一种适用于SM4的改进RSM掩码方案

An Improved RSM Mask Scheme for SM4

为了增强SM4算法抵御能量分析攻击,提出了一种改进的循环移位S盒掩码（RSM,rotating S-box masking）算法.该算法采用RSM掩码与固定值掩码相结合的方法,结合SM4算法本身的加密特性,不需要设计者对掩码进行人工操作,就可以起到循环移位S盒的目的,从而有效降低了功率消耗与中间值的关联性.安全性分析表明,本方案可以有效抵御高阶差分能量分析（DPA）攻击,是一个非常匹配SM4算法的掩码方案.

To resist power analysis attack,this paper presents an improved RSM（rotating S-box masking）algorithm for encryption mask.This method combines RSM algorithm with fixed value mask.With the characteristics of SM4 algorithm itself,the method can play the cyclic shift of S-box without requiring manual operation of designer for the mask,so it effectively reduces the power consumption and the relevance of the intermediate values.The security＇s analysis proved that the method can effectively resist the higher order DPA attack and match the SM4 algorithm perfectly.