Novel method for password S box threshold implementation without random numbers

Abstract

The invention discloses a novel method for password S box threshold implementation without random numbers. A traditional idea of introducing the additional random numbers is abandoned, emphasis is puton an S box itself, a uniformity multiplexing technology is used for repeatedly using output sharing factors of the password S box, and the output sharing factors of the S box are used as the new random numbers for input to replace the originally required additional random numbers to ensure the uniformity of an entire nonlinear layer, so that addition of the additional random numbers is skillfully avoided. Not only is the uniformity of a threshold implementation function satisfied, but also the chip area can be saved. A new idea is provided for the lightweight design of a password S box maskscheme, and a broad application prospect is achieved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a new method for implementing a cipher S-box without a random number threshold. Background technique [0002] The cryptographic S-box is the core component of the block cipher algorithm, and its security strength determines the security of the entire cryptographic algorithm; since Kocher et al. proposed power consumption attack in 1999, side-channel attack technology has developed rapidly, and various attack methods emerge in endlessly; side-channel The attack technology mainly uses the physical information (such as power consumption, electromagnetic leakage, running time, running error, etc.) leaked by the cryptographic chip during the algorithm execution process to attack, and can obtain the algorithm key information at a very low cost. posed a great threat. However, studies have shown that cryptographic algorithms themselves do not have the ability to resist side channel a...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the large resource overhead and security risks caused by the introduction of random numbers in the current masking scheme, the present invention provides a new method for realizing the threshold of a cryptographic S-box without additional random numbers, which can ensure resistance to differential power consumption attacks. Under the conditions, there is no need to introduce additional random numbers, so that the security risks caused by random number generation can be removed

Images