白盒化Piccolo密码算法的设计与应用

Design and Application of White⁃boxed Piccolo Cryptographic Algorithm

白盒攻击环境下敌手可以完全获取甚至改变密码算法的运行过程,给数据安全带来巨大威胁,目前移动终端、无线传感器网络(WSN)等部分轻量级应用场景均可视作白盒环境。通过改进Piccolo算法的部分结构与迭代方式将其进行白盒化实现,采用自编码查找表,根据给定的映射关系对数据分区进行标记,添加数据标记编码,并结合仿射变换等操作将密钥信息进行隐藏,能够保障较高的查表效率与白盒安全性。经安全性分析与对比,白盒化的Piccolo算法白盒多样性与白盒含混度数值较高,并且可以应对侧信道攻击、代码提取攻击、BGE攻击、MGH攻击、仿射编码恢复攻击等多种密码攻击方式,能在WSN等硬件资源受限的场景下得到良好部署与应用。

In white⁃box attack environment,adversary could completely access or even change the oper⁃ation process of cryptographic algorithms,bringing huge threats to data security.Currently,some light⁃weight application scenarios such as the mobile terminals and the wireless sensor networks(WSNs)are regarded as white⁃box environments.Part of the structure and iteration in the Piccolo algorithm are im⁃proved to be white⁃boxed.According to the given mapping relationship,the self⁃coding lookup table is adopted to mark the data partition and add data marking encoding.Combining with the affine transfor⁃mation and other operations,the key information is hidden to guarantee high lookup table efficiency and white⁃box security.Security analysis and comparison indicate that the white⁃boxed Piccolo algorithm has high white⁃box diversity and white⁃box ambiguity,and can cope with various cryptographic attacks such as side channel attack,code lifting attack,BGE attack,MGH attack,affine code recovery attack,etc.The white⁃boxed Piccolo algorithm could be well deployed and applied in the scenarios of WSN and other platforms with constrained hardware resource.