Method for detecting and resisting differential fault attack

Abstract

The invention discloses a method for detecting and resisting a differential fault attack. The method comprises the following steps of: firstly, constructing a redundant encryption module according to an original encryption module; secondly, detecting whether fault injection exists in the redundant encryption module based on a message authentication code method, comparing the redundant encryption module with the original encryption module to detect whether fault injection exists in the original encryption module, and completing dual differential fault attack or differential fault attack detection; and finally, after determining that differential fault injection exists, detecting each round of ciphertext differential value of the target algorithm based on ciphertext differential values and an infection function, positioning a fault source injected by an attacker, and hiding the ciphertext differential value by using a random number and the infection function to realize protection. According to the method, the specific position of the differential fault injected into the target algorithm by an attacker can be quickly determined, and the injected differential fault is protected by using the random number and the infection function, so that the attacker cannot perform differential fault attack.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for detecting and resisting differential fault attacks. Background technique [0002] Fault Attack (FA) enables the attacker to arbitrarily choose the value and location of the injected fault for the cryptographic device, which greatly reduces the amount of data required to obtain the key information, and the attacker can realize it in a shorter time its goal. Differential Fault Attack (Differential Fault Attack, DFA) is a very effective attack technique in FA, which mainly relies on maliciously injecting faults during the execution of the encryption device, and then launches by analyzing the difference between the fault output and the non-fault output. The relevant key information has the characteristics of flexible fault injection, high analysis efficiency, and low attack complexity. How to design an effective defense method to resist the threat of such attacks an...

AI Technical Summary

Problems solved by technology

This type of failure renders the infection prevention scheme ineffective and is called a double failure

Images