A hybrid fault model for differential fault attack on AES
A hybrid fault model for differential fault attack on AES
复制标题
DOI：
10.1109/asicon.2017.8252593
复制
发表时间：
2017-10
期刊：
影响因子：
--
通讯作者：
Yixia Liu;Xiaoxin Cui;Jian Cao;Xing Zhang
中科院分区：
文献类型：
--
作者：
Yixia Liu;Xiaoxin Cui;Jian Cao;Xing Zhang
提出了一种改进密文可用性的混合模型，用于对加密标准进行差分故障攻击。该模型结合了加密过程的故障模型和密钥调度过程的故障模型。在实际攻击场景中，我们可以使用正确密文和错误密文对同时匹配单字节故障模型、多字节故障模型和双线故障模型等多种模型。理论上，基于该混合模型的故障攻击可以将攻击效率提高近50%。实验结果表明，使用2对正确和错误的对角密文和4对正确和错误的两行密文可以恢复整个AES-128密钥，计算复杂度仅为216×3+28×12，低于任何一种类型的故障模型。
In this paper, a hybrid model is proposed to improve availability of ciphertext for differential fault attack (DFA) against AES. This model combines the fault models of the encryption process with the key schedule process. In the actual attack scenarios, we can use the pairs of correct and fault ciphertexts to match a variety of models, such as single-byte fault model, multi-byte fault model and two-line fault model at the same time. Theoretically, the fault attack based on this hybrid model can improve the attack efficiency by almost 50%. The experiment results show that using 2 pairs of correct and faulty diagonal ciphertext and 4 pairs of correct and faulty two-line ciphertexts can recover the entire AES-128 key, and the computational complexity is only 216 × 3+28 × 12, which is lower than any one type of the fault model.