电子学报 ›› 2014, Vol. 42 ›› Issue (8): 1465-1473.DOI: 10.3969/j.issn.0372-2112.2014.08.002

• 学术论文 • 上一篇    下一篇

一种适用于RFID标签的安全化密码算法实现

王晨旭1, 韩良1, 喻明艳2, 王进祥2   

  1. 1. 哈尔滨工业大学(威海)信电学院, 山东威海 264209;
    2. 哈尔滨工业大学航天学院, 黑龙江哈尔滨 150001
  • 收稿日期:2013-09-30 修回日期:2014-06-17 出版日期:2014-08-25 发布日期:2014-08-25
  • 通讯作者: 韩良
  • 作者简介:王晨旭男,1977年10月出生,河南淮阳人.毕业于哈尔滨工业大学,工学博士,现为哈尔滨工业大学(威海)信息与电气工程学院讲师.研究方向为芯片安全与嵌入式系统.E-mail:wangchenxu@hit.edu.cn
  • 基金资助:

    国家自然科学基金(No.61202481)

A Secure Cipher Implementation Suitable for RFID-Tags

WANG Chen-xu1, HAN Liang1, YU Ming-yan2, WANG Jin-xiang2   

  1. 1. School of Information & Electrical Engineering, Harbin Institute of Technology at Weihai, Weihai, Shandong 264209;
    2. School of Astronautics, Harbin Institute of Technology, Harbin, Heilongjiang 150001
  • Received:2013-09-30 Revised:2014-06-17 Online:2014-08-25 Published:2014-08-25

摘要:

鉴于射频识别(RFID)标签芯片苛刻的资源要求,为解决差分功耗分析(Differential Power Analysis,DPA)对密码算法实现方面的威胁难题,将新型DPA防护技术threshold与Piccolo密码算法相结合,提出了一种适用于RFID标签芯片应用的安全化密码算法实现方案.分别基于布尔式重组和改进型穷举搜索的方式实现了面积最优的S盒及其逆的threshold(3,3)分享,提出了基于锁存器方式解决S盒及其逆实现中潜在的毛刺威胁问题,在Chartered 0.18μm工艺和100 kHz RFID运行频率下,将该方案的资源消耗控制在2155个等效门,平均电流约为2.60μA,基于FPGA的DPA攻击安全性分析结果表明该方案适合于低成本RFID标签芯片对密码算法轻型及实现安全的要求.

关键词: RFID标签芯片, 安全, Piccolo, 差分功耗分析, threshold

Abstract:

Hash resource required for RFID-tags chips,a secure and lightweight cipher implementation is proposed to solve the threat posed by differential power analysis(DPA).The proposed implementation is based on Piccolo cipher,in combination with the recently proposed masking method named threshold.Boolean equation rearrangement and improved exhaustive search method was respectively applied to S-Box and inverted S-Box to get their optimal area costs for threshold(3,3)share.A method based on latch is proposed to resist the latent glitch threat.Based on Chartered 0.18μm and 100 kHz operating frequency for RFID applications,the proposed cipher implementation costs as low as 2155 gate equivalents and consumes 2.60μA average current.The security of the implementation is evaluated based on real power traces from an FPGA platform.DPA attack results show the proposed implementation with threshold countermeasure is suitable for secure low-cost passive RFID-tag ICs.

Key words: RFID-tags IC, security, Piccolo, differential power analysis(DPA), threshold

中图分类号: