抵御侧信道分析的AES双路径掩码方法

AES Dual-path Masking Method for Resisting Side-channel Analysis

为抵御功耗、电磁辐射等侧信道分析攻击,提出一种高级加密标准(AES)双路径掩码方法。采用2条数据路径,将随机数和随机S盒用于掩码操作,使一个加、解密轮次内的所有中间运算结果与AES算法的标准中间结果都不相同,且各中间结果的汉明重量随明文随机变化。实验结果表明,AES算法中间结果的汉明重量与该方法产生的能量特征之间的相关性被完全消除,可抵御各种侧信道分析攻击。

In order to resist the side-channel analysis as power and EM attack, a dual-path masking method is proposed for Advanced Encryption Standard（AES） algorithm implementation. Through two data paths, the random numbers and random S-boxes are used to mask operation, which makes all intermediate variables among the proposed AES scheme different from that of the standard method, and the Hamming distance corresponding to each intermediate variable changes with the plaintext. It is simple in structure, and conducive to software and hardware implementation. Experimental result shows the correlation between the intermediates of standard AES and the energy characteristics of proposed AES scheme are completely removed. Thus, the proposed method bears strong immunity to all known side-channel analysis.