计算机科学与探索

• 学术研究 •    

结合EDCA和CPA的容错双向选择攻击

张美玲, 尚利蓉, 郑东   

  1. 1.西安邮电大学 网络空间安全学院, 西安 710121
    2.西安邮电大学 陕西省无线网络安全技术国家工程实验室, 西安 710121

Fault-Tolerant Bidirectional Choice Attack Combining EDCA and CPA

ZHANG Meiling, SHANG Lirong, ZHENG Dong   

  1. 1.School of Communications & Information Engineering, Xi’an University of Posts and Telecommunications, Xi’an 710121, China
    2.Shaanxi Province Wireless Network Security Technology National Engineering Laboratory, Xi’an University of Posts and Telecommunications, Xi’an 710121, China

摘要: 当所设计的攻击方案带有容错功能时,往往就需要在非常大的候选空间中挑出正确的密钥。如何有效地实现这个目标是侧信道攻击中非常重要且具有挑战性的问题。针对这一问题,以AES-128为目标研究了结合EDCA和CPA的容错双向选择攻击,首先,为了提高碰撞检测的成功率,提出了一种欧式距离增强碰撞攻击(EDCA),与传统的相关增强碰撞攻击(CCA)相比,EDCA利用欧式距离来区分两组能量迹之间的相似性,其碰撞检测的成功率更高,从而使优化更加实用和有意义。除此之外,结合EDCA和CPA,将密钥以及对应的碰撞对做分组处理,然后进行双向筛选,得到最优的碰撞链,大大减少了候选空间,从而降低了密钥枚举的复杂性,有效地恢复密钥。实验结果表明,在低信噪比 和 的条件下,设置碰撞对的阈值 ,所提出的方案在3000条能量迹时成功率达到98.78%和80.25%,均优于现有方案。

关键词: AES-128, 碰撞攻击, EDCA, CPA, 双向选择

Abstract: When the designed attack scheme is fault-tolerant, it is often necessary to pick out the correct key in a very large candidate space. How to effectively achieve this goal is a very important and challenging problem in side-channel attacks. Aiming at this problem, a fault-tolerant bidirectional choice attack combining EDCA and CPA is studied with AES-128 as the target. First, in order to improve the success rate of collision detection, a Euclidean Distance enhanced Collision Attack (EDCA) is proposed. Compared with Correlation enhanced Collision Attack (CCA), EDCA utilizes the Euclidean distance to distinguish the similarity between two sets of energy traces, its collision detection has a higher success rate, making the optimization more practical and meaningful. In addition, combined with EDCA and CPA, the keys and the corresponding collision pairs are grouped, and then perform bidirectional screening to obtain the optimal collision chain, which greatly reduces the candidate space and reduces the complexity of key enumeration, effectively recovering the key. The experimental results show that, under the conditions of low signal-to-noise ratio and  , setting the threshold of collision pair is 5, the success rate of the proposed scheme reaches 98.78% and 80.25% when there are 3000 energy traces, both of which are better than the existing schemes.

Key words: AES-128, collision attack, EDCA, CPA, bidirectional choice