1. 中国科学院软件研究所信息安全国家重点实验室,北京,100190
2. 中国科学技术大学电子工程与信息科学系,安徽,合肥,230027
3. 中国科学院软件研究所信息安全国家重点实验室北京,100190
4. 中国科学技术大学电子工程与信息科学系安徽合肥,230027
纸质出版:2009
移动端阅览
赵险峰, 李 宁, 邓 艺. 一种保护芯片设计的多变量加密及其电路结构[J]. 电子学报, 2009,37(6):1300-1306.
ZHAO Xian-feng, LI Ning, DENG Yi. A Multivariate Encryption for Chip Design Protection and Its Circuit Architecture[J]. Acta Electronica Sinica, 2009, 37(6): 1300-1306.
当前普遍用分组加密保护可编程芯片的设计数据
它们在使用前被内置密钥的电路解密
典型地
解密电路尺寸为3至6.5万门电路
处理速度为3至3.7吉比特每秒(Gbps).本文提出一种两轮多变量密码
它的解密算法并不复合构成算法的多项式映射
而仅连接它们
可仅用数千至1万余个门电路实现
解密速度可达到7.76至13.6Gbps;由于解密多项式被封装和伪装
对多变量密码的大多攻击失效
并且该密码系统也能够抵御不需要解密多项式的攻击
包括插值、线性攻击和侧信道攻击等.
Currently the design data in a programmable chip is widely protected by block cipher
and the ciphertext is deciphered by a keyed circuit before the use of the data.Typically
the size of such a circuit is from 30 to 65 thousand gates
and the processing rate of it is from 3.0 to 3.7 Gigabits per second(Gbps).This paper proposes a 2-round multivariate cryptosystem.The algorithm of its decryption does not compose the constituent polynomial maps but only concatenates them.And with the processing rate from 7.76 to 13.6 Gbps
the decryption can be implemented by only about several or ten thousand gates.Because the decryption polynomials are encapsulated and disguised
most attacks against multivariate cryptosystems become inapplicable.And the new cryptosystem also resists the attacks that do not need to know the decryption polynomials
including the interpolation
linearization attack
side-channel attack
etc.
0
浏览量
945
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621