SM4算法前四轮约减轮故障注入分析

Analysis of the First Four Rounds of Reduction Wheel Fault Injection in SM4 Algorithm

针对SM4密码算法,提出一种新型的约减轮故障攻击方法,故障注入于加密算法的前4轮中,使加密算法的后续迭代轮数减少,对故障数据进行筛选和分析,理论上由4个错误密文就可以恢复128 bit的初始密钥,从而完成攻击。方法对比现有针对SM4的差分故障攻击方法有很大的简化,提高了攻击效率。利用攻击方法对无防护SM4算法的智能卡进行了约减轮故障注入攻击,实验结果表明攻击方法行之有效,也可以扩展到其他分组密码。

A new method of round-trip fault attack is proposed.For the SM4 cryptographic algorithm,the fault is injected into the first 4 rounds of the encryption algorithm,so that the number of subsequent iterations of the encryption algorithm is reduced.Compared with the existing differential fault attack method for SM4,this method greatly and the attack efficiency.The experimental results show that the attack method is effective.This method can also be extended to other block ciphers.