An SPN type block password fault attack resistance capability assessment method and device

Abstract

The embodiment of the invention provides an evaluation method and device for fault attack resistance of an SPN type block password. The method comprises the steps that ciphertext difference of the SPNtype block password is acquired; according to the ciphertext difference, a impossible fault difference path is utilized to obtain a residual secret key space; according to the inverse algebraic difference equation, the number of remaining secret keys is obtained; and inputting the number of the remaining secret keys into a preset algorithm model, and outputting a final attack frequency so as to evaluate the fault attack resistance of the SPN type block password according to the final attack frequency. The embodiment of the invention provides a method and a device for evaluating the fault attack resistance of an SPN type block password,SPN type block passwords can be quickly analyzed by combining impossible fault differential attacks and algebraic fault differential analysis; and through the method, redundant faults generated by disturbance in the laser injection process can be effectively simulated, the attack frequency can be effectively and accurately predicted, and the fault attackresistance of the block password can be more practically and quickly analyzed.

Description

technical field [0001] The embodiments of the present invention relate to the field of information security technology, and in particular to a method and device for evaluating the anti-fault attack capability of an SPN block cipher. Background technique [0002] Block ciphers are currently widely used encryption algorithms, which can be divided into Feistel-type and SPN-type block ciphers from their structure, and are widely used in encryption chips. Nowadays, mobile payment, RFID tags, WSN nodes, etc. are all equipped with key chips to prevent information leakage. However, with the introduction of fault attack methods, especially channel measurement attacks, the chip can be quickly cracked through laser probes, electromagnetic pulse interference, etc. key. The side-channel attack is an attack method that obtains the encrypted key information by reading the fault error information after the actual fault injection of the chip, and obtaining the encrypted key information thro...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, many methods for evaluating the security of block ciphers have been proposed. During the evaluation process, the attack methods adopted are impossible differential attack or algebraic failure attack, but the main problem of these methods is the complexity of data However, there are still many deficiencies in the optimization selection of degree and search path, such as a large amount of calculation and many times of fault injection, and the proposed mathematical models such as single-bit model and double-bit model do not actually consider the possibility of faults in the actual injection process. Redundant failures brought about by the system are not conducive to actual failure analysis

If a fault is injected, the number of attacks cannot be predicted, which will bring many disadvantages to subsequent attacks

Although according to the impossible differential path, the key bits whose probability is zero before and after satisfying can be excluded, but the impossible differential attack does not consider the relationship between the bit data in the internal rounds of transformation; and the pure algebraic fault attack does not consider Impossible differential data will cause overcomputation to the entire operation

Images