16-wheel SM4-128/128 white box password implementation method

Abstract

In an unsafe environment, a cryptographic analyzer can implement attacks on an algorithm and a secret key by tracking a binary system operated by a program, reading the secret key in a memory and a program execution intermediate result, carrying out static analysis and the like, and a white-box cryptographic algorithm can protect the secret key in the unsafe environment. The invention discloses a 16-round SM4-128 / 128 white box password implementation method, which describes a new mode of improving an SM4 password algorithm when the encryption round number is 16, and the mode improves the structure of a round function, namely the iterative process of the encryption algorithm. An improved SM4 white-box cryptographic algorithm is provided, and the whole encryption and decryption process can be converted into a form of calculating randomly selected affine transformation and lookup tables. The principle is that the internal state of a coding hiding algorithm is input and output scrambled, the secret key is embedded into a lookup table in a coding mode, and meanwhile, a block matrix is used for reducing the scale of the lookup table.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to an improved SM4 white-box cipher realization method. The invention also relates to a new mode of the encryption algorithm with 128 bits or even a larger value for plaintext grouping when the number of rounds of SM4 algorithm encryption is 16. Background technique [0002] At present, it is generally believed that the public cryptographic algorithm can provide the corresponding security guarantee under the condition that the key is kept secret, but the operating environment of the cryptographic algorithm is not necessarily safe enough. In an insecure environment, cryptanalysts can attack algorithms and keys by tracking the running binary of the program, reading the key in memory and the intermediate result of program execution, and static analysis. This attack environment is called a white-box attack environment, which assumes that the attacker has comple...

AI Technical Summary

Problems solved by technology

Complex internal codes that can cancel each other cannot effectively improve the security of white-box cryptographic algorithms, and the introduction of random numbers in white-box attack environments is not safe and reliable enough

Images