面向资源受限环境的白盒分组密码算法研究

在移动互联网、物联网等资源受限应用场景下，由于分组密码算法在性能与效率上的优势，因此在数据加解密、消息认证码与数字版权管理方案的构造中起着重要作用。在此背景下，越来越多的应用引入了白盒分组密码算法来构建软件环境下的密钥安全保护机制，由此也进一步提高了学术界与工业界对白盒分组密码算法的研究与关注度。..由于白盒实现所使用的仿射变换和查找表的规模受到存储、计算能力限制，而规模问题又导致数学分析上存在求解方法，该矛盾导致不断有新的攻击方法与设计方案公开发表。本课题主要针对面向资源受限环境的白盒分组密码算法安全性及其设计特点展开研究。项目首先针对分组密码的轻量化白盒实现及其扩散层特性进行分析，再以此为基础探索抗侧信道攻击的白盒分组密码实现技术，从而进一步完善面向资源受限环境的分组密码白盒安全模型。最后综合上述研究成果，为资源受限环境下的白盒分组密码算法的设计与安全性分析提供新的思路与方法。

Due to its performance and implementation costs, block cipher plays a pivotal role for supporting data encryption/decryption, message authentication codes and digital rights management in the resource-constrained application environments (e.g., mobile Internet and IoTs) . Under this background, more and more applications are equipped with white-box block cipher algorithms for securing key protection mechanism in their software implementations. Therefore researches and attractions on white-box block ciphers are improved both from academics and industry...Since the size of affine transformations and look-up tables (which are used in white-box block ciphers) is limited by storage and computation abilities, while this resource limitation also causes the general solutions in math. This contradiction leads new attack methods and design proposals constantly published in recent years. In this project, the research will be focused on the white-box block ciphers’ security and design choices for resource-constrained environments. First the project will analyze the white-box implementations of lightweight block ciphers and the specifications of their diffusion layer choices. Based on the analysis results, the side-channel analysis techniques on lightweight white-box block ciphers will be investigated. Moreover, the security model of white-box block ciphers for resource-constrained environments will be reconsidered. Consequently, the new designs and cryptanalysis methods for the white-box block ciphers for resource-constrained environments will be proposed on the synthesized results.