Improving timing attack on RSA-CRT via error detection and correction strategy
Improving timing attack on RSA-CRT via error detection and correction strategy
复制标题
通过错误检测和纠正策略改进 RSA-CRT 的定时攻击
DOI:
10.1016/j.ins.2012.01.027
复制
发表时间:
2013-05-20
影响因子:
8.1
通讯作者:
Tian, Junjian
中科院分区:
文献类型:
--
作者:
Chen, CaiSen;Wang, Tao;Tian, Junjian
In timing attack, a class of side channel attack, the attacker attempts to break a cryptographic algorithm by timing the operations of a specific system. Several studies on different types of timing attacks have been published, but they are either theoretical or hard to put into practice. To improve the feasibility of timing attack, the current study proposes an improved timing attack scheme on RSA-CRT using t-test. Some similar types of timing attacks, such as BB-attack and Schindler's attack, have been previously reported. However, none of these studies has applied these statistical methods with such efficiency, or has actually obtained complete recovery by attacking on RSA-CRT. The algorithm proposed in the present study provides an error detection mechanism and correction strategy that can detect and correct the erroneous decision of guessing q(k). With an improvement timing attack on the RSA algorithm in OpenSSL, the 0-1 gap is enlarged, the neighborhood size is reduced, and the precision of the decision is improved. Moreover, obtaining the factor q is practical, and even recovers a 1024-bit RSA key completely for an interprocess timing attack. Crown Copyright (C) 2012 Published by Elsevier Inc. All rights reserved.