Camellia算法的相关功耗分析攻击

Correlation Power Analysis for Camellia

Camellia算法在进入Feistel结构前加入白化密钥,并且且轮密钥的生成与密钥的每一位相关,导致一般相关功耗分析攻击无法适用于该算法。该算法的第三轮、第四轮的轮密钥为原始密钥循环左移得到,利用这一特性设计了攻击方案：首先攻击一、二轮得到三、四轮需要的输入值,再攻击三、四轮得到一个以原始密钥为未知数的可解方程,解方程得到原始密钥。以STC89C58AD微控制器为硬件仿真平台,对攻击方案进行了实验。实验结果表明：使用文中提出的攻击方案,分别用189-306条功耗曲线就可以恢复出1~4轮S-盒密钥。

Camellia algorithm is recommended by many international organizations including the International Standardization Organization. Because power analysis was low cost and high efficiency,it poses a big threat to cryptographic algorithm. Based on the structural feature of Camellia algorithm,designed for power analysis attack scheme of the algorithm.In STC89C58 AD microcontroller hardware simulation platform,attack scenario experiments were conducted. Experimental results show that： 250 power traces recover the key.