一种抗错误注入攻击的S盒的构造

Construction of Fault Injection Attacks Resistant S-Boxes

分组密码是现代密码学的重要组成部分,而S盒又是分组密码中必不可少的非线性组件,为密码算法提供了很好的混淆作用.无论是传统分组密码中的S盒还是轻量级分组密码中的S盒都非常容易受到错误注入攻击.本文通过具有线性或非线性邻域函数的元胞自动机设计了一种可以检测两个字节错误并纠正一个字节错误的S盒,以抵抗错误注入攻击.对比Advanced Encryption Standard(AES)中的S盒,虽然密码性能有所下降,但是可以抵抗错误注入攻击.并且,本文还考虑了回旋镖均匀度这个密码安全性指标,用于衡量S盒抗回旋镖攻击的能力.

Block cipher is an important part of modern cryptography,and S-box is an essential nonlinear component in block cipher,which provides a good confusion for cryptographic algorithms.Both S-boxes in traditional block ciphers and S-boxes in lightweight block ciphers are vulnerable to fault injection attacks.In this paper,we design some S-boxes that can detect two-byte errors and correct one-byte error based on cellular automata with linear or nonlinear neighborhood functions to resist fault injection attacks.Compared with the S-boxes in Advanced Encryption Standard(AES),although the cryptographic performance has decreased,they can resist fault injection attacks.In addition,this paper considers the security index of boomerang uniformity,which is used to measure the ability of S-box to resist boomerang attacks.