Towards practical white-box lightweight block cipher implementations for IoTs
Towards practical white-box lightweight block cipher implementations for IoTs
复制标题
DOI：
10.1016/j.future.2018.04.011
复制
发表时间：
2018-09
期刊：
影响因子：
--
通讯作者：
Lu Zhou;Chunhua Su;Yamin Wen;Weijie Li;Zheng Gong
中科院分区：
文献类型：
--
作者：
Lu Zhou;Chunhua Su;Yamin Wen;Weijie Li;Zheng Gong
根据 Kerckhoffs 原则，系统的安全性应该仅取决于其密钥的安全性。为了构建可信计算基础，安全元件（SE）和可信执行环境（TEE）被提出来进行安全计算和认证。但用户仍然需要相信SE和TEE支持的硬件不会作恶或被入侵。为了完全消除对额外硬件的依赖，Chow 等人引入了白盒加密技术。 (2002) 给出了在极其恶劣的环境中实现 AES 的软件解决方案。在 Chow 等人发表开创性论文之后，在不同的分组密码上提出了许多白盒实现。在物联网应用中，如果实施成本受到限制，SE和TEE可能会遇到实际问题。在本文中，我们首先讨论与轻量级分组密码的白盒分组密码实现相关的实际问题。此外，我们给出了 KLEIN、Present 和 LBlock 的白盒实现作为代表替换排列网络（SPN）和 Feistel 结构的典型候选。最后将性能和成本与白盒 AES 实现进行比较。比较表明，白盒实现不仅与块和密钥长度有关，而且密码的结构及其白盒实现方法强烈影响实现成本。
According to the Kerckhoffs’s principle, the security of a system should be only depended on the security of its secret key. To build the trusted computing base, Secure Element (SE) and Trusted Execution Environment (TEE) have been proposed for secure computing and authentication. But users still need to believe that SE and TEE-supported hardware will not be evil or intruded. In order to totally remove the dependence of extra hardware, white-box cryptography was introduced by Chow et al. (2002) which gives a software solution for AES implementations in an extremely hostile environment. After Chow et al.’s seminal paper, many white-box implementations were proposed on different block ciphers. In IoTs applications, SE and TEE might have the practical issues if the implementation costs are constrained. In this paper, we first discuss the practical issues that relate to white-box block cipher implementations from lightweight block ciphers. Furthermore, we give the white-box implementations of KLEIN, Present and LBlock as the typical candidates that represent the Substitution-Permutation Network (SPN) and Feistel structures. Finally the performance and the costs are compared with the white-box AES implementation. The comparison shows that white-box implementations are not only related to block and key lengths, but also the structure of the cipher and its white-box implementation methodology strongly affect the implementation costs.