전력 분석에 안전한 AES에 대한 새로운 종류의 충돌쌍 공격 = New Type of Collision Attack on Power-Analysis Resistant AES

다국어 초록 (Multilingual Abstract)

This paper introduces a new collision attack on first-order masked AES. This attack is a known plaintext attack, while the existing collision attacks are a chosen plaintext attack. In addition, our method is more efficient than the second-order power analysis and requires about 1/27.5 power measurements by comparison with the last collision attack. Some experiment results of this paper support this fact. In this paper, we also introduce a simple countermeasure, which can protect against our attack.

참고문헌 (Reference)

1 T. Messerges, "Using Second-Order Power Analysis to Attack DPA Resistant Software"

2 G. Welchman, "The Hut Six Story: Breaking the Enigma Codes" McGraw-Hill 1982

3 E. Prouff, "Statistical Analysis of Second Order Differential Power Analysis" 58 (58): 799-811, 2009

4 J. Blöer, "Provably Secure Masking of AES"

5 E. Oswald, "Practical second-order DPA attacks for masked smart card implementations of block ciphers"

6 S. Mangard, "Power Analysis Attack: Revealing the Secrets of Smart Cards" Springer 2007

7 M. Joye, "On Second-Order Differential Power Analysis"

8 A. Bogdanov, "Improved Side-Channel Collision Attacks on AES"

9 C. Clavier, "Improved Collision-Correlation Power Analysis on First Order Protected AES"

10 K. Schramm, "Higher Order Masking of the AES"

11 HeeSeok Kim, "Efficient Masking Methods Appropriate for the Block Ciphers ARIA and AES" 한국전자통신연구원 32 (32): 370-379, 2010

12 HeeSeok Kim, "Efficient Masked Implementation for SEED Based on Combined Masking" 한국전자통신연구원 33 (33): 267-274, 2011

13 P. Kocher, "Differential Power Analysis"

14 A. Moradi, "Correlation-Enhanced Power Analysis Collision Attack"

15 M.-L. Akkar, "An Implementation of DES and AES, Secure against Some Attacks"

16 E. Oswald, "An Efficient Masking Scheme for AES Software Implementations"

17 C. Herbst, "An AES Smart Card Implementation Resistant to Power Analysis Attacks"

18 J. Daemen, "AES Proposal: Rijndael" 1998

19 E. Oswald, "A Side-Channel Analysis Resistant Description of the AES S-Box"

20 K. Schramm, "A Collision Attack on AES : Combining Side Channel and Differential Attack"