针对S盒的ARIA-128差分故障分析

Differential Fault Analysis on ARIA-128 with S-box

针对ARIA-128分组密码进行差分故障分析,并将差分故障分析简化为求解S盒输入与输出差分问题,同时进行仿真实验。实验结果表明：ARIA-128分组密码易遭受差分故障分析攻击,8次故障注入可恢复1轮扩展轮密钥,32次故障注入即可恢复主密钥。该方法也适用于其他SPN结构的分组密码算法。

This paper presents a differential fault analysis on ARIA-128,simplifies the differential fault analysis process to getting the input and output difference of S-box,and presents the simulating experiment.Experimental results show that：the block cipher ARIA-128 is vulnerable to differential fault analysis attack,8 faulty injections can recover a round key,32 faulty injections can recover the main 128-bit key.On the other hand,the differential fault analysis method in this paper can also be used on other block ciphers with SPN structure.