A detection method for the ability of cryptographic products to mitigate non-invasive attacks

Abstract

The present invention discloses a detection method for the ability of a cryptographic product to mitigate non-invasive attacks, and belongs to the technical field of cryptographic detection. A detection method for the ability of a cryptographic product to mitigate non-invasive attacks, comprising: determining a detection object in a cryptographic product; determining a detection point of the detection object; determining a detection tool according to the detection point; determining initial data according to the cryptographic function of the cryptographic product, the initial data including the cryptographic algorithm and mode to be detected, and cryptographic calculation data; running the cryptographic product based on the initial data, and using the detection tool to collect the operation data of the cryptographic product; performing a correlation analysis on the cryptographic calculation data and the operation data, if the calculation data and the operation data are correlated, then the ability of the cryptographic product to mitigate non-invasive attacks is insufficient. The present invention supports the detection of the ability of various cryptographic products to mitigate non-invasive attacks.

Description

Technical Field

[0001] The present invention belongs to the technical field of password detection, and in particular relates to a detection method for the ability of a password product to mitigate non-invasive attacks. Background Art

[0002] Non-invasive attacks are one of the common ways to attack cryptographic products, such as security chips. Therefore, cryptographic products should have the basic ability to mitigate non-invasive attacks on cryptographic products to ensure the security of cryptographic products. At present, the technology for mitigating non-invasive attacks has many problems, such as only targeting security chips, no requirements for signal and information collection equipment, imperfect and arbitrary technical steps, lack of quantitative indicators, no support for artificial intelligence analysis of security, and limited to three types of non-invasive attacks: timing analysis, energy analysis, and electromagnetic analysis. As a result, the detection method for the ability of cryptographic products to mitigate non-invasive attacks is immature. Summary of the invention

[0003] The purpose of the present invention is to overcome the deficiencies of the prior art and provide a detection method for the ability of cryptographic products to mitigate non-invasive attacks.

[0004] The object of the present invention is achieved through the following technical solution: a detection method for the ability of cryptographic products to mitigate non-invasive attacks, comprising:

[0005] Determine the detection objects in the cryptographic products;

[0006] Determining a detection point of the detection object;

[0007] Determining a detection tool according to the detection point;

[0008] Determining initial data according to the cryptographic function of the cryptographic product, the initial data including the cryptographic algorithm and mode to be tested, and cryptographic calculation data;

[0009] Running the cryptographic product based on the initial data, and collecting the running data of the cryptographic product using the detection tool;

[0010] Perform correlation analysis on cryptographic calculation data and operation data. If the calculation data and operation data are correlated, the cryptographic product’s ability to mitigate non-invasive attacks is insufficient.

[0011] Furthermore, the detection objects in the cryptographic products are determined, including:

[0012] Get information about password products;

[0013] Determine the cryptographic functions of the cryptographic product based on the information of the cryptographic product and divide the cryptographic boundaries of the cryptographic product;

[0014] The components of the cryptographic product located within the cryptographic boundary are determined as detection objects.

[0015] Further, determining the detection point in the detection object includes:

[0016] Determine the cryptographic function operating components in the detection object and the layout of the cryptographic function operating components in the cryptographic product according to the information of the cryptographic product;

[0017] The detection point is determined according to the cryptographic function running component.

[0018] Further, determining the detection tool according to the detection point includes:

[0019] For a cryptographic function operating component that can be directly contacted by a detection tool, the detection tool corresponding to the cryptographic function operating component is the first detection tool;

[0020] For a cryptographic function operating component that cannot be directly contacted by a detection tool, the detection tool corresponding to the cryptographic function operating component is the second detection tool.

[0021] Furthermore, the first detection tool is used to collect one or more of electromagnetic signals, sound signals and temperature signals;

[0022] The second detection tool is used to collect one or more of the current and voltage, the password calculation time, the fan speed and the CPU frequency of the password product during the operation of the password product.

[0023] Furthermore, the cryptographic product is run based on the initial data, and the running data of the cryptographic product is collected by using the detection tool, including:

[0024] Connect and install the detection tool;

[0025] importing cryptographic calculation data into a cryptographic product and continuously running the cryptographic product based on the cryptographic algorithm and mode;

[0026] The detection tool is used to collect the operation data of the cryptographic product.

[0027] Furthermore, if the operation data collected by the detection tool does not meet the preset conditions, the detection tool is replaced, or the cryptographic product is run again and the operation data is collected.

[0028] Furthermore, the cryptographic calculation data and operation data are analyzed for correlation. If there is a correlation, the cryptographic product is not capable of mitigating non-invasive attacks, including:

[0029] Mathematical statistics methods are used to perform correlation analysis on the collected operating data and cryptographic calculation data. If the correlation coefficient between the operating data and the cryptographic calculation data is greater than a threshold, the operating data is related to the cryptographic calculation data, and the cryptographic product has insufficient ability to mitigate non-invasive attacks on signals or information of the type to which the cryptographic calculation data belongs.

[0030] Furthermore, the cryptographic calculation data and operation data are analyzed for correlation. If there is a correlation, the cryptographic product is not capable of mitigating non-invasive attacks, including:

[0031] The operating data is input into the artificial intelligence model for training or reasoning, and the correlation between the operating data and the cryptographic calculation data is analyzed. If the correlation coefficient between the operating data and the cryptographic calculation data is greater than the threshold, the operating data is related to the cryptographic calculation data, and the cryptographic product has insufficient ability to mitigate non-invasive attacks on signals or information of the type to which the cryptographic calculation data belongs.

[0032] The beneficial effects of the present invention are:

[0033] (1) The present invention supports the detection of the ability of various cryptographic products to mitigate non-invasive attacks; it supports artificial intelligence analysis, which is not available in the original method;

[0034] (2) The present invention proposes methods and requirements for selecting detection tools;

[0035] (3) The present invention proposes data collection rules and requirements;

[0036] (4) The present invention supports artificial intelligence analysis;

[0037] (5) The data collection method and requirements proposed by the present invention improve the accuracy of the test results. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 The present invention is a flowchart of a method for detecting the ability of cryptographic products to mitigate non-invasive attacks. DETAILED DESCRIPTION

[0039] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0040] See also Figure 1 The present invention provides a detection method for the ability of cryptographic products to mitigate non-invasive attacks:

[0041] like Figure 1As shown, a detection method for the ability of a cryptographic product to mitigate non-invasive attacks includes:

[0042] Step S100: Determine the detection object in the cryptographic product.

[0043] In some embodiments, determining the detection object in the cryptographic product includes: obtaining information about the cryptographic product; sorting out the cryptographic functions of the cryptographic product according to the information about the cryptographic product, and dividing the cryptographic boundaries of the cryptographic product; and determining the components of the cryptographic product located within the cryptographic boundaries as the detection object.

[0044] Step S200: Determine the detection point of the detection object.

[0045] In some embodiments, determining the detection point in the detection object includes: determining the cryptographic function operating components in the detection object and the layout of the cryptographic function operating components in the cryptographic product based on the information of the cryptographic product; and determining the detection point based on the cryptographic function operating components.

[0046] Step S300: Determine a detection tool according to the detection point.

[0047] In some embodiments, the detection tool is determined according to the detection point, including: for a password function operating component that the detection tool can directly contact, the detection tool corresponding to the password function operating component is a first detection tool; for a password function operating component that the detection tool cannot directly contact, the detection tool corresponding to the password function operating component is a second detection tool.

[0048] The first detection tool is used to collect regular signals released by the cryptographic function operating components during operation. For example, the first detection tool is used to collect one or more of electromagnetic signals, sound signals, temperature signals, etc., and may also include other signals that can be collected by the first detection tool.

[0049] The second detection tool is used to collect one or more of the information such as current and voltage, password calculation time, fan speed and CPU frequency of the password product during the operation of the password product, and may also include other information that can be collected by the second detection tool.

[0050] When determining the detection tool, it is necessary to determine parameters such as the detection tool's acquisition accuracy and operating frequency.

[0051] For signals and / or information that use signal databases and / or information databases for subsequent data analysis, the indicators of the corresponding detection tools must be greater than or equal to the requirements of the signal database and / or information database for data; for signals and / or information that do not use signal databases and / or information databases for subsequent data analysis, if the corresponding detection tools are unable to collect valid data in subsequent detections, the detection tools with higher indicators should be replaced.

[0052] Step S400: Determine initial data according to the cryptographic function of the cryptographic product, wherein the initial data includes the cryptographic algorithm to be tested and the corresponding mode, as well as cryptographic calculation data.

[0053] The cryptographic calculation data is the data required for cryptographic calculation. By determining the cryptographic algorithm to be tested and the corresponding mode, as well as the cryptographic calculation data, it is ensured that the detection object continues to operate during the detection period.

[0054] Step S500: Run the cryptographic product based on the initial data, and use the detection tool to collect the running data of the cryptographic product.

[0055] In some embodiments, running a cryptographic product based on the initial data and using the detection tool to collect the operating data of the cryptographic product includes: connecting and installing the detection tool; importing the cryptographic calculation data into the cryptographic product and continuously running the cryptographic product; and using the detection tool to collect the operating data of the cryptographic product.

[0056] During the operation of the cryptographic product, the detection tool continuously collects the operation data of the cryptographic product, such as various signal data and information data.

[0057] If the operation data collected by the detection tool does not meet the preset conditions, the detection tool is replaced, or the cryptographic product is run again and the operation data is collected. For example, if the collection effect is poor, the detection tool is replaced, or the signal and / or information is interfered with or amplified. If it still does not meet the requirements of subsequent data analysis, the detection tool is replaced; the amount of collected operation data should be sufficient for subsequent data analysis. If the amount of collected data is insufficient, continue to collect data in the same operation mode and data collection method.

[0058] Step S600: Perform correlation analysis on the cryptographic calculation data and the operation data. If the calculation data and the operation data are correlated, the cryptographic product is not capable of mitigating non-invasive attacks.

[0059] In some embodiments, a correlation analysis is performed on the cryptographic calculation data and the operation data. If there is a correlation, the cryptographic product is insufficient in its ability to mitigate non-invasive attacks, including: using mathematical statistics methods to perform a correlation analysis on the collected operation data and the cryptographic calculation data. If the correlation coefficient between the operation data and the cryptographic calculation data is greater than a threshold, the operation data is related to the cryptographic calculation data (that is, all or part of the cryptographic calculation data can be analyzed), and the cryptographic product is insufficient in its ability to mitigate non-invasive attacks for signals or information of the type to which the cryptographic calculation data belongs.

[0060] In some embodiments, a correlation analysis is performed on the cryptographic calculation data and the operating data. If there is a correlation, the cryptographic product is insufficient to mitigate non-invasive attacks, including: inputting the operating data into an artificial intelligence model for training or reasoning, analyzing the correlation between the operating data and the cryptographic calculation data. If the correlation coefficient between the operating data and the cryptographic calculation data is greater than a threshold, the operating data is related to the cryptographic calculation data (that is, all or part of the cryptographic calculation data can be analyzed), and the cryptographic product is insufficient to mitigate non-invasive attacks for signals or information of the type to which the cryptographic calculation data belongs.

[0061] The scheme of the present invention is illustrated by an example below: a security chip is set as the detection object, and analysis is performed from dimensions such as computing time, energy consumption, and electromagnetic leakage at key detection points of the security chip to detect the security capability of the security chip in resisting timing attacks, energy analysis attacks, and electromagnetic analysis attacks in non-invasive attacks.

[0062] First, determine the detection points of the security chip. The overall architecture of the security chip is relatively complex. During the detection process, whether the key or sensitive information is transmitted is used as a reference for selecting the detection point. Determine the detection point of non-invasive attacks for each security chip. According to the overall design concept of the security chip, the detection points mainly involve the following aspects:

[0063] (1) The operation unit of the cryptographic algorithm. During the operation of the cryptographic algorithm, the key will participate in the operation of the cryptographic algorithm, which will produce changes in time, electromagnetics, and energy, thereby creating the risk of the key being attacked.

[0064] (2) Key and key parameter transmission unit. The key and key parameters of the security chip are transmitted on the bus of the security chip, which is also subject to time, electromagnetic and energy changes, thus creating the risk of key attacks.

[0065] Then, timing attack test, energy analysis attack test and electromagnetic analysis attack test are carried out respectively.

[0066] Timing attack tests include:

[0067] (1) Run the symmetric cryptographic algorithm supported by the security chip. The plaintext of the cryptographic algorithm input changes randomly each time, but the key remains unchanged. Collect 100,000 encryption or decryption energy curves and analyze the correlation between the operation time and key sensitive data. If the analysis result shows that the operation time is correlated with the sensitive data, the security chip is insufficient to mitigate timing attacks.

[0068] (2) Run an asymmetric cryptographic algorithm supported by the security chip. The plaintext input of the cryptographic algorithm changes randomly each time, but the key remains unchanged. Collect 100,000 energy curves of signature operations or decryption operations, and analyze the correlation between operation time and sensitive data. If the analysis result shows that the operation time is correlated with sensitive data, then the security chip is insufficient to mitigate timing attacks.

[0069] (3) Run the key or key parameter transmission operation of the security chip, with the key or key parameter changing randomly. Collect 100,000 energy curves of key transmission or key parameter transmission, and analyze the correlation between operation time and sensitive data. If the analysis result shows that the operation time is correlated with sensitive data, then the security chip is insufficient to mitigate timing attacks.

[0070] Energy analysis attack tests include:

[0071] (1) Run the symmetric cryptographic algorithm supported by the security chip. The plaintext of the cryptographic algorithm input changes randomly each time, but the key remains unchanged. Collect 100,000 encrypted or decrypted energy curves, analyze the correlation between energy consumption characteristics and sensitive data, and use correlation energy analysis or differential energy analysis. If the analysis result shows that the energy consumption characteristics are related to sensitive data, the security chip is insufficient to mitigate energy analysis attacks.

[0072] (2) Run an asymmetric cryptographic algorithm supported by the security chip. The plaintext to be signed or the ciphertext to be decrypted input into the cryptographic algorithm changes randomly each time, but the key remains unchanged. Collect 100,000 energy curves of signature operations or decryption operations, analyze the correlation between energy consumption characteristics and sensitive data, and use correlation energy analysis or differential energy analysis. If the analysis result shows that the energy consumption characteristics are correlated with sensitive data, then the security chip is insufficient to mitigate energy analysis attacks.

[0073] (3) Run the key or key parameter transmission operation of the security chip, the key or key parameter changes randomly, collect 100,000 energy curves of key transmission or key parameter transmission, analyze the correlation between the energy curve and sensitive data, and use template attack analysis. If the analysis result shows that the operation time is related to sensitive data, then the security chip is insufficient to mitigate energy analysis attacks.

[0074] Electromagnetic analysis attack tests include:

[0075] (1) Run the symmetric cryptographic algorithm supported by the security chip. The plaintext input of the cryptographic algorithm changes randomly each time, but the key remains unchanged. Collect 100,000 encrypted or decrypted electromagnetic curves and analyze the correlation between the electromagnetic radiation characteristics and sensitive data. If the analysis result shows that the electromagnetic radiation characteristics are correlated with the sensitive data, the security chip is insufficient to mitigate electromagnetic analysis attacks.

[0076] (2) Run an asymmetric cryptographic algorithm supported by the security chip. The plaintext to be signed or the ciphertext to be decrypted of the cryptographic algorithm input is randomly changed, and the key remains unchanged. Collect 100,000 electromagnetic curves of the signature operation or decryption operation, and analyze the correlation between the electromagnetic radiation characteristics and sensitive data. If the analysis result shows that the electromagnetic radiation characteristics are correlated with the sensitive data, then the security chip is insufficient to mitigate electromagnetic analysis attacks.

[0077] (3) Run the calculation of the key or key parameters of the security chip, collect 100,000 electromagnetic curves of key transmission or key parameter transmission, analyze the correlation between the energy curve and sensitive data, and use template attack analysis. If the analysis result shows that the calculation time is related to sensitive data, then the security chip is insufficient to mitigate electromagnetic analysis attacks.

[0078] The above is only a preferred embodiment of the present invention. It should be understood that the present invention is not limited to the form disclosed herein, and should not be regarded as excluding other embodiments, but can be used in various other combinations, modifications and environments, and can be modified within the scope of the concept described herein through the above teachings or the technology or knowledge of the relevant field. The changes and modifications made by those skilled in the art shall not deviate from the spirit and scope of the present invention, and shall be within the scope of protection of the claims attached to the present invention.

Claims

1. A method for detecting the ability of a cryptographic product to mitigate non-invasive attacks, characterized in that: include: Determine the detection objects in the cryptographic products; Determining a detection point of the detection object; Determining a detection tool according to the detection point; Determining initial data according to the cryptographic function of the cryptographic product, the initial data including the cryptographic algorithm and mode to be tested, and cryptographic calculation data; Running the cryptographic product based on the initial data, and collecting the running data of the cryptographic product using the detection tool; Conduct correlation analysis on cryptographic calculation data and operation data. If the calculation data and operation data are correlated, the cryptographic product is not capable of mitigating non-invasive attacks. Identify detection targets in cryptographic products, including: Get information about password products; Determine the cryptographic functions of the cryptographic product based on the information of the cryptographic product and divide the cryptographic boundaries of the cryptographic product; Determine the components of the cryptographic product that are within the cryptographic boundary as detection objects; Determining a detection point in the detection object includes: Determine the cryptographic function operating components in the detection object and the layout of the cryptographic function operating components in the cryptographic product according to the information of the cryptographic product; Determining a detection point according to the cryptographic function operation component; Determining a detection tool according to the detection point includes: For a cryptographic function operating component that can be directly contacted by a detection tool, the detection tool corresponding to the cryptographic function operating component is the first detection tool; For a cryptographic function operating component that cannot be directly contacted by a detection tool, the detection tool corresponding to the cryptographic function operating component is the second detection tool; Running the cryptographic product based on the initial data and collecting the running data of the cryptographic product using the detection tool includes: Connect and install the detection tool; importing cryptographic calculation data into a cryptographic product and continuously running the cryptographic product based on the cryptographic algorithm and mode; Using the detection tool to collect operation data of the cryptographic product; Perform correlation analysis on cryptographic calculation data and operation data. If there is a correlation, the cryptographic product’s ability to mitigate non-invasive attacks is insufficient, including: The collected operation data and cryptographic calculation data are analyzed for correlation using mathematical statistics methods. If the correlation coefficient between the operation data and the cryptographic calculation data is greater than a threshold, the operation data and the cryptographic calculation data are correlated, and the cryptographic product is insufficient in mitigating non-invasive attacks on signals or information of the type to which the cryptographic calculation data belongs. The operating data is input into the artificial intelligence model for training or reasoning, and the correlation between the operating data and the cryptographic calculation data is analyzed. If the correlation coefficient between the operating data and the cryptographic calculation data is greater than the threshold, the operating data is related to the cryptographic calculation data, and the cryptographic product has insufficient ability to mitigate non-invasive attacks on signals or information of the type to which the cryptographic calculation data belongs.

2. A method for detecting the ability of a cryptographic product to mitigate non-invasive attacks according to claim 1, characterized in that: The first detection tool is used to collect one or more of electromagnetic signals, sound signals and temperature signals; The second detection tool is used to collect one or more of the current and voltage, the password calculation time, the fan speed and the CPU frequency of the password product during the operation of the password product.

3. A method for detecting the ability of a cryptographic product to mitigate non-invasive attacks according to claim 1, characterized in that: If the operating data collected by the detection tool does not meet the preset conditions, replace the detection tool, or run the cryptographic product again and collect the operating data.

Images