Reliable Inversion in GF(28) With Redundant Arithmetic for Secure Error Detection of Cryptographic Architectures
Reliable Inversion in GF(28) With Redundant Arithmetic for Secure Error Detection of Cryptographic Architectures
复制标题
GF(28) 中的可靠反演与冗余算法用于密码体系结构的安全错误检测
DOI：
--
复制
发表时间：
2018
影响因子：
2.9
通讯作者：
Kim
中科院分区：
文献类型：
--
作者：
Mehran Mozaffari Kermani;A. Jalali;R. Azarderakhsh;Jiafeng Xie;Kim
在安全密码原语中，例如块密码，需要仔细考虑硬件实现的可靠性，因为硬件实现中的故障可能会降低或影响底层安全性。在本文中，我们提出的方法来检测错误的硬件实现的逆GF（28）。所提出的方法是基于非冗余和冗余算法，利用正常的基础（非冗余）和两个冗余伽罗瓦域表示，即，多项式环表示和塔域冗余表示基。据我们所知，这是第一个专注于GF（28）中基于冗余算术的逆的错误检测架构的工作。本文提出的基于签名的方案具有通用性，可应用于8位S盒分组密码，如Camellia、高级加密标准SMS 4和CLEFIA。我们提出的误差模拟和应用特定的集成电路实现的结果来证明所提出的方案的实用性。基于特定实现的安全性/可靠性目标和实现/性能度量的开销/降级容限，可以微调和定制所提出的工作，以实现GF（28）中更可靠的反演。
In secure cryptographic primitives, such as block ciphers, the reliability of hardware implementations needs to be closely considered because faults in the hardware implementations can potentially reduce or impact on the underlying security. In this paper, we present approaches to detect errors in hardware implementations of the inversion in GF(28). The proposed approaches are based on both nonredundant and redundant arithmetic, utilizing normal basis (nonredundant) and two redundant Galois field representations, i.e., polynomial ring representation and redundantly represented basis through tower fields. To the best of our knowledge, this is the first work focusing on the error detection architectures for redundant arithmetic-based inversion in GF(28). The presented signature-based schemes in this paper are general and can be applied to block ciphers with 8-bit S-boxes, such as Camellia, SMS4, the advanced encryption standard, and CLEFIA. We present the results of error simulations and application-specific integrated circuit implementations to demonstrate the utility of the presented schemes. Based on the specific implementation’s security/reliability objectives and the overhead/degradation tolerance for implementation/performance metrics, one can fine-tune and tailor the proposed work to achieve more reliable inversions in GF(28).