《计算机应用》唯一官方网站

• •    下一篇

基于均匀流型逼近与投影的高级加密标准算法相关功耗分析方法

张润莲,王蒿,唐瑞锋,武小年   

  1. 桂林电子科技大学
  • 收稿日期:2024-06-25 修回日期:2024-11-06 发布日期:2024-11-25 出版日期:2024-11-25
  • 通讯作者: 唐瑞锋
  • 基金资助:
    国家自然科学基金;广西重点研发计划;广西研究生教育创新计划项目

Correlation power analysis of advanced encryption standard algorithm based on uniform manifold approximation and projection

  • Received:2024-06-25 Revised:2024-11-06 Online:2024-11-25 Published:2024-11-25

摘要: 侧信道攻击中所采集能量迹数据的高噪声和高维度,大大降低了侧信道攻击的效率和密钥恢复的准确率。针对上述问题,提出一种基于均匀流型逼近与投影(Uniform Manifold Approximation and Projection, UMAP)的高级加密标准(Advanced Encryption Standard, AES)算法相关功耗分析方法。该方法基于欧氏距离计算能量迹数据的邻近点集合。首先,通过构建邻接图并计算邻近点之间的相似度得到加权邻接图,从而捕获能量迹数据之间的位置关系以保留数据的局部结构特征。其次,利用拉普拉斯矩阵描述邻接图的结构关系,并通过特征分解取特征值较小的特征向量作为初始化的低维数据。同时,为了保留数据的全局结构特征,使用二进制交叉熵作为优化函数调整数据在低维空间中的位置。此外,为了提升计算效率,在梯度下降过程中使用力导向图布局算法。最后,对降维后的数据进行相关功耗攻击恢复密钥。实验测试结果表明,采用UMAP方法能够有效保留原始能量迹数据的局部和全局结构特征;基于UMAP的相关功耗分析方法能够提高能量迹数据和假设功耗泄露模型之间的相关性,减少恢复密钥所需的能量迹条数,恢复单个密钥字节需要的能量迹数量为180条,恢复全部16个密钥字节需要的能量迹数量为700条。相较于等距特征映射降维方法,本方法恢复所有密钥字节所需的能量迹数量减少了36.4%。

关键词: 侧信道攻击, 均匀流型逼近与投影, 相关功耗分析, 数据降维, 加权邻接图

Abstract: The efficiency of side channel attack and the accuracy of key recovery have been greatly reduced by the high noise and dimension of energy trace collected in side channel attacks. To solve these problems, a correlation power analysis method of Advanced Encryption Standard (AES) algorithm based on Uniform Manifold Approximation and Projection (UMAP) was proposed. The UMAP method was used to calculate the set of neighboring points of traces based on Euclidean distance. First, to capture the position relationships of the energy trace collected and preserve the local structural features of the traces, a weighted adjacency matrix was proposed by constructing an adjacency graph and calculating the similarity between neighboring nodes. Then, the structure relationship of the adjacency graph was described using the Laplacian matrix, and the Initialized low-dimensional data was represented as the eigenvectors corresponding to smaller eigenvalues extracted from the adjacency graph by feature decomposition. Meanwhile, the objective function represented by the binary cross-entropy method was used to adjust the position of the data in the low-dimensional space, to preserve the global structural features of the data. Furthermore, to further improve the computational efficiency, the force-oriented graph layout algorithm is introduced in the gradient descent process. Finally, power consumption attacks were performed on the reduced dimensional data to recover the key. The experimental results show that the UMAP method can effectively preserve the local and global structural features of the original energy trace data. The correlation power analysis based this UMAP method can improve the correlation between energy trace data and assumed power leakage models, and reduce the number of energy traces required for key recovery. The number of energy traces required to recover a single key byte is 180, and the number of energy traces required to recover all 16 key bytes is 700. Compared to the Isometric feature mapping (Isomap) dimensionality reduction method, the number of traces required to recover all key bytes with the UMAP method is reduced by 36.4%.

Key words: Keywords: side channel attack, uniform manifold approximation and projection, correlation power analysis, data dimensionality reduction, weighted adjacency graph

中图分类号: