电子学报 ›› 2017, Vol. 45 ›› Issue (9): 2250-2255.DOI: 10.3969/j.issn.0372-2112.2017.09.028

• 学术论文 • 上一篇    下一篇

一种基于奇异值分解的功耗轨迹筛选方法

周新平1,2, 孙德刚1,2, 王竹1,2, 欧长海1,2   

  1. 1. 中国科学院信息工程研究所, 北京 100093;
    2. 中国科学院大学网络空间安全学院, 北京 100049
  • 收稿日期:2016-06-12 修回日期:2016-11-15 出版日期:2017-09-25 发布日期:2017-09-25
  • 通讯作者: 王竹
  • 作者简介:周新平,男,1990年出生于江西樟树,现为中国科学院信息工程研究所博士研究生.主要研究领域为密码学,侧信道分析.E-mail:zhouxinping@iie.ac.cn;孙德刚,男,1970年出生于吉林磐石,现为中国科学院信息工程研究所研究员,博士生导师,主要研究领域为信号处理理论与技术、电磁检测与防护;欧长海,男,1989年出生于贵州铜仁,现为中国科学院信息工程研究所博士研究生.主要研究领域为密码学与侧信道分析.
  • 基金资助:
    国家自然科学基金项目(No.61372062)

A Method Based on Singular Value Decomposition for Enhancement of Differential Power Analysis

ZHOU Xin-ping1,2, SUN De-gang1,2, WANG Zhu1,2, OU Chang-hai1,2   

  1. 1. Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China;
    2. School of Cyber Security University of Chinese Academy of Sciences, Beijing 100049, China
  • Received:2016-06-12 Revised:2016-11-15 Online:2017-09-25 Published:2017-09-25

摘要: 功耗分析攻击是侧信道分析中针对密码设备最有效的分析手段之一,它利用密码设备消耗的功耗来分析密码设备的敏感信息.差分功耗分析是最早提出的功耗分析方法,也是目前最基本的分析方法之一.但是在实际使用差分功耗分析过程中,由于功耗轨迹存在噪声等因素,往往使得花了较多的功耗轨迹,差分功耗分析的效果一般,难以恢复出正确密钥.针对这个问题,本文提出了一种基于奇异值分解的选择功耗轨迹方法,这种方法可以选择一些质量好的功耗轨迹用于差分功耗分析,提高差分功耗分析的攻击效率.本文的实验验证了该方法的有效性,在同等分析条件下,对于我们自己采集的功耗数据,使用该方法情况下仅需124条功耗轨迹就可以达到80%的成功率,而普通差分功耗分析需要490条;对于DPA Contest 2008/2009提供的数据,使用该方法仅需53条功耗轨迹可以达到80%的成功率,而普通差分功耗分析需要195条.两个不同的实验对象都说明了该方法的有效性.

关键词: 差分功耗分析, 选择功耗轨迹, 奇异值分解

Abstract: Power analysis is one of the most effective techniques in side channel analysis.This technique utilizes the power consumption that are relative to the intermediate state of cryptographic algorithm to recover the secret information in the cryptographic devices.Differential power analysis is the first method of power analysis and it is one of the most fundamental analysis techniques.However,in practical scenario,the efficiency of differential power analysis is largely affected by the noise of power traces.Consequently,this leads to the low efficiency of differential power analysis and it is hard to recover the secret key.To address this issue,a new method that is based on singular value decomposition to select power traces is proposed.The power traces of high quality can be selected when this method is applied to improve the efficiency of differential power analysis.The experiments verify the validity of the method.Further,the experimental results show that our method is much better compared with the existing method.Using the method of this paper only 124 power traces is needed to achieve the success rate of 80%,while the normal differential power analysis needs 490 power traces.In addition,when analyzing the data of DPA Contest V1,using the method of this paper only 53 power traces is needed to achieve the success rate of 80%,while the normal differential power analysis needs 195 power traces.Two experiments on different subjects verify the effectiveness of our method.

Key words: differential power analysis, selecting power traces, singular value decomposition

中图分类号: