EMV应用密文的差分错误注入分析

彭乾; 李增局; 史汝辉

doi:10.11959/j.issn.2096-109x.2016.00044

您当前的位置：

首页 >

文章列表页 >

EMV应用密文的差分错误注入分析

学术论文 | 更新时间：2024-06-03

- EMV应用密文的差分错误注入分析
- Differential fault analysis on EMV application cryptogram
- 网络与信息安全学报 2016年2卷第4期页码：64-72
- 作者机构：
- 作者简介：
  
  [ "彭乾（1982-），男，蒙古族，内蒙赤峰人，硕士，国家金融IC卡安全检测中心工程师，主要研究方向为金融IC卡、金融Pos机安全技术。" ]
  [ "李增局（1982-），男，山东莘县人，硕士，国家金融 IC卡安全检测中心工程师，主要研究方向为侧信道、错误注入、密码学工程实现以及借贷记交易安全性等。" ]
  [ "史汝辉（1985-），男，山东烟台人，硕士，国家金融IC卡安全检测中心工程师，主要研究方向为侧信道、错误注入、密码学工程实现以及借贷记交易安全性等。" ]
- 基金信息：
  
  国家科技重大专项基金资助项目;National Science and Technology Major Project(2014ZX01032401)
- DOI：10.11959/j.issn.2096-109x.2016.00044
  中图分类号： TP309.7
- 网络首发：2016-04，
  
  纸质出版：2016-04-15
- 稿件说明：
移动端阅览
彭乾, 李增局, 史汝辉. EMV应用密文的差分错误注入分析[J]. 网络与信息安全学报, 2016,2(4):64-72.

Qian PENG, Zeng-ju LI, Ru-hui SHI. Differential fault analysis on EMV application cryptogram[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 64-72.
彭乾, 李增局, 史汝辉. EMV应用密文的差分错误注入分析[J]. 网络与信息安全学报, 2016,2(4):64-72. DOI： 10.11959/j.issn.2096-109x.2016.00044.

Qian PENG, Zeng-ju LI, Ru-hui SHI. Differential fault analysis on EMV application cryptogram[J]. Chinese Journal of Network and Information Security, 2016, 2(4): 64-72. DOI： 10.11959/j.issn.2096-109x.2016.00044.

摘要

研究了EMV规范中应用密文的生成过程，发现过程密钥存在部分冗余位，结合DES算法S盒的压缩特性，利用基于碰撞的safe-error攻击实现对EMV规范中应用密文主密钥的破解。提出了针对应用密文生成的差分错误注入的物理模型和实施步骤，深入分析了影响攻击效果的2个关键因素（密钥错误产生概率和碰撞概率），尤其是对不同错误模型进行了理论数据分析。实验分析表明，实际攻击中，只要不同密钥的碰撞概率差大于0.003 5即可区分，结果表明，过程密钥的冗余位提高了碰撞概率，有利于对正确密钥的区分。最后，针对该攻击方法，提出了几种防御方案。

Abstract

The process of application cryptogram in EMV was researched and dummy bits in session key were found.Based on the session key’s dummy bits and compressive property of DES’s Sbox

much information of the application cryptogram master key was got by using safe-error attack.The differential fault attack model and steps to implement the attack were proposed

two key factors(the probability of generating wrong key and the probability of collision happening) affecting an attacking result were analyzed.The theoretical result and simulation of the attack were given.The experiment results show that the two keys could be distinguished in a real attacking when the dif-ference of two key’s collision probability was bigger than 0.003 5.The dummy bits in the key will increase the dif-ference and make distinguishing easier.Finally

several countermeasures against the attack were proposed.

关键词

Keywords

references

EMV.Integrated circuit card specifications for payment systems,book 2:security and key management,version4.2 [EB/OL ] . http://www.emvco.com. http://www.emvco.com. .

BIHAM E , SHAMIR A . Differential fault analysis of secret key cryptosystems [J ] . Lncs , 1999 , 1294 : 513 - 525 .

SCHRAMM K , WOLLINGER T , PAAR C . A new class of colli-sion attacks and its application to DES [C ] // International Confer-ence Fast Software Encryption(FSE) .c 2003 : 206 - 222 .

RIVAIN M . Differential fault analysis on DES middle rounds [J ] . Lecture Notes in Computer Science , 2009 , 5747 : 457 - 469 .

LEE C . A new approach of differential fault analysis on block ciphers with S-box [J ] . International Journal on Information , 2013 ,( 16 ): 1915 - 1928 .

CORON J S , NACCACHE D , TIBOUCHI M . Fault attacks against EMV signatures [C ] // International Conference Topics in Cryptology .c 2010 : 208 - 220 .

CONTINI S , YIN Y L . Forgery and partial key-recovery attacks on HMAC and NMAC using hash collisions [M ] // Advances in Cryp-tology.Berlin Heidelberg:Springer , 2006 : 37 - 53 .

YEN S M , KIM S , LIM S , et al . A countermeasure against one physical cryptanalysis may benefit another attack [C ] // International Conference Information Security and Cryptology .c 2002 : 414 - 427 .

YEN S M , JOYE M . Checking before output may not be enough against fault-based cryptanalysis [J ] . IEEE Transactions on Com-puters , 2002 , 49 ( 9 ): 967 - 97 .

浏览量

1693

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据