Side-Channel Attacks on RSA with CRTRSA与CRT的侧信道攻击.pptVIP

Side-Channel Attacks on RSA with CRT Weakness of RSA Alexander Kozak Jared Vanderbeck What is RSA? As we all know, RSA (Rivest Shamir Adleman) is a really secure algorithm for public-key cryptography. RSA is known to be suitable for signing as well as encryption. RSA is believed to be secure given sufficiently long keys and the use of up-to-date implementations. What is CRT? The Chinese Remainder Theorem is a result about congruences in number theory and its generalizations in abstract algebra. The CRT can be used to speed up calculations of many math-based cryptosystems, including RSA. Montgomery Reduction Provides an efficient way of multiplying two numbers modulo a number Makes modulo reduction unnecessary during multiplications What are Side-Channel Attacks? “Side Channel Attacks” are attacks that are based on Side “Channel Information.” Side channel information is information that can be retrieved from the encryption device. This information is neither the plaintext or the ciphertext. What are Side-Channel Attacks? In the past, an encryption device was perceived as a unit that received plaintext and produces ciphertext and vice versa. Attacks were based on knowing the ciphertext or knowing both or on the ability to define what plaintext is to be encrypted and then seeing the results of the encryption. What are Side-Channel Attacks? Today, it is known encryption devices have additional inputs which are not the plaintext or ciphertext. Encryption devices produce timing information that is easily measurable, radiation of various sorts, power consumption statistics and more. What are Side-Channel Attacks? Often the encryption device also has additional “unintentional” inputs such as voltage. Side channel attacks make use of some or all of this information, along with other cryptanalytic techniques, to recover the key the device is using. What are Side-Channel Attacks? Side channel analysis techniques are a concern because the attacks can be mounted quickly and ch