Statistical Fault Analysis of the Simeck Lightweight Cipher in the Ubiquitous Sensor Networks
Statistical Fault Analysis of the Simeck Lightweight Cipher in the Ubiquitous Sensor Networks
复制标题
普适传感器网络中Simeck轻量级密码的统计故障分析
DOI：
10.1109/tifs.2021.3102485
复制
发表时间：
2021
影响因子：
6.8
通讯作者：
Tianpei Cai
中科院分区：
文献类型：
--
作者：
Wei Li;Jiayao Li;Dawu Gu;Chaoyun Li;Tianpei Cai
随着无线技术的发展，无处不在的传感器网络对人类与计算机、设备和环境的交互方式产生了深远的影响。为了降低交互过程中潜在的严重风险，采用轻量级密码可以有效地平衡安全性、效率和方便性。Simeck是一个轻量级的密码，它提供了数据的机密性，认证和完整性。探索Simeck是否仍然保持强大的安全性是很重要的。到目前为止，Simeck安全分析的攻击假设主要集中在已知明文攻击和选择明文攻击。目前还没有关于Simeck抵抗纯密文攻击的文献，而纯密文攻击代表了攻击者最弱的攻击能力。在仅密文攻击的假设下，利用KDE、MME和MME-GF等一系列新的攻击工具，对Simeck算法进行了抗统计错误分析的安全性分析。实验结果表明，该算法在降低错误率的同时，提高了算法的可靠性和准确性。因此，Simeck无法抗拒统计故障分析与建议的故障。此外，这些新型区分器的良好性能可以应用于PRESENT轻量级密码。为泛在传感器网络中轻量级密码的设计和分析提供了有价值的参考。
With the development of wireless technology, the ubiquitous sensor networks have a profound effect on the way human interacts with computers, devices and environment. In order to reduce the potentially serious risks in the interaction, applying lightweight ciphers is effective to balance security, efficiency and convenience. Simeck is such a lightweight cipher that provides data confidentiality, authentication and integrity. It is significant to explore whether Simeck remains robust security. Up to now, the attacking assumptions of the previous security analysis of Simeck focus on the known-plaintext attack and the chosen-plaintext attack. There is no literature about Simeck against the ciphertext-only attack, which represents the weakest attacking capability of the attackers. On the assumption of the ciphertext-only attack, this paper proposes the security analysis of Simeck against the statistical fault analysis with a series of novel distinguishers of KDE, MME and MME-GF. The experimental results show that the proposed distinguishers can recover the secret key of Simeck in both decreasing faults and increasing reliability and accuracy. Thus, Simeck cannot resist against the statistical fault analysis with the proposed distinguishers. Furthermore, the good performance of these novel distinguishers can be applied on the PRESENT lightweight cipher. It offers the valuable reference for the design and analysis of the lightweight ciphers in the ubiquitous sensor networks.