针对SM4密码算法的模板攻击

Template Attack Against SM4 Cryptographic Algorithm

目前针对SM4密码算法的侧信道攻击研究主要是故障分析攻击和相关性能量分析攻击,为了探索模板攻击针对SM4密码算法分析攻击应用问题,提出了针对SM4密码算法的模板攻击方法,模板构建时,选择SM4密码算法的S盒输出作为能量分析攻击点,汉明重量作为能量分析模型,构建关于S盒输出的模板,模板匹配时,选择多条曲线的联合概率进行匹配,概率最大值对应的密钥即为攻击出的正确密钥。针对SM4密码算法智能卡实测实验,验证了该攻击方法的有效性。该攻击方法不仅可以应用到针对SM4密码算法其他攻击点的模板攻击,而且对其他分组密码算法的模板攻击具有借鉴意义。

At present,the research of the side channel attack against the SM4 cryptographic algorithm is mostly about the fault analysis attack and correlation power analysis attack.A method of the template attack against SM4 cryptographic algorithm was proposed to explore the application of the template attack against SM4 cryptographic algorithm.When constructing the template,the S-box output of the SM4 cryptographic algorithm was selected as the attack point.And Hamming weight model was selected as power analysis model.The template about S-box output was constructed during the template attack.The joint probability of multiple power traces was selected for template matching.The key corresponding to the maximum probability was the correct key.The effectiveness of this method is demonstrated by the experiment of the SM4 cryptographic algorithm smart card.The method can not only be applied to the other attack points of the SM4 cryptographic algorithm,but also be used for reference to other block cipher algorithms.