A method, device, and storage medium for quickly determining the position of a cryptographic operation component

Abstract

The present invention provides a method, device and storage medium for quickly determining the position of a cryptographic operation component, relating to the field of network security technology. The present invention collects the electromagnetic characteristics generated by a cryptographic product when running different algorithm functions by using an electromagnetic detection device; then sets test vectors and an input data set according to the algorithm functions of the cryptographic product (such as encryption, decryption, etc.); determines the detection range by dividing the detection range and squares, divides the range into several squares, and performs electromagnetic detection on each square; then identifies high-value squares by determining whether the electromagnetic detection value reaches a preset threshold value, sets a key area accordingly, further divides the key area into smaller squares, and performs detailed electromagnetic detection; compares the detected electromagnetic characteristics with the known electromagnetic characteristics of the cryptographic product when running the corresponding algorithm function to determine the position of the cryptographic operation component.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and particularly to a method, device, and storage medium for quickly determining the location of a cryptographic operation component. Background Art

[0002] Passwords are the foundation for the healthy development of the digital age. With the development of new scientific and technological advancements and the emergence of new application scenarios, among them, cryptographic operation components are hardware devices used for centralized processing and operation of passwords and are widely deployed in the field of network security.

[0003] When hackers attempt to crack cryptographic algorithms, they can not only perform reasoning and analysis on the algorithm itself to discover existing password vulnerabilities but also detect the energy (usually voltage), electromagnetic fields, etc. of the cryptographic operation components of password products to reverse-engineer sensitive parameters such as encryption keys. We need to verify whether the cryptographic operation components of password products can be located when they leave the factory to determine whether there is a risk of leakage of the location of the cryptographic operation components.

[0004] Therefore, determining the cryptographic operation components of password products is an important means to improve the accuracy of password product detection and attacks. Most of the existing methods for determining the location of cryptographic operation components are still simple energy scans and do not impose constraints on the operation process. Since the cryptographic operation speed is very fast and the energy generated by different algorithm steps is different, there is a situation where the actual cryptographic operation components show low energy during detection due to algorithm steps or other reasons during detection, resulting in failure to find the location.

[0005] Therefore, there is a need to provide a method, device, and storage medium for quickly determining the location of a cryptographic operation component to solve the above technical problems. Summary of the Invention

[0006] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a method for quickly determining the location of a cryptographic operation component with simple operation, which solves the problem of failure to find the location due to lack of constraints on the operation process.

[0007] To achieve the above object, the present application proposes a method for quickly determining the location of a cryptographic operation component for location detection of the cryptographic operation component of a password product. The location of the cryptographic operation component is determined through the following steps:

[0008] Step 1: Collect the electromagnetic detection characteristics of the password product using an electromagnetic detection device under different algorithm functions.

[0009] Step 2: Set the algorithm function of the password product, select test vectors according to the input plaintext, encryption key, and output ciphertext of the algorithm function, and set the corresponding input data set according to the algorithm requirements of the algorithm function.

[0010] Step 3: Activate the algorithm function of the cryptographic product and set the detection range; among them, the electromagnetic detection device moves around the detection range through the probe to determine the coordinate of each boundary point of the detection range;

[0011] Step 4: Divide the detection range into several squares and number the squares in the preset detection order;

[0012] Step 5: The cryptographic product continuously runs with the algorithm function set in Step 2, moves the probe to the corresponding square position in the order of the detection sequence numbers, and obtains the electromagnetic detection values of each square through the probe head; after completing the electromagnetic detection of all squares, jump to Step 9;

[0013] Step 6: Determine whether the electromagnetic detection value reaches the set threshold value; if it reaches, set it as a high-value square and set the key area according to the position of the high-value square; otherwise, return to Step 5 to continue the electromagnetic detection;

[0014] Step 7: Divide the key area into several small squares and number the small squares in the preset detection order;

[0015] Step 8: The cryptographic product continuously runs with the algorithm function set in Step 2, moves the probe to the corresponding small square position in the order of the detection sequence numbers, and obtains the electromagnetic detection values of each small square through the probe head; after completing the electromagnetic detection of all small squares, return to Step 5 to continue the electromagnetic detection;

[0016] Step 9: Determine whether there is a high-value square. If not, return to Step 3 to re-adjust the detection range. If the number of adjustment times reaches the maximum number of adjustment times, it is regarded as a positioning failure, end the positioning and output the improvement of the cryptographic product protection measure; if there is, expand the data of the electromagnetic detection value of the key area corresponding to the high-value square;

[0017] Step 10: Compare the expanded electromagnetic detection value with the electromagnetic detection characteristics of the cryptographic product when running the corresponding algorithm function; if the characteristics match, it is regarded as a successful positioning, end the positioning and output the position of the high-value square as the position of the cryptographic operation component; if the characteristics do not match, it is regarded as not the position of the cryptographic operation component.

[0018] As a further solution, in Step 1, select the running algorithm function, record the electromagnetic leakage and leakage time generated by the cryptographic product during operation through the probe of the electromagnetic detection device, and quantitatively process the electromagnetic leakage amount to obtain the electromagnetic detection characteristics of the cryptographic product.

[0019] As a further solution, the algorithm functions include encryption algorithm, decryption algorithm, signature algorithm, verification signature algorithm, hash value calculation algorithm and random number generation algorithm.

[0020] As a further solution, the border limit point coordinates include the upper left border limit point coordinates, the upper right border limit point coordinates, the lower left border limit point coordinates, and the lower right border limit point coordinates.

[0021] As a further solution, the length value and the width value of the square are determined in proportion to the diagonal of the detection range.

[0022] As a further solution, the key area is selected as a partial area of the high-value square and the adjacent area of the high-value square; wherein, one-third of the adjacent area close to the high-value square is selected for the key area.

[0023] As a further solution, in step 7, small squares with fixed length and width are set to divide the key area; wherein, the length value and the width value of the small square are smaller than the length value and the width value of the square; during electromagnetic detection, the small squares within the high-value square are detected first, and then the small squares within the partial area of the adjacent area are detected.

[0024] As a further solution, in step 7, small squares with variable grids are set to divide the key area; wherein, taking the center of the high-value square in the key area as the base point, the length value and the width value of the small square are divided gradientally; the length value and the width value of the small square close to the base point are larger than those of the small square far from the base point.

[0025] On the one hand, the present invention further provides a position positioning device, which includes: a memory, a processor, and a computer program stored on the memory and executable on the processor, and the computer program is configured to implement the method steps of a method for quickly determining the position of a cryptographic operation component as described in any one of the above.

[0026] On the other hand, the present invention further provides a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium, and when the computer program is executed by a processor, the method steps of a method for quickly determining the position of a cryptographic operation component as described in any one of the above are implemented.

[0027] Compared with the related art, a method, a device, and a storage medium for quickly determining the position of a cryptographic operation component provided by the present invention have the following advantages:

[0028] (1) The present invention accurately locates the cryptographic operation component through electromagnetic detection technology, which helps to timely discover potential security vulnerabilities, thereby taking preventive measures to enhance the security of cryptographic products. At the same time, by comparing with known electromagnetic characteristics, the accuracy of positioning is improved, ensuring the reliability of the detection results.

[0029] (2) The present invention adopts a systematic and automated detection process, reducing the complexity and error rate of manual operations and improving the detection efficiency. Through the preset detection order and boundary value judgment, the method can quickly screen out high-value areas, effectively narrowing the detection range and accelerating the positioning process.

[0030] (3) The present invention supports a variety of algorithm functions and can adapt to different cryptographic products and algorithm requirements. The dynamic detection range adjustment and intelligent selection of key areas technology make the method have good adaptability and flexibility, enabling it to cope with different detection environments and conditions and improving the success rate of the positioning process. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings herein are incorporated into the specification and form a part of the specification, showing embodiments consistent with the present application and, together with the specification, are used to explain the principles of the present application.

[0032] To more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the following will briefly introduce the accompanying drawings required for use in the description of the embodiments or related technologies. Obviously, for those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0033] Figure 1 Schematic flow chart of a method for quickly determining the position of a cryptographic operation component provided by the present invention;

[0034] Figure 2 Schematic module structure diagram of a position positioning device provided by the present invention.

[0035] The implementation, functional features, and advantages of the present application will be further described in conjunction with the embodiments with reference to the accompanying drawings. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0036] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some, but not all, of the embodiments of the present invention. Usually, the components of the embodiments of the present invention described and illustrated herein can be arranged and designed in various different configurations.

[0037] The main solution of the embodiment of the present application is as follows: By means of electromagnetic detection technology, the electromagnetic characteristics of a cryptographic product when running different algorithm functions are collected, test vectors are set, and detailed electromagnetic detection is carried out within a preset detection range. By dividing the detection range into squares, numbering the detection order, judging whether the electromagnetic detection value reaches the limit value, and further refining the detection within the key area, the position of the cryptographic operation component is finally determined through feature comparison. The method also includes quantifying electromagnetic leakage to obtain electromagnetic detection features, and performing specific geometric processing on the detection range and key area to improve the positioning accuracy; The present invention can effectively locate the cryptographic operation component, evaluate the security of the cryptographic product, and resist hacker attacks, and is particularly suitable for network environments that require high security.

[0038] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication, and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device, a position positioning device, etc. that can implement the above functions. Hereinafter, taking the position positioning device as an example, this embodiment and the following embodiments will be described.

[0039] Please refer to Figure 1 , the embodiment of the present application provides a method for quickly determining the position of a cryptographic operation component, which is used for the positioning detection of the cryptographic operation component of a cryptographic product. The position of the cryptographic operation component is determined through the following steps:

[0040] Step 1: Collect the electromagnetic detection features of the cryptographic product by an electromagnetic detection device when the cryptographic product is running different algorithm functions;

[0041] Step 2: Set the algorithm function of the cryptographic product, select test vectors according to the input plaintext, key, and output ciphertext of the algorithm function, and set the corresponding input data set according to the algorithm requirements of the algorithm function;

[0042] Step 3: Start the algorithm function of the cryptographic product and set the detection range; wherein, the electromagnetic detection device moves around the detection range through a probe to determine the coordinate of each border limit point of the detection range;

[0043] Step 4: Divide the detection range into several squares and number the detection order of the squares according to a preset detection order;

[0044] Step 5: The cryptographic product continuously runs with the algorithm function set in Step 2, move the probe to the corresponding square position in the order of the detection order numbering, and obtain the electromagnetic detection value of each square through the probe head; after completing the electromagnetic detection of all squares, jump to execute Step 9;

[0045] Step 6: Determine whether the electromagnetic detection value reaches the set threshold value; if it reaches, set it as a high-value block, and set the key area according to the position of the high-value block; otherwise, return to Step 5 to continue performing electromagnetic detection;

[0046] Step 7: Divide the key area into several small blocks and number the small blocks in the preset detection order;

[0047] Step 8: The cryptographic product continuously operates with the algorithm function set in Step 2, move the probe to the corresponding position of the small block in the detection order number sequence, and obtain the electromagnetic detection values of each small block through the probe head; after completing the electromagnetic detection of all small blocks, return to Step 5 to continue performing electromagnetic detection;

[0048] Step 9: Determine whether there is a high-value block. If not, return to Step 3 to readjust the detection range. If the number of adjustment times reaches the maximum number of adjustment times, it is regarded as a positioning failure, end the positioning and output that the protection measures of the cryptographic product need to be improved; if there is, perform data expansion on the electromagnetic detection values of the key area corresponding to the high-value block;

[0049] Step 10: Compare the expanded electromagnetic detection values with the electromagnetic detection characteristics of the cryptographic product when running the corresponding algorithm function; if the characteristics match, it is regarded as a successful positioning, end the positioning and output the position of the high-value block as the position of the cryptographic operation component; if the characteristics do not match, it is regarded as not the position of the cryptographic operation component.

[0050] It should be noted that: The embodiment of the present application aims to solve the technical problem of quickly and accurately positioning the position of the cryptographic operation component in the cryptographic product. In the field of network security, hackers may infer sensitive parameters such as keys by analyzing cryptographic algorithms or detecting the energy changes of cryptographic operation components, thus threatening the security of the system. Therefore, being able to quickly and accurately determine the position of the cryptographic operation component is crucial for evaluating and enhancing the security of cryptographic products.

[0051] In this embodiment, electromagnetic detection equipment is used to collect the electromagnetic characteristics generated by the cryptographic product when running different algorithm functions; then, test vectors and input data sets are set according to the algorithm functions of the cryptographic product (such as encryption, decryption, etc.); by dividing the detection range and blocks, the detection range is determined, and the range is divided into several blocks, and electromagnetic detection is performed on each block; then, by judging whether the electromagnetic detection value reaches the preset threshold value, high-value blocks are identified, and accordingly, key areas are set, and the key areas are further divided into smaller blocks, and detailed electromagnetic detection is performed; the detected electromagnetic characteristics are compared with the known electromagnetic characteristics of the cryptographic product when running the corresponding algorithm function to determine the position of the cryptographic operation component.

[0052] In this embodiment, through electromagnetic detection and feature comparison, the exact position of the cryptographic operation component can be quickly determined. Accurately locating the cryptographic operation component helps to evaluate potential security risks and take corresponding protection measures; through detailed detection and feature comparison, the accuracy of cryptographic product detection and attacks is improved; a systematic and constrained detection process is provided, reducing human errors and operation complexity.

[0053] This embodiment supports multiple algorithm functions, including encryption, decryption, signature, signature verification, hash value calculation, and random number generation, etc., enhancing the versatility and applicability of the method; by recording electromagnetic leakage and leakage time, and quantifying the electromagnetic leakage amount, the accuracy and availability of detection data are improved; during the detection process, the detection range is dynamically adjusted as needed, improving the flexibility and adaptability of positioning; the selection of key areas takes into account high-value blocks and their adjacent blocks, and the positioning accuracy is improved through intelligent partitioning; when the positioning fails, the system will output suggestions for improving the protection measures of the cryptographic product, enhancing the security and robustness of the system.

[0054] In a feasible implementation manner, in step 1, the running algorithm function is selected, and the electromagnetic leakage and leakage time generated by the cryptographic product during operation are recorded by the probe of the electromagnetic detection device, and the electromagnetic leakage amount is quantified to obtain the electromagnetic detection characteristics of the cryptographic product.

[0055] In a feasible implementation manner, the algorithm functions include encryption algorithm, decryption algorithm, signature algorithm, signature verification algorithm, hash value calculation algorithm, and random number generation algorithm.

[0056] In a feasible implementation manner, the border limit point coordinates include the upper left border limit point coordinates, the upper right border limit point coordinates, the lower left border limit point coordinates, and the lower right border limit point coordinates.

[0057] In a feasible implementation manner, the length value and width value of the block are determined proportionally according to the diagonal of the detection range.

[0058] In a feasible implementation manner, the key area is selected as a partial area of the high-value block and the adjacent block of the high-value block; among them, one-third of the adjacent block close to the high-value block is selected for the key area.

[0059] In a feasible implementation manner, in step 7, small blocks with fixed length and width are set to divide the key area; among them, the length value and width value of the small block are smaller than the length value and width value of the block; during electromagnetic detection, the small blocks within the high-value block are detected first, and then the small blocks within the partial area of the adjacent block are detected.

[0060] In a feasible implementation manner, in step 7, small squares of a variable grid are set to divide a key area; wherein, taking the center of the high-value square of the key area as a base point, the length value and width value of the small squares are divided in a gradient manner; the length value and width value of the small squares closer to the base point are greater than those of the small squares farther from the base point.

[0061] The present application provides a position positioning device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein, the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the method steps of quickly determining the position of a password operation component in the above embodiments.

[0062] Refer to the following Figure 2 , which shows a schematic structural diagram of a position positioning device suitable for implementing the embodiments of the present application. The position positioning device in the embodiments of the present application may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 2 The position positioning device shown is only an example and should not impose any limitations on the functions and usage scopes of the embodiments of the present application.

[0063] As Figure 2As shown, the position location device may include a processing device 1001 (such as a central processing unit, a graphics processing unit, etc.), which may perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 into a random access memory (RAM: Random Access Memory) 1004. In the RAM 1004, various programs and data required for the operation of the position location device are also stored. The processing device 1001, the ROM 1002, and the RAM 1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems may be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touchpad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 may allow the position location device to communicate with other devices wirelessly or wiredly to exchange data. Although the figure shows a position location device having various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems may be alternatively implemented or had.

[0064] In particular, according to the embodiments disclosed in the present application, the processes described above with reference to the flowcharts may be implemented as computer software programs. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program codes for executing the methods shown in the flowcharts. In such an embodiment, the computer program may be downloaded and installed from a network through the communication device, or installed from the storage device 1003, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the methods of the embodiments disclosed in the present application are executed.

[0065] The readable storage medium provided in the present application is a computer-readable storage medium, and the computer-readable storage medium stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned password design method, and can solve the technical problems of long time consumption and low design efficiency existing in password design. Compared with the related art, the beneficial effects of the computer-readable storage medium provided in the present application are the same as those of the password design method provided in the above embodiments, and will not be elaborated here.

[0066] The above are only some embodiments of the present application, and do not limit the patent scope of the present application. Any equivalent structural transformation made under the technical concept of the present application by using the content of the specification and drawings of the present application, or any direct / indirect application in other related technical fields is included in the patent protection scope of the present application.

Claims

1. A method for quickly determining the position of a cryptographic operation component, used for positioning and detecting the cryptographic operation component of a cryptographic product, characterized in that: Determine the location of the cryptographic operation component by following the steps below: Step 1: Collect electromagnetic detection characteristics of cryptographic products when running different algorithm functions through electromagnetic detection equipment; Step 2: Set the algorithm function of the cryptographic product, and select the test vector according to the input plaintext, key, and output ciphertext of the algorithm function. Set the corresponding input data set according to the algorithm requirements of the algorithm function. Step 3: Start the algorithm function of the password product and set the detection range; the electromagnetic detection device moves the probe around the detection range to determine the coordinates of each border point of the detection range; Step 4: Divide the detection range into several blocks and label the blocks according to the preset detection order; Step 5: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding block position in the detection sequence number sequence, and obtains the electromagnetic detection value of each block through the probe; after completing the electromagnetic detection of all blocks, jump to step 9; Step 6: Determine whether the electromagnetic detection value reaches the set limit value; if it reaches it, set it as a high-value block, and set a key area according to the location of the high-value block; otherwise, return to step 5 to continue electromagnetic detection; Step 7: Divide the key area into several small blocks and label the small blocks according to the preset detection order; Step 8: The cryptographic product continues to run with the algorithm function set in step 2, moves the probe to the corresponding small square position in the detection sequence number sequence, and obtains the electromagnetic detection value of each small square through the probe; after completing the electromagnetic detection of all small squares, return to step 5 to continue the electromagnetic detection; Step 9: Determine whether there is a high-value block. If not, return to step 3 to readjust the detection range. If the number of adjustments reaches the maximum number of adjustments, it is considered that the positioning has failed, and the positioning is terminated and the password product protection measures are output. If it exists, the electromagnetic detection values ​​of the key areas corresponding to the high-value blocks are expanded; Step 10: Compare the expanded electromagnetic detection value with the electromagnetic detection feature of the cryptographic product when running the corresponding algorithm function; If the features match, the positioning is considered successful, the positioning ends and the position of the high-value block is output as the position of the cryptographic operation component; if the features do not match, it is considered not to be the position of the cryptographic operation component.

2. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: In step 1, the algorithm function to be run is selected, and the electromagnetic leakage and leakage time generated by the cryptographic product during operation are recorded through the probe of the electromagnetic detection equipment, and the electromagnetic leakage amount is quantified to obtain the electromagnetic detection characteristics of the cryptographic product.

3. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The algorithm functions include encryption algorithm, decryption algorithm, signature algorithm, signature verification algorithm, hash value calculation algorithm and random number generation algorithm.

4. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The frame boundary point coordinates include upper left frame boundary point coordinates, upper right frame boundary point coordinates, lower left frame boundary point coordinates and lower right frame boundary point coordinates.

5. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The block determines the length and width of the block in proportion to the diagonal of the detection range.

6. A method for quickly determining the position of a cryptographic operation component according to claim 1, characterized in that: The key area is selected as a high-value block and a partial area of ​​a block adjacent to the high-value block; wherein, the key area is selected as one third of the adjacent block close to the high-value block.

7. A method for quickly determining the position of a cryptographic operation component according to claim 6, characterized in that: In step 7, small squares with fixed length and width are set to segment the key areas; wherein the length and width of the small squares are smaller than the length and width of the blocks; during electromagnetic detection, the small squares in the high-value blocks are detected first, and then the small squares in the partial areas of the adjacent blocks are detected.

8. A method for quickly determining the position of a cryptographic operation component according to claim 6, characterized in that: In step 7, small squares of a changing grid are set to segment the key area; wherein, the center of the high-value square of the key area is used as the base point, and the length and width values ​​of the small squares are gradiently divided; the length and width values ​​of the small squares close to the base point are greater than those of the small squares far from the base point.

9. A position positioning device, characterized in that: The device comprises: a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of a method for quickly determining the position of a cryptographic operation component as described in any one of claims 1 to 8.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the method steps for quickly determining the position of a cryptographic operation component according to any one of claims 1 to 8 are implemented.

Images