Abstract: To improve the DPA （differential power analysis） resistance of a cryptographic device， Mask is used to make the power consumption independent of the intermediate values. High order DPA can attack cryptographic device with simple Masks. A DPA resistant AES （advanced encryption standard） Mask algorithm with several random Masks is proposed. The algorithm is implemented on an 8 bit MCU. The result shows that the DPA resistant AES algorithm can defend DPA and high order DPA analysis efficiently.

Key words: differential power analysis （DPA）, Mask, advanced encryption standard （AES）, Sbox

摘要： Mask技术破坏了加密过程中的功率消耗与加密的中间变量之间的相关性，提高了加密器件的抗DPA攻击能力。简单地对算法流程添加Mask容易受到高阶DPA攻击的。提出了一种对AES加密过程的各个操作采用多组随机Mask进行屏蔽的方法，并在8 bit的MCU上实现了该抗攻击的AES算法。实验结果表明，添加Mask后的抗DPA攻击AES算法能够有效地抵御DPA和高阶DPA的攻击。

关键词: 差分功耗攻击, 掩码技术, 高级加密标准, S盒