基于DPA 方法实现对MICKEY-128 的旁道攻击

中国民航大学学报

基于DPA 方法实现对MICKEY-128 的旁道攻击

赵宏旭

（中国民航大学航空自动化学院，天津 300300）

收稿日期:2014-04-10 修回日期:2014-05-28 出版日期:2015-06-22 发布日期:2015-07-08
作者简介:赵宏旭（1985—），男，天津人，助教，硕士研究生，研究方向为航空电子设备故障检测.
基金资助:
国家自然科学基金项目（U1233113）

DPA attack on stream cipher MICKEY-128

ZHAO Hong-xu

(College of Aeronautical Automation,CAUC,Tianjin 300300,China)

Received:2014-04-10 Revised:2014-05-28 Online:2015-06-22 Published:2015-07-08

摘要/Abstract

摘要：

基于FPGA 搭建硬件攻击平台，用于驱动集成芯片上的流密码MICKEY-128 进行加密，同时对于加密过
程中芯片所消耗功率信息进行采集，随后应用差分功率分析（differential power analysis，DPA）方法对加密
过程所用密匙进行攻击。结果显示，DPA 攻击方法适用于流密码MICKEY-128，可成功破译全部128 位密
匙。并且通过改变DPA 攻击方法所应用的功率模型和统计分析方法，可进一步提高攻击效率，降低所需实
际功率信息采集数量。

关键词: 流密码, MICKEY-128, 旁道攻击, 差分功率分析

Abstract:

Nowadays,various side-channel attack techniques start to play an important role in cryptography and bring a serious threat on the hardware implementations of cryptographic algorithms. So far,side-channel attacks on block ciphers have been discussed extensively. However,the literature about side channel attacks on stream ciphers is not as much as the other cryptographic algorithms. In this work,a platform based on FPGA is used to drive the MICKEY-128 stream cipher which has been integrated on one ASIC,meanwhile the power traces are collected during the cipher encryption. Afterwards,differential power analysis has been performed to attack the entire secret key. As shown by the results,the complete secret key of MICKEY-128 has been revealed,and by changing the power model and statistical analysis method the attack efficiency can be further improved.

Key words: stream cipher, MICKEY-128, side-channel attack, differential power analysis

中图分类号:

TN918.4

赵宏旭. 基于DPA 方法实现对MICKEY-128 的旁道攻击[J]. 中国民航大学学报.

ZHAO Hong-xu. DPA attack on stream cipher MICKEY-128[J]. .

参考文献 10

[1]	FISCHER W，GAMMEL B M，KNIFFLER O，et al. Differential Power Analysis of Stream Ciphers[M]. Berlin：Topics in Cryptology-CT-RSA.Springer Berlin Heidelberg，2006：257-270.
[2]	DE CANNIERE C，PRENEELB T. New StreamCipher Designs[M]. Berlin：Springer Berlin Heidelberg，2008：244-266.
[3]	BABBAGE S H，DODD M W. The stream cipher MICKEY-128 2.0.eSTREAM, ECRYPT Stream Cipher Project[EB/OL]. (2003-01-01)[2014 -04 -10]. http://www. ecrypt. eu. org/stream/p2ciphers/mickey128/mickey128_p2. pdf.
[4]	KOCHER P，JAFFE J，JUN B. Differential power analysis[C]//Advances in Cryptology-CRYPTO’99. Birlin：Springer Berlin Heidelberg，1999：388-397.
[5]	BRIER E，CLAVIER C，OLIVIER F. Correlation Power Analysis with a Leakage Model[C]//Cryptographic Hardware and Embedded Systems-CHES. Birlin：Springer Berlin Heidelberg，2004：16-29.
[6]	MANGARD S，OSWALD E，POPP T. Power Analysis Attacks: Revealing the Secrets of Smart Cards[M]. Birlin：Springer Science & Business Media，2008.
[7]	KOCHER P，JAFFE J，JUN B，et al. Introduction to differential power analysis[J]. Journal of Cryptographic Engineering，2011，1（1）：5-27.
[8]	MARTINASEK Z，MACHA T，RASO O，et al. Optimization of differential power analysis[J]. Przeglad Elektrotechniczny，2011，87（12）：140-144.
[9]	WU K S，LI R F，WANG X D，et al. Simulation Platform for Differential Power Analysis Attack on DES[J]. Computer Science，2012，2：014.
[10]	BELAID S，BETTALE L，DOTTAX E，et al. Differential Power Analysis of HMAC SHA-2 in the Hamming Weight Model[C]//SECRYPT 2013-10th International Conference on Securityand Cryptography. Scitepress，2013.