一种侧信道攻击Rainbow签名的算法

An Algorithm for Side Channel Attacks on Rainbow Signature

Rainbow是一种数字签名方案,它基于多元多项式结构构造,属于多变量密码体系。相比现有的签名方案,如RSA和ECC方案,Rainbow的特点是能够抵御量子计算机攻击,被认为是下一代签名方案的重要候选。基于Rainbow的重要性,该文对Rainbow的硬件安全进行了分析,提出了一种基于差分能量分析和故障分析的侧信道分析算法,将Rainbow作为目标,实施侧信道攻击。实现了Rainbow签名电路,并进行功耗采集,对采集的2 000条功耗曲线进行分析和计算,获取了Rainbow所有的密钥。

Rainbow is a digital signature scheme.It is based on multivariate polynomials,which belongs to multivariate public key cryptography.Compared with the existing signature schemes,e.g.rivest-shamir-adleman(RSA)and ellipse curve cryptography(ECC),Rainbow can resist quantum computer attacks,which is a candidate of the signature schemes of the next generation.According to the importance of Rainbow,in this paper,we present techniques to exploit differential power analysis(DPA)and fault analysis attacks for analyzing the effectiveness of side channel attacks on Rainbow signature.We implement a naive Rainbow scheme on hardware and propose a successful side channel attack on the implementation.Experimental results show that our attack successfully obtains all the pieces from the private keys of the Rainbow scheme and they clearly demonstrate that we need to protect Rainbow against side channel attacks.