FPGA密码芯片改进掩码防护方法研究

Research on improved masking technique based on FPGA cryptographic chip

功耗攻击已对密码芯片物理安全性构成严峻威胁,对其攻击和防御的研究是密码旁路分析的热点问题。文中给出了一种DES伪随机掩码算法的设计和实现方法,分析了算法抗功耗攻击的安全性。结果表明:一般的DES伪随机掩码算法只能抵抗一阶差分功耗攻击,不能有效防御二阶差分功耗攻击。为抵御二阶DPA攻击,采用掩码方法对DES掩码算法结构进行了改进,在理论上具有抗DPA攻击的能力。

Power attack has posed serious threats to the physical security of cryptographic chips, the research of its attack and defense techniques is a hot spot in side channel attacks. The design and implementation of a DES random masking algorithm against power attack is described in this paper, and the security of this masking algorithm is analyzed. The results demonstrate that： the general masking algorithm only can defend one order differential power attack, but can not defend the second order power attack effectively. To defending the second order power attack, after applying the masking technique on DES,it improves the DES hardware structure with the ability of the DPA resistance in theory.