Key Advantage Template Attack Against AES-128 Algorithm

FAN Hao-peng; YUAN Qing-jun; WANG Xiang-yu; WANG Yong-juan; WANG Tao

doi:10.3969/j.issn.0372-2112.2020.10.018

您当前的位置：

首页 >

文章列表页 >

Key Advantage Template Attack Against AES-128 Algorithm

更新时间：2023-02-24

- Key Advantage Template Attack Against AES-128 Algorithm
- Acta Electronica Sinica Vol. 48, Issue 10, Pages: 2003-2008(2020)
- 作者机构：
  
  1. 战略支援部队信息工程大学,河南,郑州,450001
  3. 河南省网络密码技术重点实验室,河南,郑州,450001
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.0372-2112.2020.10.018
  CLC： TN918.1
- Published Online：25 October 2020，
  
  Published：2020
- 稿件说明：
移动端阅览
FAN Hao-peng, YUAN Qing-jun, WANG Xiang-yu, et al. Key Advantage Template Attack Against AES-128 Algorithm[J]. Acta Electronica Sinica, 2020, 48(10): 2003-2008.
DOI：

FAN Hao-peng, YUAN Qing-jun, WANG Xiang-yu, et al. Key Advantage Template Attack Against AES-128 Algorithm[J]. Acta Electronica Sinica, 2020, 48(10): 2003-2008. DOI： 10.3969/j.issn.0372-2112.2020.10.018.

摘要

模板攻击分为模板刻画和密钥恢复两个阶段.针对AES-128算法，模板攻击为每一字节密钥构建256个模板，当攻击者仅获得1000条左右的能量迹时将面临两个问题：一是模板刻画不具有适用性，二是无法恢复正确的密钥.针对这些问题，本文在模板刻画阶段为S盒输出值的汉明重量构建9个模板，利用Panda 2018数据集提供的600条能量迹进行建模；在密钥恢复阶段提出密钥优势叠加的方法，仅需约10条相同密钥加密所产生的能量迹即可有效区分正确密钥，降低了攻击的难度并提高了攻击的成功率.

Abstract

Template attack is divided into two stages:template description and key recovery.For AES-128 algorithm

when the attacker only got 1000 energy traces

he would face two problems:one was that the template description would not be applicable

the other was that the correct key would not be recovered.To solve these problems

this paper constructed 9 templates for Hamming weight of S-box output value in the template description stage

and used 600 energy traces provided by panda 2018 data set to build the model;in the key recovery stage

this paper proposed the method of key advantage superposition

which only needed about 10 energy traces encrypted to distinguish the correct key.This method reduces the number of energy traces required in the template description stage and key recovery stage

lowered the difficulty of template attack

and improved the success rate of template attack.

关键词

Keywords

references

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

An Attack Method Against the Modular Reduction Within a RSA-CRT Implementation Based on Template Attack

Linear Discriminant Analysis-Based Template Attack for Masked Im‍ple‍mentation of Modular Exponentiation

Related Author

LIU Yu-ling

HUANG Ke-zhen

ZHANG Xiang-min

WANG Hong

WU Li-ji

MA Xiang-liang

HAN Xu-cang

CHEN Bo-tao

Related Institution

School of Cyber Security， University of Chinese Academy of Sciences

Institute of Information Engineering， Chinese Academy of Sciences

Trusted Computing and Information Assurance Laboratory， Institute of Software， Chinese Academy of Sciences

National Research Center for Information Technology Security

School of Integrated Circuits， Beijing University of Posts and Telecommunications

⁰