Research and simulation of timing attacks on ECC

Hui-hui JIA; Chao WANG; Jian GU; Hao-hao SONG; Di TANG

doi:10.11959/j.issn.2909-109x.2016.00025

您当前的位置：

首页 >

文章列表页 >

Research and simulation of timing attacks on ECC

Papers | 更新时间：2024-06-03

- Research and simulation of timing attacks on ECC
- Chinese Journal of Network and Information Security Vol. 2, Issue 4, Pages: 56-63(2016)
- 作者机构：
  
  1. 公安部第三研究所，上海 200031
  2. 上海大学特种光纤与光接入网省部共建重点实验室，上海 200072
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2909-109x.2016.00025
  CLC： TP309.7
- Online First：2016-04，
  
  Published：15 April 2016
- 稿件说明：
移动端阅览
Hui-hui JIA, Chao WANG, Jian GU, et al. Research and simulation of timing attacks on ECC[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 56-63.
DOI：

Hui-hui JIA, Chao WANG, Jian GU, et al. Research and simulation of timing attacks on ECC[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 56-63. DOI： 10.11959/j.issn.2909-109x.2016.00025.

摘要

借助于隐马尔可夫模型思想，提出了一种针对采用“倍点—点加”点乘算法的椭圆曲线数字签名体系的一种计时攻击方法，并对美国国家标准与技术研究院（NIST）公布的二进制域上的5条Koblitz安全曲线进行了攻击仿真实验，成功地攻击了除K-571以外的其他4条Koblitz安全曲线。对于每一条安全曲线仅采集一次时间数据、耗时几十分钟就能恢复出几乎全部的密钥比特，实验结果表明，该方法实施简单、成功率高，是对当前安全曲线有较大威胁的一种侧信道攻击手段。

Abstract

Based on the hidden Markov model (HMM) idea

a timing attack on the elliptic curve digital signature system

which adopted the “double-and-add” scalar multiplication

was proposed.Simulation experiments on the secure Koblitz curve which released by the National Institute of Standards Technology (NIST) were implemented and four secure Koblitz curves except the K-571 were attacked successfully.The experiment results show that the attack can recover almost all the key bits in a few minutes by collecting only once time data

and is easy to imple-ment at a high success rate.

关键词

Keywords

references

KOBLIZ N . Elliptic curve cryptosystems [J ] . Mathematics of Com-puting American Mathematical Society , 1987 , 48 ( 48 ): 203 - 309 .

KOCHER P C. . Timing attacks on implementations of diffie-hellman,RSA,DSS and other systems [C ] // nternational Cryptology Confer-ence on Advances in Cryptology .c 1996 : 104 - 113 .

KOCHER P , JAFFE J , JUN B . Differential power analysis [C ] // The 19th Annual International Cryptology Conference on Advances in Cryptology .c 1999 : 388 - 397 .

QUISQUATER J J , SAMYDE D . Electromagnetic analysis (EMA):measuresand counter measures for smart cards [C ] // The Interna-tional Conference on Research in Smart Cards:Smart Card Pro-gramming and Security .c 2001 : 200 - 210 .

PADE D . Theoretical use of cache memory as a cryptanalytic side-channel [R ] . Department of Computer Science,University of Bristol , 2002 .

赵新杰 , 郭世泽 , 王韬 . 针对AES和CLEFIA的改进Cache踪迹驱动攻击 [J ] . 通信学报 2011 , 32 ( 8 ): 101 - 110 .

ZHAO X J , GUO S Z , WANG T , et al . Improved cache trace driven attack on AES and CLEFIA [J ] . Journal on Communications , 2011 , 32 ( 8 ): 101 - 110 .

BONEH D , DEMILLO R A , LIPON R J . On the importance of checking cryptographic protocols for faults [J ] . Journal of Cryptol-ogy , 2001 , 14 ( 2 ): 101 - 119 .

张金中 , 寇应展 , 王韬 . 针对滑动窗口算法的椭圆曲线密码故障分析 [J ] . 通信学报 2012 , 33 ( 1 ): 71 - 78 .

ZHANG J Z , KOU Y Z , WANG T , et al . Elliptic curve cryptosystem fault analysis on the sliding window algorithm [J ] . Journal on Communications , 2012 , 33 ( 1 ): 71 - 78 .

YANF B , WU K J , KARRI R . Scan-based side-channel attack on dedicated hardware implementations of data encryption stan-dard [C ] // IEEE International Test Conference (ITC) .c 2004 : 339 - 344 .

SCHINDLER W . A timing attack RSA with the Chinese remainder theorem [C ] // Lecture Notes in Computer Science (LNCS) .c 2000 : 109 - 124 .

BRUMLEY D , BONEH D . Remote timing attacks are practical [J ] . Computer Networks , 2005 , 48 ( 5 ): 701 - 716 .

CANVEL B , HILTGEN A , VAUDENAY S . Password interception in a SSL/TLS channel [J ] . Information Technology Journal , 2003 , 2729 ( 3 ): 583 - 599 .

CATHALO J , KOEUNE F , QUISQUATER J J . A new type of timing attack:application to GPS [M ] // Berlin Heidelberg : Springer , 2003 : 291 - 303 .

SAKURAI K , TAKAGI T . A reject timing attack on an IND-CCA2 public-key cryptosystem [C ] // The 5th International Conference on Information Security and Cryptology .c 2002 : 359 - 373 .

LEVINE B N , REITER M K , WANG C , et al . Timing attacks in low-latency mix systems [M ] // Berlin Heidelberg : Springer , 2004 : 251 - 265 .

TOTH R , FAIGL Z , SZALAY M . An advanced timing attack scheme on RSA [C ] // The 13th International IEEE Telecommunica-tions Network Strategy and Planning Symposium .c 2008 : 1 - 24 .

KARLOF C , WAGNER D . Hidden Markov model cryptanaly-sis [C ] // Lecture Notes in Computer Science (LNCS) .c 2004 : 17 - 34 .

GREEN P J , NOAD R , SMART N P . Further hidden Markov model crytannalysis [M ] // Berlin Heidelberg : Springer , 2005 : 61 - 74 .

BRUMLEY B B , HAKALA R M . Cache-timing template at-tacks [C ] // Lecture Notes in Computer Science (LNCS) .c 2009 : 667 - 684 .

RABINER L R . A tutorial on hidden Markov models and selected applications in speech recognition [J ] . Proceedings of the IEEE , 1989 , 77 ( 2 ): 257 - 289 .

GROVER L . A fast quantum mechanical algorithm for database search [C ] // ACM Symposium on Theory of Computing .c 2008 : 212 - 219 .

Views

2368

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Intellectualized forensic technique for Android pattern locks

Survey of side channel attack on encrypted network traffic

Network slicing deployment method based on isolation level

Fault-injection attack on countermeasure algorithms of RSA-CRT cryptosystem

Security control scheme for cloud data copy based on differential privacy model

Related Author

Yan LI

Yuming XIE

Yan ZHA

Yangde WANG

Weidong QIU

Jiahao QIU

Wei LIN

Bin LU

Related Institution

School of Cyber Science and Engineering, Shanghai Jiao Tong University

Key Laboratory of Forensic Science, Shanghai Forensic Service Platform, Ministry of Justice, Academy of Forensic Science

Information Engineering University

State Key Laboratory of Mathematical Engineering and Advanced Computing

Institute of Network Security,Shandong University

⁰