New method and system for selecting plaintext combined attack by CRT-RSA

Abstract

The invention belongs to the field of information security, and discloses a new method and system for selecting a plaintext combined attack by CRT-RSA. In the attack process, the dp and dq of the CRT-RSA algorithm are used as targets, and then the private key parameters p, q are derived; during the plaintext collision attack process, multiple sets of plaintext pairs are selected and superimposed,and the modular multiplication power consumption difference is subjected to secondary treatment as the collision classification set; in the attack process, combined with the access number power consumption power exponent Hamming weight information leakage in the CRT-RSA modular power exponentiation process, the modular multiplication power segmentation is performed, and the plaintext collision attack is selected by segments. The invention combines other information leakage in the process of CRT-RSA modular exponentiation (such as access number power consumption power exponent Hamming weight information leakage), performs modular multiplication power segmentation, implements segmented selection of plaintext collision attacks, and can avoid local collision attack errors, which improves the attack accuracy. Finally, the private key parameters p, q are derived, and the private key d value is restored.

Description

technical field [0001] The invention belongs to the field of information security, in particular to a new method and system for CRT-RSA selected plaintext joint attack. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: [0003] Most smart cards use the RSA cryptographic algorithm to realize the digital signature authentication function, but the fastest RSA encryption speed is 100 times slower than DES, regardless of software or hardware implementation, the speed has always been the defect of RSA. Since 1982, two Belgian scholars (Quisquate & Couvreur) proposed a variant algorithm of RSA based on the Chinese Remainder Theorem (Chinese Remainder Theorem CRT). The storage space of the table also reduces the execution speed of multiplication in the algorithm, so CRT-RSA is widely used in smart cards and embedded devices. [0004] In the standard RSA encryption algorithm, the RSA modulus N is the product of two lar...

AI Technical Summary

Problems solved by technology

[0016] And from the literature review, there is currently no indirect attack on the key parameter d for CRT-RSA p and d q , and then deduce the side-channel attack method of prime numbers p, q, and there is no combination of multi-point information leakage, and the secondary processing of the power difference in plaintext is used as the choice of plaintext side-channel attack method for the classification data set

Images