暗号回路への電力差分解析攻撃に対するアルゴリズムレベルでの耐性評価 [in Japanese] Algorithm Level Evaluation of DPA Resistivity against Cryptosystems [in Japanese]
Access this Article
Search this Article
Paul Kocher has proposed a cryptanalysis technique called Differential Power Analysis (DPA), in which attackers derive secret information such as private keys from a statistical analysis of the power consumption by the target device. There is now a demand to evaluate the DPA resistivity of cryptographic device before the device is actually created. In this paper, we focus on simulating DPA with high speed at algorithm level in upstream of the design process. Messerges used Power Leakage Model to obtain power consumption from Hamming Weight for proof of high-order DPA. However, the correctness of the model has not been verified. In this paper, we verify that difference of power consumption in DPA can be obtained from Power Leakage Model by investigating the cause of power consumption of CMOS circuits and transition probability of logic gates. The verification is performed by means of a circuit simulator. Next we describe a method of performing algorithm level simulation which calculates power consumption using Power Leakage Model. We illustrate the effectiveness of the method by applying it to DPA resistivity evaluation of DES implementation.
- IEEJ Transactions on Electronics, Information and Systems
IEEJ Transactions on Electronics, Information and Systems 126(10), 1221-1228, 2006-10-01
The Institute of Electrical Engineers of Japan