抗功耗攻击的新型轻量级分组密码及其并行验证

With the development of Internet of Things technology, the lightweight cryptographic algorithm has become a research hot topic in recent years. Power analysis attack is the most security threat to the cryptographic chip. It has theoretical and practical value from the system security problem research of lightweight cryptographic related structure and evaluation.The novel lightweight block cryptographic algorithm with its own ability of resisting power analysis attack ability is proposed. In order to achieve this goal, the following three sub goals are needed to be researched. First of all, we propose the parallel algorithm which is used to design quantitative verification system for evaluating the capability of power analysis attack and defense.The system can verify rapidly the power analysis attacks and defense ability of cryptographic algorithm. Secondly, pseudorandom fixed value masking algorithm is studied based on random masking algorithm because it is without changing the system structure. It is suitable for implementation of the resource constrained cipher chip. We mainly study the general defensive algorithm for the resource constrained cryptographic chip which is required to resist the high-order power analysis attacks. It will be used for the new lightweight block cipher algorithm. Finally, the high security and high efficiency of lightweight block cipher algorithm is proposed which can resist power analysis attacks itself based on the flexible control of the algorithm structure,round function and S box hardware friendly. Hardware implementation is done and the safety is also verified. Information security technology must rely on the independent innovation. This research has the significance to promote independent safety application for intelligent card of IOT in our country.

随着物联网技术的普及应用，适合资源约束的轻量级密码成为研究热点；功耗攻击是近年来对密码安全威胁最大的分析方法，从系统安全角度研究轻量级密码相关构造与评价问题具有理论与实际意义。项目在研究抗功耗攻击相关问题的基础上，提出自身带有抗功耗攻击能力的新型轻量级分组密码算法。首先，研究并行算法用以构建密码功耗攻击防御能力量化评估系统，系统可以快速验证密码算法的功耗攻击防御能力。其次，在不改变密码算法实现的体系结构情况下，在随机掩码算法的研究基础上，研究适合资源约束的伪随机固定值掩码算法；主要是研究一种通用的资源约束密码芯片防御算法，要求该方法适合于轻量级密码算法抗高阶功耗攻击。最后，从算法结构的灵活控制、轮函数及S盒硬件友好构造上研究一种自身可抗功耗攻击的高安全高效率轻量级分组密码算法，对其硬件实现并验证其安全性。项目的研究工作对推动物联网智能卡的自主安全应用具有一定意义。

随着物联网技术的普及应用，适合资源约束的轻量级密码成为研究热点；功耗攻击是近年来对密码安全威胁最大的分析方法，课题在研究抗功耗攻击相关问题的基础上，提出高安全低资源高效的新型轻量级分组密码算法具有一定的意义。课题的主要研究内容有：1）抗功耗攻击能力并行量化评估。功耗攻击通常都是在加密设备的物理硬件平台上完成。对加密芯片设计者而言，所设计的算法软件和其他方面的设计必须在样品设备制造出来之后才能测试其设计的安全性和其它性能，因此，开发一个用于在密码算法设计阶段就能评价的功耗分析的软件平台将具有极大的实用价值，课题组开发了“功耗攻击量化仿真软件”和“差分功耗攻击仿真平台”。2）适合轻量级密码的掩码防御算法。设计了一种基于随机选择变换的掩码方案，简称为RSCM。该方案随机产生等概率汉明重量的掩码组，并在每次执行密码算法时随机选择一个组合进行防护，对S盒使用随机转置矩阵变换，同时结合固定值掩码方案，对不同的轮函数加以相应的掩码防护。实验结果表明，RSCM方案有效保护了中间值不被泄露，提高了AES密码算法抗功耗攻击的能力。同时，研究了固定值掩码抗功耗攻击，采用基于多步固定值掩码技术来抗高阶功耗分析攻击，通过预先在片上ROM中存放可随机选择的固定掩码，在实际运行中随机选择一个预先存放的掩码，对AES算法的关键步骤进行多步掩码，以此来抗功耗攻击中的差分统计。3）新型轻量级分组密码算法研究与高效实现。一是研究了一些轻量级密码的优化实现方法，二是提出了一些高安全高效的轻量级分组密码算法如QTL、SFN、Loong、Surge。通过本项目的研究，为面向物联网的资源约束设备提供高安全高效的加密保障。