy, using information entropy to represent the amount of information leaked under fault injection as a quantitative index for circuit security assessment. The steps are as follows: (1) Determine the cryptographic circuit to be tested and specify the fault model; (2) Calculate the theoretical information leakage caused by the fault model to the circuit according to the circuit to be tested and the fault model; (3) Generate a fault value that conforms to the fault model ; (4) Inject the generated fault value into the circuit under test to obtain the error output under the fault condition; (5) Calculate the measured information leakage obtained by the actual fault injection according to the actual injected fault value and the error output under the fault condition (6) According to the theoretical information leakage amount obtained in step (2) and the measured information leakage amount obtained in step (5), the safety factor r is calculated, and r is compared with the preset safety evaluation level to obtain the circuit security level assessment.

Description

technical field [0001] The present invention relates to the direction of hardware security, and mainly relates to the field of security evaluation of integrated circuits, in particular to an integrated circuit anti-fault injection attack security evaluation method based on information entropy. Background technique [0002] Fault injection is an attack method that seriously threatens the security of cryptographic chips. The basic principle is to inject faults into the security weak parts of the chip, causing the chip to function abnormally, test its functions and parameters when the chip is in an abnormal working state, and analyze and compare it with the normal working state, so as to obtain important information inside the chip. Therefore, it is particularly important to find the design loopholes of integrated circuits, take anti-fault injection attack protection measures, and ensure the confidentiality and integrity of information in the system in the use environment. [...

AI Technical Summary

Problems solved by technology

If the key is cracked, it is considered that the cryptographic chip has a security risk and cannot resist fault injection attacks; otherwise, it is considered safe

This evaluation method has two limitations: the first is that the evaluation method has two limitations: the first is that the evaluation results are only safe and unsafe, and it is impossible to grade and quantify safety

The second is that the evaluation scheme needs to use a variety of key analysis methods to crack the key, so as to make a relatively comprehensive evaluation of circuit security, the evaluation time is long and the cost is high

Images