一种改进的针对DSA签名的指令Cache计时攻击

Improved Instruction-Cache Timing Attack on DSA Signature

针对公钥密码的指令Cache计时攻击是近年来提出的一种新的旁路攻击方式。现有的两种针对公钥密码的指令Cache计时攻击模型尚存在一些不足,一个是攻击前提过于苛刻而难以实现,另一个是无效信息过多导致数据量偏大及后续分析工作量的增加。在充分研究现有模型的基础上,提出一种改进的基于特征Cache组监测的指令Cache计时攻击模型,克服了现有两种模型的不足,在不降低性能的情况下将计时数据减少了约29%,并以DSA数字签名为攻击对象对改进模型进行了实验。

Instruction Cache timing attack on public-key cryptography was newly proposed, which is a subclass of side channel attack. However, there are some shortages in the present models. One is that the precondition of attack is hard to satisfy and the other is that too much useless information results in larger data flow and heavier analysis workload. Based on present models, this paper proposed an improved instruction Cache timing attack model on DSA, which can overcome disadvantages of present models. Experiments were made and the results demonstrate that the im- proved model decreases the data flow by about 29% while the performance is not unchanged.