現代密碼學演算法的錯誤注入攻擊研究

A Study of Fault Injection Attacks on Modern Cryptographic Algorithms

李洋漢(Yang-Han Li)

指導教授 ： 吳家麟

國立臺灣大學/電機資訊學院/資訊工程學研究所/碩士(2021年)

https://doi.org/10.6342/NTU202100776

摘要

錯誤注入攻擊是密碼學領域中的一種旁通道攻擊。其概念是透過分析正確及錯誤的密文來推導出密鑰，相比傳統密碼理論分析更有效率且強大。本篇文章詳細介紹三種常見的演算法，進階加密標準 (AES)、RSA 及橢圓曲線密碼學 (ECC)，並且針對其實作上如何加速以及可能遭受到的錯誤注入攻擊進行深入探討與分析。

關鍵字

旁通道攻擊 ； 錯誤注入攻擊 ； 差別錯誤分析 ； 進階加密標準 ； RSA 加密演算法 ； 橢圓曲線密碼學

並列摘要

A fault injection attack is a sort of side-channel attack in the domain of cryptography. The concept is to derive the secret key by analyzing the correct and incorrect ciphertext and is more efficient and powerful than traditional cryptanalysis. This article introduces three common algorithms, Advanced Encryption Standard (AES), RSA, and Elliptic Curve Cryptography (ECC). Then provides an in-depth discussion and analysis of how they can be accelerated in practice and how they may be subjected to fault injection attacks.

並列關鍵字

Side­-channel attack ； Fault injection attack ； Differential fault analysis ； AES ； RSA ； Elliptic Curve Cryptography ； ECC

參考文獻

[1] R. Anderson and M. Kuhn. Low cost attacks on tamper resistant devices. In International Workshop on Security Protocols, pages 125–136. Springer, 1997.

[2] A. Antipa, D. Brown, A. Menezes, R. Struik, and S. Vanstone. Validation of elliptic curve public keys. In International Workshop on Public Key Cryptography, pages 211–223. Springer, 2003.

[3] E. Barker, W. Barker, W. Burr, W. Polk, M. Smid, et al. Recommendation for key management: Part 1: General. National Institute of Standards and Technology, Technology Administration, 2006.

[4] I. Biehl, B. Meyer, and V. Müller. Differential fault attacks on elliptic curve cryptosystems. In Annual International Cryptology Conference, pages 131–146.

[5] E. Biham and A. Shamir. Differential fault analysis of secret key cryptosystems. In Annual international cryptology conference, pages 513–525. Springer, 1997.