袭击加解密的硬体.pptxVIP

Chapter 3 – Block Ciphers and the Data Encryption StandardJen-Chang Liu, 2004Adopted from lecture slides by Lawrie Brown炎钡尽裁陪葵铂绍益吏情难痔匈镣宙谋岂抗揖侠川侮黍塘耙赂哀惭辊匪驭攻击加解密的硬体Lecture OverheadsOutline Simplified DES (S-DES)Block Cipher PrinciplesThe Data Encryption Standard (DES)The Strength of DESBrute-force attacksTiming attacksDifferential CryptanalysisBlock Cipher Design PrinciplesBlock Cipher: Mode of Operation仙叮手澄赫散酥山尧涎膨墟火苟存芜格吟胚牺商杭悄撬拢胞塔诀热晚今居攻击加解密的硬体Lecture OverheadsStrength of DES ?Key size56-bit keys have 256 = 7.2 x 1016 valuesbrute force search looks hardSearch at average 255 keysDesign of S-boxIs there weakness in the S-boxes?So far, no fatal weakness in the S-boxes is found旋酗蹄未龟缨扔饿洪烯天值螟棘怔赎冲泌氰玩喉迢唇绩侯浦郴小柏疥寇患攻击加解密的硬体Lecture OverheadsWeakness of DES – Key SizeBrute force1 DES encrypt./ms = 1142 year1 million parallel machine = 10 hours1977, Diffie and Hellman, $20 million dollarsRecent advances1997 on Internet in a few months 1998 on EFF’s DES Cracker in a less than 3 days Special purpose machine, $250,0001999 above combined in 22hrs!诅掩齿眩庶爪削登膊贷殷呜娄伪渤皱袖坷与墨辅亲杏檬苯半痕搏备钉舆滞攻击加解密的硬体Lecture OverheadsTiming Attacks to DESFact: encrypt/decrypt takes slightly different amount of times depending on different inputsattacks actual implementation of cipher 攻擊加解密的硬體Method: observe how long it takes to perform decryption on various ciphertextEx. smartcards 昂龚澎幕省完疾西凭剁栋鲁珊驾晌乖椽圃既佣乡倒蛹酗枚弥牡获希粱抿杀攻击加解密的硬体Lecture OverheadsAnalytic AttacksAnalytic attacks on DESThese utilise some deep structure of the cipher by gathering information about encryptions can eventually recover some/all of the sub-key bits if necessary then exhaustively search for the rest Generally these are statistical attacks, includedifferential cryptanalysisPublished in 1990, known to DES group early in 1974It is complex…linear cryptanalysis related key attacks 未顺啥犬励稚钡悸峦肚稗濒秀魏鬃枉代绵融腹壤地候凶抬孝潭帆冯盔铝淀攻击加解密的硬体Lecture OverheadsDataflow of DESPlaintext mData flow m’Data flow mLeft m0Right m1m0 ’ ,m1 ’m0 ,m1Round 1m1m2=m0? f(m1,K1)m2 ’m2Round 2m3=m1?