本项目关注面向AES密钥扩展部分的抗功耗攻击的掩码技术。作为国际上使用最广泛的分组密码算法，AES的抗功耗攻击低资源实现方法是学术界和密码芯片工业界关注的焦点。相比于AES轮函数，AES密钥扩展的掩码技术的相关研究尚未成熟。发表于CHES2014的最新研究成果低估了攻击者的密钥恢复能力，缺乏随机量分配方案变化时的安全性分析能力，忽略了功耗测量的噪声，不能提供有效的综合掩码方案。本项目将对功耗攻击下的密钥恢复算法重构计算模型，建立更准确、可扩展的密钥恢复算法；实施考虑测量噪声后密钥恢复算法的安全性分析；提出能够权衡实现代价与安全强度的综合掩码方案。本项目将为低资源AES实现的密钥扩展部分提供实用和明确的掩码保护技术，为芯片安全性测评机构和密码芯片工业界提供安全性分析理论依据，为针对固定值的功耗攻击提供更合理的防御方案。相关成果有望在权威期刊和会议上发表论文3-6篇，申请专利1-2项。

This project focuses on the mask technology for AES key expansion against the power analysis attack. As the most internationally widely used and the most studied block cipher, the side-channel resistant implementation of AES algorithm in resource-constrained cryptographic devices is always a focused topic from both academia and cryptographic industry. Compared to the AES round function, the mask technology for the AES key expansion has not been well researched. The latest security analysis, which was published in CHES 2014, has the problems including under estimation of attackers’ ability of key recovery, cannot provide a general security analysis for more variations of mask strategies, ignored the noise in real power measurement, cannot provide appropriate guidance for a reasonable mask strategy. This research project will propose a new model for the key recovery problem for the power analysis attack against AES key expansion; realize a more accurate and extensible security analysis method; perform the security analysis for more realistic leakage model that considers the measurement noise; provide the strategy for the assignment of limited random entropy to achieve the mask scheme with the best security. The project aims to provide efficient analysis techniques and theoretical basis for the security evaluation organizations of cryptographic devices, which also helps designing better side-channel countermeasures for the power analysis against a fixed value. It is expected to publish 3-6 high level papers and apply 1-2 patents.