Incorporating error detection and online reconfiguration into a regular architecture for the advanced encryption standard
Incorporating error detection and online reconfiguration into a regular architecture for the advanced encryption standard
复制标题
将错误检测和在线重新配置纳入高级加密标准的常规架构中
DOI：
10.1109/dftvs.2005.41
复制
发表时间：
2005
期刊：
影响因子：
--
通讯作者：
P. Maistri
中科院分区：
文献类型：
--
作者：
L. Breveglieri;I. Koren;P. Maistri
对加密设备的基于故障注入的攻击旨在通过在计算过程中引入错误来恢复密钥。他们现在被认为是真正的威胁，必须对他们采取对策。在本文中，我们描述了 Mangard 等人提出的现有 AES 架构的扩展。 (2003)，它通过利用架构的高度规律性来提供错误检测和容错。所提出的设计能够执行在线错误检测并重新配置内部数据路径，以防止计算过程中发生故障。我们还描述了不同的冗余级别如何针对不同数量的错误提供保护。所提出的结合了故障检测和容错的设计具有与基础架构相同的吞吐量，但会产生不可忽略的面积开销。对于故障检测电路，该开销约为 40%；对于整个故障检测和容错（通过重新配置），该开销约为 134%。尽管相当高，但该开销仍然低于参考解决方案，例如复制（提供检测）和三重模块化冗余（提供故障屏蔽）。
Fault injection based attacks on cryptographic devices aim at recovering the secret keys by inducing an error in the computation process. They are now considered a real threat and countermeasures against them must be taken. In this paper, we describe an extension to an existing AES architecture proposed by Mangard et al. (2003), which provides error detection and fault tolerance by exploiting the high regularity of the architecture. The proposed design is capable of performing online error detection and reconfiguring internal data paths to protect against faults occurring in the computation process. We also describe how different redundancy levels provide protection against different numbers of errors. The presented design incorporating fault detection and tolerance has the same throughput as the base architecture but incurs a nonnegligible area overhead. This overhead is about 40% for the fault detection circuitry and 134% for the entire fault detection and tolerance (through reconfiguration). Although quite high, this overhead is still lower than for reference solutions such as duplication (providing detection) and triple modular redundancy (providing fault masking).