PSS Is Secure against Random Fault Attacks
PSS Is Secure against Random Fault Attacks
复制标题
PSS 能够抵御随机故障攻击
DOI：
--
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
Avradip Mandal
中科院分区：
文献类型：
--
作者：
J. Coron;Avradip Mandal
故障攻击在于诱导硬件故障，以便从电子设备恢复机密。其中最著名的错误攻击之一是Bellcore利用CRT对RSA的攻击；它在于在签名生成步骤引入模p而不是模q的错误，然后攻击者通过GCD可以恢复N=pq的因式分解。Bellcore攻击适用于任何确定性编码函数，例如FDH。最近，该攻击扩展到基于ISO/IEC 9796-2签名标准的随机编码。将攻击扩展到其他随机编码仍然是一个悬而未决的问题。
A fault attack consists in inducing hardware malfunctions in order to recover secrets from electronic devices. One of the most famous fault attack is Bellcore’s attack against RSA with CRT; it consists in inducing a fault modulo p but not modulo q at signature generation step; then by taking a gcd the attacker can recover the factorization of N = pq. The Bellcore attack applies to any encoding function that is deterministic, for example FDH. Recently, the attack was extended to randomized encodings based on the iso/iec 9796-2 signature standard. Extending the attack to other randomized encodings remains an open problem.