Improved Cache trace driven attack on AES and CLEFIA

ZHAO Xin-jie1; GUO Shi-ze2; WANG Tao1; LIU Hui-ying1

您当前的位置：

首页 >

文章列表页 >

Improved Cache trace driven attack on AES and CLEFIA

更新时间：2024-10-14

- Improved Cache trace driven attack on AES and CLEFIA
- Vol. 32, Issue 8, Pages: 101-110(2011)
- 作者机构：
  
  1. 军械工程学院计算机工程系
  2. 北方电子设备研究所
- 作者简介：
- 基金信息：
- DOI：
  CLC： TN918.1
- Published：2011
- 稿件说明：
移动端阅览
ZHAO Xin-jie1, GUO Shi-ze2, WANG Tao1, et al. Improved Cache trace driven attack on AES and CLEFIA[J]. 2011, 32(8): 101-110.
DOI：

ZHAO Xin-jie1, GUO Shi-ze2, WANG Tao1, et al. Improved Cache trace driven attack on AES and CLEFIA[J]. 2011, 32(8): 101-110. DOI：

摘要

通过分析"Cache失效"踪迹信息和S盒在Cache中不对齐分布特性

提出了一种改进的AES和CLEFIA踪迹驱动攻击方法。现有攻击大都假定S盒在Cache中对齐分布

针对AES和CLEFIA的第1轮踪迹驱动攻击均不能在有限搜索复杂度内获取第1轮扩展密钥。研究表明

在大多数情况下

S盒在Cache中的分布是不对齐的

通过采集加密中的"Cache失效"踪迹信息

200和50个样本分别经AES第1轮和最后1轮分析可将128bit AES主密钥搜索空间降低到216和1

80个样本经CLEFIA第1轮分析可将128bit CLEFIA第1轮扩展密钥搜索空间降低到216

220个样本经前3轮分析可将128bit CLEFIA主密钥搜索空间降低到216

耗时不超过1s。

Abstract

An improved Cache trace attack on AES and CLEFIA was proposed by considering Cache miss trace informa-tion and S-box misalignment.Current trace driven attacks all assume that the S-box is perfectly aligned in Cache

and it’s impossible to recover the whole first round key of AES and CLEFIA under limited key searching space.However

the re-search demonstrates that the S-box is misaligned in Cache at most cases

by utilizing the Cache miss trace information of the cipher encryption

200 samples first round analysis and 50 samples last round analysis can reduce 128bit AES master key searching space to 216 and 1 respectively

80 samples first round analysis can reduce 128bit CLEFIA first round key searching space to 216

220 samples first three rounds analysis can reduce 128bit CLEFIA master key searching space to 216

all of the attacks above can be finished within 1 second.

关键词

Keywords

references

Views

677

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Improved integral attack——random linear distinguish and key recovery attack

Nove lincidence matrix differential power analysis for resisting ghost peak

DWB-AES: an implementation of dynamic white-box based on AES

Saturation cryptanalysis of CLEFIA

Cache timing attack on SMS4

Related Author

Shaoyu DU

Zijing JIANG

Qun DING

Bin WANG

Si CHEN

Jiadong CHEN

Xing WANG

WANG Wei1

Related Institution

State Key Laboratory of Cryptology

College of Electronic Engineering, Heilongjiang University

College of Electrical Engineering, Zhejiang University

Network and Information Security Laboratory of Hikvision, The 52th Research Institute of CETC

Key Laboratory of Cryptologic Technology and Information Security,Ministry of Education,Shandong University

AI问答

⁰