Ciphertext-Only Fault Analysis on the LED Lightweight Cryptosystem in the Internet of Things

Ciphertext-Only Fault Analysis on the LED Lightweight Cryptosystem in the Internet of Things
复制标题

物联网LED轻量级密码系统的纯密文故障分析

DOI:
10.1109/tdsc.2018.2857770
复制
发表时间:
2019-05
影响因子:
7.3
通讯作者:
Zhiqiang Liu
Zhiqiang Liu
中科院分区:
计算机科学2区
文献类型:
--
作者:
Wei Li;Linfeng Liao;Dawu Gu;Chaoyun Li;Chenyu Ge;Zheng Guo;Ya Liu;Zhiqiang Liu

文献摘要

被引文献

相似文献

随着无线技术的发展,物联网(IoT)正在成为实现智慧城市和解决安全,便利和效率等许多严重问题的一种有前途的方法。为了避免任何可能的恶意攻击,采用轻量级密码系统来实现加密/解密,消息认证和数字签名以确保物联网的安全性是最有效的。LED是一种轻量级密码,在物联网中具有两种灵活的密钥大小变体。自设计以来,选择明文攻击中的大量故障分析技术都集中在LED上引发故障,以获得64位和128位的密钥。在攻击者的纯密文攻击能力最弱的情况下,研究注入故障是否能破坏LED是非常重要的。本研究提出仅密文故障分析与六个不同的发光二极管的发光二极管。仿真实验表明,我们的分析可以恢复其64位和128位的秘密密钥超过99%的概率使用SEI,GF,GF-SEI,ML,HW和MAP解密。该攻击不仅可以提高攻击效率,而且可以减少错误数量。故障位置可以被注入到更深的轮中。为物联网中其他轻量级密码的安全性分析提供了重要参考。
With the enlargement of wireless technology, Internet of Things (IoT) is emerging as a promising approach to realize smart cities and address lots of serious problems such as safety, convenience and efficiency. In order to avoid any possible rancorous attacks, employing lightweight cryptosystems is most effective to implement encryption/decryption, message authentication and digital signature for security of the IoT. LED is such a lightweight cipher with two flexible keysize variants in the IoT. Since its designing, a multitude of fault analysis techniques in chosen plaintext attacks focus on provoking faults on LED to derive the 64-bit and 128-bit secret keys. It is vital to investigate whether injecting faults allows breaking LED while the attackers have the weakest ciphertext-only attacking ability. This study presents ciphertext-only fault analysis with six different distinguishers on LED. The simulating experiments show that our analysis can recover its 64-bit and 128-bit secret keys with over 99 percent probability using the SEI, GF, GF-SEI, ML, HW and MAP distinguishers. The attack can not only improve the attacking efficiency, but also decrease the number of faults. The fault locations can be injected into the deeper round. It provides vital reference for security analysis of other lightweight ciphers in the IoT.