一种针对OpenSSL中RSA的计时攻击改进算法

An Improved Timing Attack Algorithm on RSA of OpenSSL

针对原有BB-Attack（Boneh and Brumley’s Attack）计时攻击算法在样本量小的情况下存在0~1间隔不明显、攻击精确度低等问题,依据Montgomery乘法中额外约简数目与输入消息的关系,结合统计分析中的t检验,给出了一种改进的计时攻击算法。计时攻击实验结果表明：改进算法能够产生更加明显的0~1间隔,并且减少了攻击样本量,提高了攻击效率。

The original BB-Attack（Boneh and Brumley＇s Attack）timing attack algorithm can＇t distinguish the 0~1 gap clearly when sample size is not sufficient,and the precision is not good,so we present an improved timing attack algorithm with t-test in statistic tool according to the relationship between the number of extra subtraction of Montgomery algorithm and input message.The results show that the improved algorithm enlarges the 0~1 gap,reduces the sample size,and improves the efficiency.