基于montgomery算法安全漏洞的spa攻击算法_甘刚.pdfVIP

第 34 卷第 Z1 期 通 信 学 报 Vol.34 No. Z1 2013 年 8 月 Journal on Communications August 2013 doi:10.3969/j.issn.1000-436x.2013.z1.020 Montgomery SPA 甘刚，王敏，杜之波，吴震 （成都信息工程学院网络工程学院，四川 成都 610225 ） ：公钥密码体制的算法大多基于有限域的幂指数运算或者离散对数运算。而这些运算一般会采用 Montgomery 算法来降低运算的复杂度。针对 Montgomery 算法本身存在可被侧信道攻击利用的信息泄露问题，从理论和实际 功耗数据 2 方面分析了 Montgomery 算法存在的安全漏洞，并基于该漏洞提出了对使用 Montgomery 算法实现的 模幂运算进行简单能量分析（SPA, simple power analysis）攻击算法。利用该算法对实际模幂运算的能量曲线进行 了功耗分析攻击。实验表明该攻击算法是行之有效的。 ：模幂运算；侧信道攻击；简单能量分析攻击；Montgomery 算法 ：TP309.1,TN492 ：A ：1000-436X(2013)Z1-0156-06 Simple power analysis attack against cryptosystems based on Montgomery algorithm GAN Gang, WANG Min, DU Zhi-bo, WU Zhen (Network Engineering Department, Chengdu University of Information Technology, Chengdu 610225, China) Abstract: The Montgomery algorithm is widely used to reduce the computational complexity of large integer modular exponentiation. The SPA (simple power analysis) attacks against public-key cryptosystems based on Montgomery algo- rithm implementation were presented by exploitation of the inherent security vulnerability which that sensitive infor- mation leakage could be used by side-channel attack. The chosen-message SPA attacks were focused on, which enhance the differences of operating wave-forms between multiplication and squaring correlated to the secret key by using the in- put of particular messages. In particular, a SPA attack against RSA cryptosystem was showed based on large integer mod- ular exponentiation. The results show that the attack algorithm is correct and effective. Key