Energy Analysis and Detection Method for SM2 Decryption Algorithm

Abstract

The invention discloses an energy analysis and detection method for an SM2 decryption algorithm, including S1, inputting test data M, C and d , and collect the energy curve during SM2 operation, where M is the plaintext, and C is the d The ciphertext generated by the corresponding public key encryption; S2. Simultaneously scan the doubling point curve segment and the point plus curve segment in the multi-point operation on the energy curve to obtain the analysis result d' ; S3, judging the analysis result d' and private key d Whether the binary representation of is the same except for the lowest bit, if so, the SM2 decryption algorithm design is not safe, otherwise the SM2 decryption algorithm design is safe. Compared with the existing technology, this solution requires fewer energy curves, and does not need to manually perform attack detection bit by bit during the detection process. At the same time, it liberates the labor and energy of the detection personnel, improves the automation level of detection and analysis, and improves the efficiency of detection and analysis. , simplicity, flexibility, effectiveness, and correctness.

Description

Technical field [0001] The invention relates to the field of cryptographic algorithm realization analysis and detection, in particular to an energy analysis and detection method aimed at SM2 decryption algorithm. Background technique [0002] The realization of cryptographic algorithms is realized by microcontroller instructions. The microcontroller has a set of instructions, which generally include arithmetic instructions, logic instructions, data transfer instructions, and transfer instructions. Each instruction acts on several bytes and involves different components of the microcontroller, such as arithmetic logic unit, memory, or some peripheral devices (such as communication ports). These microcontroller components are physically separated, and their functions and implementations are different. Therefore, they have different energy consumption characteristics, which will produce different characteristic patterns in the energy trace. For example, data transfer instructions ...

AI Technical Summary

Problems solved by technology

[0006] In view of the above-mentioned deficiencies in the prior art, the energy analysis detection method for the SM2 decryption algorithm provided by the present invention solves the problem that the number of energy curves required for detection is large and the detection efficiency is low when detecting and analyzing the SM2 encryption algorithm in the security chip password detection. question

Images