计时攻击及其防范

Timing Attack and Its Defense

计时攻击是指攻击者通过分析执行加密算法所需要的时间,从而获取密钥信息的攻击方式。文中对计时攻击的概念、原理以及历史进行了介绍,使读者能对计时攻击有基本了解。并以模幂运算为例,详细分析了计时攻击过程,以及几种计时攻击防范措施及其效果。虽然当前的防范措施能有效防范简单的计时攻击,但对于新的计时攻击方式的防范效果仍待研究。

Timing attack is a form of attack the time taken to execute cryptographic algorithms where the attacker tries to break a cryptosystem by analyzing This paper describes the basic concept, principles, and history of timing attack, the readers can thus have a basic understanding of this area. Then taking the modular exponentiation encryption algorithm as an example, it analyzes in detail the timing attack process, including the effectiveness of several timing attack preventive methods. Although the current preventive method can effectively resist the simple timing attack, the preventive effectiveness against the new attack methods remains to be studied.