Stepwise correlation power analysis of SM4 cryptographic algorithm

doi:10.11772/j.issn.1001-9081.2019122209

Journal of Computer Applications ›› 2020, Vol. 40 ›› Issue (7): 1977-1982.DOI: 10.11772/j.issn.1001-9081.2019122209

• Cyber security • Previous Articles Next Articles

Stepwise correlation power analysis of SM4 cryptographic algorithm

CONG Jing^1,2, WEI Yongzhuang^1,2, LIU Zhenghong^1,2

1. Guangxi Key Laboratory of Cryptography and Information Security(Guilin University of Electronic Technology), Guilin Guangxi 541004, China;
2. Guangxi Key Laboratory of Wireless Wideband Communication and Signal Processing(Guilin University of Electronic Technology), Guilin Guangxi 541004, China

Received:2020-01-02 Revised:2020-03-02 Online:2020-07-10 Published:2020-05-13
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61872103), the Key Research and Development Program of Guangxi (GUIKEAB18281019), the Graduate Research Innovation Project of Guilin University of Electronic Technology (2018YJCX45).

SM4密码算法的阶梯式相关能量分析

丛旌^1,2, 韦永壮^1,2, 刘争红^1,2

1. 广西密码学与信息安全重点实验室(桂林电子科技大学), 广西桂林 541004;
2. 广西无线宽带通信与信号处理重点实验室(桂林电子科技大学), 广西桂林 541004

通讯作者: 韦永壮
作者简介:丛旌(1993-),男,江苏南通人,硕士研究生,主要研究方向:分组密码算法、侧信道分析;韦永壮(1976-),男,广西田阳人,教授,博士,主要研究方向:对称密码算法设计与分析;刘争红(1979-),男,湖北红安人,讲师,硕士,主要研究方向:无线宽带通信、FPGA、GPU并行运算。
基金资助:
国家自然科学基金资助项目（61872103）；广西重点研发计划项目（桂科AB18281019）；桂林电子科技大学研究生科研创新项目（2018YJCX45）。

Abstract

Abstract: Focused on the low analysis efficiency of Correlation Power Analysis (CPA) interfered by noise, a stepwise CPA scheme was proposed. Firstly, the utilization of information in CPA was improved by constructing a new stepwise scheme. Secondly, the problem that the accuracies of previous analyses were not guaranteed was solved by introducing the confidence index to improve the accuracy of each analysis. Finally, a stepwise CPA scheme was proposed based on the structure of SM4 cryptographic algorithm. The results of simulation experiments show that, on the premise of the success rate up to 90%, stepwise CPA reduces the demand of power traces by 25% compared to classic CPA. Field Programmable Gate Array (FPGA) based experiments indicate that the ability of stepwise CPA to recover the whole round key is very close to the limit of expanding the search space to the maximum. Stepwise CPA can reduce the interference of noise and improve the efficiency of analysis with a small amount of calculation.

Key words: Side Channel Analysis (SCA), Correlation Power Analysis (CPA), SM4 block cryptographic algorithm, parallel implementation, stepwise scheme

摘要： 针对相关能量分析（CPA）易受噪声干扰、分析效率低的问题，提出了一种阶梯式CPA方案。首先，通过构造一种新的阶梯式方案提高CPA中信息的利用率；其次，通过引入confidence指标提升每一次分析的正确率，解决前几次分析正确率得不到保证的问题；最后，基于SM4密码算法结构给出了一个阶梯式CPA方案。模拟实验结果表明，在达到90%分析成功率的前提下，阶梯式CPA比传统CPA减少了25%能量迹条数的需求。现场可编程门阵列（FPGA）上的实验表明，阶梯式CPA恢复完整轮密钥的能力已经非常接近将搜索空间扩展到最大时的极限。阶梯式CPA能以足够小的计算量减少噪声的干扰、提高分析的效率。

CLC Number:

CONG Jing, WEI Yongzhuang, LIU Zhenghong. Stepwise correlation power analysis of SM4 cryptographic algorithm[J]. Journal of Computer Applications, 2020, 40(7): 1977-1982.

丛旌, 韦永壮, 刘争红. SM4密码算法的阶梯式相关能量分析[J]. 计算机应用, 2020, 40(7): 1977-1982.

References

[1] 沈薇. SMS4算法的能量分析攻击及其防御研究[D]. 西安:西安电子科技大学,2009:13-34.(SHEN W. Investigations of power analysis attacks and its countermeasures on SMS4 cipher algroithm[D]. Xi'an:Xidian University,2009:13-34.)
[2] 胡文静, 王安, 乌力吉, 等. 基于SAKURA-G实验板的SM4硬件电路能量攻击研究[J]. 微电子学与计算机,2015,32(4):15-20.(HU W J,WANG A,WU L J,et al. Power attack of SM4 hardware implementation based on SAKURA-G board[J]. Microelectronics and Computer,2015,32(4):15-20.)
[3] 王欢. 面向SM4密码算法智能卡实现的能量分析攻击与评估方法研究[D]. 北京:中国科学院大学,2016:21-40.(WANG H. Study of the side-channel analysis against the smartcard implementation of SM4 algorithm and its security evaluation techniques[D]. Beijing:University of Chinese Academy of Sciences,2016:21-40.)
[4] KOCHER P. Timing attacks on implementations of Diffie-Hellman, RSA,DSS,and other systems[C]//Proceedings of the 16th Annual International Cryptology Conference,LNCS 1109. Berlin:Springer,1996:104-113.
[5] KOCHER P,JAFFE J,JUN B. Differential power analysis[C]//Proceedings of the 19th Annual International Cryptology Conference,LNCS 1666. Berlin:Springer,1999:388-397.
[6] GANDOLFI K,MOURTEL C,OLIVIER F. Electromagnetic analysis:concrete results[C]//Proceedings of the 3rd International Workshop on cryptographic Hardware and Embedded Systems,LNCS 2162. Berlin:Springer,2001:251-261.
[7] QUISQUATER J J, SAMYDE D. ElectroMagnetic Analysis (EMA):measures and counter-measures for smart cards[C]//Proceedings of the 2001 International Conference on Research in Smart Cards,LNCS 2140. Berlin:Springer,2001:200-210.
[8] KOCHER P,JAFFE J,JUN B,et al. Introduction to differential power analysis[J]. Journal of Cryptographic Engineering,2011,1(1):5-27.
[9] MESSERGES T S,DABBISH E A,SLOAN R H. Investigations of power analysis attacks on smartcards[C]//Proceedings of the 1999 USENIX Workshop on Smartcard Technology. Berkeley:USENIX Association,1999:151-161.
[10] MAYER-SOMMER R. Smartly analyzing the simplicity and the power of simple power analysis on smartcards[C]//Proceedings of the 2nd International Workshop on Cryptographic Hardware and Embedded Systems,LNCS 1965. Berlin:Springer,2000:78-92.
[11] BEVAN R,KNUDSEN E. Ways to enhance differential power analysis[C]//Proceedings of the 5th International Conference on Information Security and Cryptology,LNCS 2587. Berlin:Springer,2002:327-342.
[12] MESSERGES T S,DABBISH E A,SLOAN R H. Examining smart-card security under the threat of power analysis attacks[J]. IEEE Transactions on Computers,2002,51(5):541-552.
[13] BRIER E,CLAVIER C,OLIVIER F. Correlation power analysis with a leakage model[C]//Proceedings of the 6th International Workshop on Cryptographic Hardware and Embedded Systems, LNCS 3156. Berlin:Springer,2004:16-29.
[14] PICEK S,HEUSER A,JOVIC A,et al. Side-channel analysis and machine learning:a practical perspective[C]//Proceedings of the 2017 International Joint Conference on Neural Networks. Piscataway:IEEE,2017:4095-4102.
[15] SHAN W,ZHANG S,HE Y. Machine learning based side-channel-attack countermeasure with hamming-distance redistribution and its application on advanced encryption standard[J]. Electronics Letters,2017,53(14):926-928.
[16] ZHANG Z,WU L,WANG A,et al. A novel bit scalable leakage model based on genetic algorithm[J]. Security and Communication Networks,2015,8(18):3896-3905.
[17] DING Y,WANG A,YIU S M. An intelligent multiple sieve method based on genetic algorithm and correlation power analysis[EB/OL].[2019-04-23]. https://eprint.iacr.org/2019/189.pdf.
[18] MORRIS R,SLOANE N J A,WYNER A D. Assessment of the national bureau of standards proposed federal data encryption standard[J]. Cryptologia,1977,1(3):281-291.
[19] DAEMEN J,RIJMEN V. The advanced encryption standard process[M]//The Design of Rijndael:AES-the Advanced Encryption Standard. Berlin:Springer,2002:1-8.
[20] MANGARD S,OSWALD E,POPP T. Differential power analysis[M]//Power Analysis Attacks:Revealing the Secrets of Smart Cards. Boston:Springer,2007:119-165.
[21] ROBYNS P,QUAX P,LAMOTTE W. Improving CEMA using correlation optimization[J]. IACR Transactions on on Cryptographic Hardware and Embedded Systems,2019(1):1-24.

Stepwise correlation power analysis of SM4 cryptographic algorithm

SM4密码算法的阶梯式相关能量分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 9

Recommended Articles

Metrics

[1]	ZHANG Yiyi, MENG Fanrong, ZHANG Fengrong, SHI Jihong. Construction of balanced Boolean functions using plateaued functions [J]. Journal of Computer Applications, 2016, 36(6): 1563-1566.
[2]	LI Shenghua, ZHAO Hannuo, LUO Lianfei. Construction of binary three-order cyclotomic sequences with 3-valued autocorrelation and large linear complexity [J]. Journal of Computer Applications, 2015, 35(9): 2542-2545.
[3]	ZHAO Qinglan ZHEN Dong DONG Xiaoli. Arithmetic correlations of symmetric Boolean function [J]. Journal of Computer Applications, 2014, 34(2): 442-443.
[4]	WAN Zhiping. UAPL: Wireless sensor network user authentication based on improved Das protocol [J]. Journal of Computer Applications, 2014, 34(2): 452-455.
[5]	CHEN Haoyuan KE Pinhui ZHANG Shengyuan. Construction of optimal frequency hopping sequence sets with no-hit zone based on matrix permutation [J]. Journal of Computer Applications, 2013, 33(11): 3028-3031.
[6]	ZHANG Xuefeng WEI Lixian WANG Xu'an. Certificateless aggregate signcryption scheme with public verifiability [J]. Journal of Computer Applications, 2013, 33(07): 1858-1860.
[7]	SU Chong-mao. New impossible deferential attack on 7-round reduced ARIA [J]. Journal of Computer Applications, 2012, 32(01): 45-48.
[8]	CUI Ling-guo,CAO Yuan-da. Construction and validation of optimal diffusion layers in SPN block cciphers [J]. Journal of Computer Applications, 2005, 25(04): 856-858.
[9]	LONG Shi-gong, LUO Wen-jun, LI Xiang. Symbolic model checking analysis for cryptographic protocol [J]. Journal of Computer Applications, 2005, 25(01): 138-140.