Method and equipment for quickly determining position of cryptographic operation component and storage medium

Abstract

The invention provides a method and equipment for quickly determining the position of a cryptographic operation component and a storage medium, and relates to the technical field of network security. The method comprises the following steps: acquiring electromagnetic characteristics generated when a password product runs different algorithm functions by using electromagnetic detection equipment; setting a test vector and an input data set according to algorithm functions (such as encryption, decryption and the like) of a password product; the method comprises the following steps: determining a detection range by dividing the detection range and square blocks, dividing the range into a plurality of square blocks, and carrying out electromagnetic detection on each square block; identifying a high-value square block by judging whether an electromagnetic detection value reaches a preset threshold value or not, setting a key area according to the high-value square block, further subdividing the key area into smaller square blocks, and performing detailed electromagnetic detection; and comparing the detected electromagnetic characteristics with known electromagnetic characteristics of the password product running a corresponding algorithm function so as to determine the position of the password operation part.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a method, a device and a storage medium for quickly determining the position of a cryptographic operation component. Background Art

[0002] Cryptography is the foundation for the healthy development of the digital age. With the development of new science and technology and the emergence of new application scenarios, cryptographic computing components are hardware devices used for centralized processing of cryptography and are widely used and deployed in the field of network security.

[0003] When hackers try to crack a cryptographic algorithm, they can not only perform reasoning analysis on the algorithm itself to discover existing cryptographic vulnerabilities, but also infer sensitive parameters such as keys through energy (generally voltage) and electromagnetic detection of the cryptographic product's cryptographic computing components. We need to verify whether the cryptographic product's cryptographic computing components can be located when it leaves the factory to determine whether there is a risk of leakage of the cryptographic computing component location.

[0004] Therefore, determining the cryptographic operation components of cryptographic products is an important means to improve the accuracy of cryptographic product detection and attack; the existing methods for determining the location of cryptographic operation components are mostly simple energy scanning, and do not constrain the operation process; since the cryptographic operation speed is very fast, the energy generated by different algorithm steps is different, so there are real cryptographic operation components that display low energy due to algorithm steps or other reasons during detection, resulting in failure to find the location.

[0005] Therefore, it is necessary to provide a method, device and storage medium for quickly determining the position of a cryptographic operation component to solve the above technical problems. Summary of the invention

[0006] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a method for quickly determining the position of a cryptographic operation component that is easy to operate, thereby solving the problem of failure to find the position due to failure to constrain the operation process.

[0007] To achieve the above purpose, the present application proposes a method for quickly determining the position of a cryptographic operation component, which is used for positioning and detecting the cryptographic operation component of a cryptographic product. The position of the cryptographic operation component is determined by the following steps:

[0008] Step 1: Collect electromagnetic detection characteristics of cryptographic products when running different algorithm functions through electromagnetic detection equipment;

[0009] Step 2: Set the algorithm function of the cryptographic product, and select the test vector according to the input plaintext, key, and output ciphertext of the algorithm function. Set the corresponding input data set according to the algorithm requirements of the algorithm function.

[0010] Step 3: Start the algorithm function of the password product and set the detection range; the electromagnetic detection device moves the probe around the detection range to determine the coordinates of each border point of the detection range;

[0011] Step 4: Divide the detection range into several blocks and label the blocks according to the preset detection order;

[0012] Step 5: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding block position in the detection sequence number sequence, and obtains the electromagnetic detection value of each block through the probe; after completing the electromagnetic detection of all blocks, return to step 9 to continue the electromagnetic detection;

[0013] Step 6: Determine whether the electromagnetic detection value reaches the set limit value; if it reaches it, set it as a high-value block, and set a key area according to the location of the high-value block; otherwise, return to step 5 to continue electromagnetic detection;

[0014] Step 7: Divide the key area into several small blocks and label the small blocks according to the preset detection order;

[0015] Step 8: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding small square position in the detection sequence number sequence, and obtains the electromagnetic detection value of each small square through the probe; after completing the electromagnetic detection of all small squares, return to step 5 to continue the electromagnetic detection;

[0016] Step 9: Determine whether there is a high-value block. If not, return to step 3 to readjust the detection range. If the number of adjustments reaches the maximum number of adjustments, it is considered that the positioning has failed, and the positioning is terminated and the password product protection measures are output. If it exists, the electromagnetic detection values ​​of the key areas corresponding to the high-value blocks are expanded;

[0017] Step 10: Compare the expanded electromagnetic detection value with the electromagnetic detection feature of the cryptographic product when running the corresponding algorithm function; if the features match, the positioning is deemed successful, the positioning is ended and the position of the high-value block is output as the position of the cryptographic operation component; if the features do not match, it is deemed not to be the position of the cryptographic operation component.

[0018] As a further solution, in step 1, the algorithm function is selected to run, and the electromagnetic leakage and leakage time generated by the cryptographic product during operation are recorded through the probe of the electromagnetic detection equipment, and the electromagnetic leakage amount is quantified to obtain the electromagnetic detection characteristics of the cryptographic product.

[0019] As a further solution, the algorithm functions include encryption algorithm, decryption algorithm, signature algorithm, signature verification algorithm, hash value calculation algorithm and random number generation algorithm.

[0020] As a further solution, the frame boundary point coordinates include upper left frame boundary point coordinates, upper right frame boundary point coordinates, lower left frame boundary point coordinates and lower right frame boundary point coordinates.

[0021] As a further solution, the block determines the length and width values ​​in equal proportion to the diagonal of the detection range.

[0022] As a further solution, the key area is selected as a high-value block and a partial area of ​​a block adjacent to the high-value block; wherein the key area is selected as one third of the adjacent block close to the high-value block.

[0023] As a further solution, in step 7, small squares with fixed length and width are set to divide the key areas; wherein the length and width of the small squares are smaller than the length and width of the blocks; during electromagnetic detection, the small squares in the high-value blocks are detected first, and then the small squares in the partial areas of the adjacent blocks are detected.

[0024] As a further solution, in step 7, small squares of a changing grid are set to segment the key area; wherein, the center of the high-value square of the key area is used as the base point, and the length and width values ​​of the small squares are gradiently divided; the length and width values ​​of the small squares close to the base point are greater than those of the small squares far from the base point.

[0025] On the one hand, the present invention also provides a position positioning device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement a method step for quickly determining the position of a cryptographic operation component as described in any one of the above.

[0026] On the other hand, the present invention also provides a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, it implements the method steps of quickly determining the position of a cryptographic operation component as described in any one of the above.

[0027] Compared with the related art, the method, device and storage medium for quickly determining the location of a cryptographic operation component provided by the present invention have the following advantages:

[0028] (1) The present invention uses electromagnetic detection technology to accurately locate cryptographic computing components, which helps to timely discover potential security loopholes, thereby taking preventive measures to enhance the security of cryptographic products. At the same time, by comparing with known electromagnetic characteristics, the accuracy of positioning is improved, ensuring the reliability of the detection results.

[0029] (2) The present invention adopts a systematic and automated detection process, which reduces the complexity and error rate of manual operation and improves the detection efficiency. Through the preset detection sequence and boundary value judgment, the method can quickly screen out high-value areas, effectively narrow the detection range, and accelerate the positioning process.

[0030] (3) The present invention supports multiple algorithm functions and can adapt to different cryptographic products and algorithm requirements. Dynamic detection range adjustment and key area intelligent selection technology make the method highly adaptable and flexible, able to cope with different detection environments and conditions, and improve the success rate of the positioning process. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related technologies, the drawings required for use in the embodiments or the related technical descriptions are briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0033] Figure 1 A schematic flow chart of a method for quickly determining the position of a cryptographic operation component provided by the present invention;

[0034] Figure 2 A schematic diagram of the module structure of a position positioning device provided by the present invention.

[0035] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0036] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0037] The main solution of the embodiment of the present application is: through electromagnetic detection technology, collect the electromagnetic characteristics of the cryptographic product when running different algorithm functions, set the test vector, and perform detailed electromagnetic detection within the preset detection range. By dividing the detection range into blocks, labeling the detection order, judging whether the electromagnetic detection value reaches the limit value, and further refining the detection in the key area, the position of the cryptographic operation component is finally determined by feature comparison. The method also includes quantifying the electromagnetic leakage to obtain the electromagnetic detection characteristics, and performing specific geometric processing on the detection range and key areas to improve the positioning accuracy; the present invention can effectively locate the cryptographic operation components, evaluate the security of cryptographic products, and resist hacker attacks, and is particularly suitable for network environments that require high security.

[0038] It should be noted that the execution subject of this embodiment may be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a position positioning device, etc. The following takes the position positioning device as an example to illustrate this embodiment and the following embodiments.

[0039] See also Figure 1 The embodiment of the present application provides a method for quickly determining the position of a cryptographic operation component, which is used for positioning and detecting the cryptographic operation component of a cryptographic product. The position of the cryptographic operation component is determined by the following steps:

[0040] Step 1: Collect electromagnetic detection characteristics of cryptographic products when running different algorithm functions through electromagnetic detection equipment;

[0041] Step 2: Set the algorithm function of the cryptographic product, and select the test vector according to the input plaintext, key, and output ciphertext of the algorithm function. Set the corresponding input data set according to the algorithm requirements of the algorithm function.

[0042] Step 3: Start the algorithm function of the password product and set the detection range; the electromagnetic detection device moves the probe around the detection range to determine the coordinates of each border point of the detection range;

[0043] Step 4: Divide the detection range into several blocks and label the blocks according to the preset detection order;

[0044] Step 5: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding block position in the detection sequence number sequence, and obtains the electromagnetic detection value of each block through the probe; after completing the electromagnetic detection of all blocks, return to step 9 to continue the electromagnetic detection;

[0045] Step 6: Determine whether the electromagnetic detection value reaches the set limit value; if it reaches it, set it as a high-value block, and set a key area according to the location of the high-value block; otherwise, return to step 5 to continue electromagnetic detection;

[0046] Step 7: Divide the key area into several small blocks and label the small blocks according to the preset detection order;

[0047] Step 8: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding small square position in the detection sequence number sequence, and obtains the electromagnetic detection value of each small square through the probe; after completing the electromagnetic detection of all small squares, return to step 5 to continue the electromagnetic detection;

[0048] Step 9: Determine whether there is a high-value block. If not, return to step 3 to readjust the detection range. If the number of adjustments reaches the maximum number of adjustments, it is considered that the positioning has failed, and the positioning is terminated and the password product protection measures are output. If it exists, the electromagnetic detection values ​​of the key areas corresponding to the high-value blocks are expanded;

[0049] Step 10: Compare the expanded electromagnetic detection value with the electromagnetic detection feature of the cryptographic product when running the corresponding algorithm function; if the features match, the positioning is deemed successful, the positioning is ended and the position of the high-value block is output as the position of the cryptographic operation component; if the features do not match, it is deemed not to be the position of the cryptographic operation component.

[0050] It should be noted that the embodiments of the present application are intended to solve the technical problem of quickly and accurately locating the position of a cryptographic operation component in a cryptographic product. In the field of network security, hackers may infer sensitive parameters such as keys by analyzing cryptographic algorithms or detecting energy changes in cryptographic operation components, thereby threatening the security of the system. Therefore, being able to quickly and accurately determine the position of a cryptographic operation component is crucial to evaluating and enhancing the security of cryptographic products.

[0051] This embodiment uses electromagnetic detection equipment to collect electromagnetic features generated when a cryptographic product runs different algorithm functions; then sets test vectors and input data sets according to the algorithm functions (such as encryption, decryption, etc.) of the cryptographic product; determines the detection range by dividing the detection range and blocks, and divides the range into several blocks, and performs electromagnetic detection on each block; then identifies high-value blocks by judging whether the electromagnetic detection value reaches a preset limit value, and sets key areas accordingly, and further subdivides the key areas into smaller blocks, and performs detailed electromagnetic detection; compares the detected electromagnetic features with the known electromagnetic features of the cryptographic product running the corresponding algorithm function, so as to determine the location of the cryptographic operation component.

[0052] This embodiment can quickly determine the precise location of cryptographic operation components through electromagnetic detection and feature comparison. Accurately locating cryptographic operation components helps to assess potential security risks and take corresponding protective measures. Through detailed detection and feature comparison, the accuracy of cryptographic product detection and attacks is improved. A systematic and constrained detection process is provided to reduce human errors and operational complexity.

[0053] This embodiment supports multiple algorithm functions, including encryption, decryption, signing, signature verification, hash value calculation and random number generation, etc., which enhances the versatility and applicability of the method; by recording electromagnetic leakage and leakage time, and quantifying the amount of electromagnetic leakage, the accuracy and availability of detection data are improved; during the detection process, the detection range is dynamically adjusted as needed, which improves the flexibility and adaptability of positioning; the selection of key areas takes into account high-value blocks and their adjacent blocks, and improves the accuracy of positioning through intelligent division; when positioning fails, the system will output suggestions for improving cryptographic product protection measures, which enhances the security and robustness of the system.

[0054] In a feasible implementation, in step 1, an algorithm function is selected to run, and the electromagnetic leakage and leakage time generated by the cryptographic product during operation are recorded through the probe of the electromagnetic detection equipment, and the electromagnetic leakage amount is quantified to obtain the electromagnetic detection characteristics of the cryptographic product.

[0055] In a feasible implementation manner, the algorithm functions include an encryption algorithm, a decryption algorithm, a signature algorithm, a signature verification algorithm, a hash value calculation algorithm and a random number generation algorithm.

[0056] In a feasible implementation manner, the frame boundary point coordinates include upper left frame boundary point coordinates, upper right frame boundary point coordinates, lower left frame boundary point coordinates, and lower right frame boundary point coordinates.

[0057] In a feasible implementation manner, the block determines the length and width values ​​in equal proportion to the diagonal of the detection range.

[0058] In a feasible implementation manner, the key area is selected as a high-value block and a partial area of ​​a block adjacent to the high-value block; wherein the key area is selected as one third of the portion of the adjacent block close to the high-value block.

[0059] In a feasible implementation, in step 7, small squares with fixed length and width are set to divide the key areas; wherein the length and width of the small squares are smaller than the length and width of the blocks; during electromagnetic detection, the small squares within the high-value blocks are detected first, and then the small squares within the partial areas of the adjacent blocks are detected.

[0060] In a feasible implementation, in step 7, small squares of a changing grid are set to segment the key area; wherein, the center of the high-value square of the key area is used as the base point, and the length and width values ​​of the small squares are gradiently divided; the length and width values ​​of the small squares close to the base point are greater than those of the small squares far from the base point.

[0061] The present application provides a position positioning device, which includes: at least one processor; and a memory that is communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the method steps of quickly determining the position of a cryptographic operation component in the above-mentioned embodiment.

[0062] Reference below Figure 2 , which shows a schematic diagram of the structure of a position positioning device suitable for implementing the embodiment of the present application. The position positioning device in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 2 The position positioning device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0063] like Figure 2As shown, the position positioning device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the position positioning device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the position positioning device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a position positioning device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0064] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0065] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned password design method, and can solve the technical problems of long time consumption and low design efficiency in password design. Compared with the related art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the password design method provided by the above-mentioned embodiment, and will not be repeated here.

[0066] The above are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A method for quickly determining the position of a cryptographic operation component, used for positioning and detecting the cryptographic operation component of a cryptographic product, characterized in that: Determine the location of the cryptographic operation component by following the steps below: Step 1: Collect electromagnetic detection characteristics of cryptographic products when running different algorithm functions through electromagnetic detection equipment; Step 2: Set the algorithm function of the cryptographic product, and select the test vector according to the input plaintext, key, and output ciphertext of the algorithm function. Set the corresponding input data set according to the algorithm requirements of the algorithm function. Step 3: Start the algorithm function of the password product and set the detection range; the electromagnetic detection device moves the probe around the detection range to determine the coordinates of each border point of the detection range; Step 4: Divide the detection range into several blocks and label the blocks according to the preset detection order; Step 5: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding block position in the detection sequence number sequence, and obtains the electromagnetic detection value of each block through the probe; after completing the electromagnetic detection of all blocks, return to step 9 to continue the electromagnetic detection; Step 6: Determine whether the electromagnetic detection value reaches the set limit value; if it reaches it, set it as a high-value block, and set a key area according to the location of the high-value block; otherwise, return to step 5 to continue electromagnetic detection; Step 7: Divide the key area into several small blocks and label the small blocks according to the preset detection order; Step 8: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding small square position in the detection sequence number sequence, and obtains the electromagnetic detection value of each small square through the probe; after completing the electromagnetic detection of all small squares, return to step 5 to continue the electromagnetic detection; Step 9: Determine whether there is a high-value block. If not, return to step 3 to readjust the detection range. If the number of adjustments reaches the maximum number of adjustments, it is considered that the positioning has failed, and the positioning is terminated and the password product protection measures are output. If it exists, the electromagnetic detection values ​​of the key areas corresponding to the high-value blocks are expanded; Step 10: Compare the expanded electromagnetic detection value with the electromagnetic detection feature of the cryptographic product when running the corresponding algorithm function; If the features match, the positioning is considered successful, the positioning ends and the position of the high-value block is output as the position of the cryptographic operation component; if the features do not match, it is considered not to be the position of the cryptographic operation component.

2. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: In step 1, the algorithm function to be run is selected, and the electromagnetic leakage and leakage time generated by the cryptographic product during operation are recorded through the probe of the electromagnetic detection equipment, and the electromagnetic leakage amount is quantified to obtain the electromagnetic detection characteristics of the cryptographic product.

3. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The algorithm functions include encryption algorithm, decryption algorithm, signature algorithm, signature verification algorithm, hash value calculation algorithm and random number generation algorithm.

4. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The frame boundary point coordinates include upper left frame boundary point coordinates, upper right frame boundary point coordinates, lower left frame boundary point coordinates and lower right frame boundary point coordinates.

5. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The block determines the length and width of the block in proportion to the diagonal of the detection range.

6. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The key area is selected as a high-value block and a partial area of ​​a block adjacent to the high-value block; wherein, the key area is selected as one third of the adjacent block close to the high-value block.

7. A method for quickly determining the position of a cryptographic operation component according to claim 6, characterized in that: In step 7, small squares with fixed length and width are set to segment the key areas; wherein the length and width of the small squares are smaller than the length and width of the blocks; during electromagnetic detection, the small squares in the high-value blocks are detected first, and then the small squares in the partial areas of the adjacent blocks are detected.

8. A method for quickly determining the position of a cryptographic operation component according to claim 6, characterized in that: In step 7, small squares of a changing grid are set to segment the key area; wherein, the center of the high-value square of the key area is used as the base point, and the length and width values ​​of the small squares are gradiently divided; the length and width values ​​of the small squares close to the base point are greater than those of the small squares far from the base point.

9. A position positioning device, characterized in that: The device comprises: a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of a method for quickly determining the position of a cryptographic operation component as described in any one of claims 1 to 8.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the method steps for quickly determining the position of a cryptographic operation component according to any one of claims 1 to 8 are implemented.

Images