RSA-CRT密码防御算法的故障注入攻击

孔凡玉; 乔咏; 刘蓬涛; 刘晓东; 周大水

doi:10.11959/j.issn.2096-109x.2019004

您当前的位置：

首页 >

文章列表页 >

RSA-CRT密码防御算法的故障注入攻击

专栏：密码攻防技术研究及应用探索 | 更新时间：2024-06-03

- RSA-CRT密码防御算法的故障注入攻击
- Fault-injection attack on countermeasure algorithms of RSA-CRT cryptosystem
- 网络与信息安全学报 2019年5卷第1期页码：30-36
- 作者机构：
  
  1. 山东大学网络信息安全研究所，山东济南 250100
  2. 中标软件有限公司，北京 100190
  3. 山东政法学院网络空间安全学院，山东济南 250014
- 作者简介：
  
  [ "孔凡玉（1978- ），男，山东莱芜人，博士，山东大学副教授，主要研究方向为密码学与信息安全。" ]
  [ "乔咏（1977- ），男，北京人，中标软件有限公司高级工程师，主要研究方向为系统与软件安全。" ]
  [ "刘蓬涛（1980- ），女，山东蓬莱人，山东政法学院副教授，主要研究方向为密码学。" ]
  [ "刘晓东（1975- ），男，山东寿光人，博士，山东大学讲师，主要研究方向为密码学。" ]
  [ "周大水（1963- ），男，山东潍坊人，山东大学教授，主要研究方向为网络系统安全。" ]
- 基金信息：
  
  国家自然科学基金项目资助;The National Natural Science Foundation of China(61602275)
- DOI：10.11959/j.issn.2096-109x.2019004
  中图分类号： TP309
- 网络首发：2019-02，
  
  纸质出版：2019-02-15
- 稿件说明：
移动端阅览
孔凡玉, 乔咏, 刘蓬涛, 等. RSA-CRT密码防御算法的故障注入攻击[J]. 网络与信息安全学报, 2019,5(1):30-36.

Fanyu KONG, Yong QIAO, Pengtao LIU, et al. Fault-injection attack on countermeasure algorithms of RSA-CRT cryptosystem[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 30-36.
孔凡玉, 乔咏, 刘蓬涛, 等. RSA-CRT密码防御算法的故障注入攻击[J]. 网络与信息安全学报, 2019,5(1):30-36. DOI： 10.11959/j.issn.2096-109x.2019004.

Fanyu KONG, Yong QIAO, Pengtao LIU, et al. Fault-injection attack on countermeasure algorithms of RSA-CRT cryptosystem[J]. Chinese Journal of Network and Information Security, 2019, 5(1): 30-36. DOI： 10.11959/j.issn.2096-109x.2019004.

摘要

RSA 密码是在 TLS、SSL、IPSec 等网络安全协议中广泛使用的密码算法，其安全性至关重要。在FDTC 2014会议上，Rauzy和Guilley提出了改进的基于中国剩余定理的RSA密码实现算法，用于抵抗故障注入攻击。针对Rauzy和Guilley的两个RSA-CRT安全防御算法，提出了相应的故障注入攻击方法，在RSA密码运算过程中注入一个永久性错误，并利用错误的RSA运算结果，计算出RSA私钥。此攻击表明，Rauzy和Guilley的两个RSA安全实现算法不能抵抗故障注入攻击。

Abstract

As a widely-applied public-key cryptosystem in TLS

SSL and IPSec protocols

the security of RSA cryptosystem is of great importance.At FDTC 2014

Rauzy and Guilley proposed several improved countermeasure algorithms of RSA implementation based on Chinese remainder theorem

which were used to defeat fault-injection attacks.New fault-injection attacks on two of their countermeasure algorithms are proposed.During the RSA computation process

a permanent fault is injected and then a faulty RSA signature result is induced.The RSA private key can be obtained by using the faulty RSA signature and the correct result.Therefore

Rauzy and Guilley’s two countermeasure algorithms cannot resist our fault-injection attack.

关键词

Keywords

references

DIFFIE W , HELLMAN M E . New directions in cryptography [J ] . IEEE Trans Inform Theory , 1976 , 22 ( 6 ): 644 - 654 .

RIVEST R L , SHAMIR A , ADLEMAN M . A method for obtaining digital signatures and public-key cryptosystems [J ] . Communications of the ACM , 1978 , 21 ( 2 ): 120 - 126 .

KOCHER P , . Timing attacks on implementations of Diffie-Hellmann,RSA,DSS,and other systems [C ] // Advances in CryptologyCRYPTO’96 . 1996 : 104 - 113 .

BONEH D , DEMILLO R A , LIPTON R J . On the importance of checking cryptographic protocols for faults [C ] // Advances in Cryptology - EUROCRYPT 1997 . 1997 : 37 - 51 .

KOCHER P , JAFFE J , JUN B . Differential power analysis [C ] // Advances in Cryptology - CRYPTO’99 . 1999 : 388 - 397 .

SHAMIR A . Method and apparatus for protecting public key schemes from timing and fault attacks [J ] . 1999 .

JOYE M , PAILLER P , YEN S M . Secure evaluation of modular functions [C ] // 2001 International Workshop on Cryptology and Network Security . 2001 : 227 - 229 .

AUMÜLLER C , BIER P , FISCHER W , et al . Fault attacks on RSA with CRT:concrete results and practical countermeasures [C ] // Cryptographic Hardware and Embedded Systems-CHES 2002 . 2002 : 260 - 275 .

YEN S M , MOON S J , HA J . Hardware fault attack on RSA with CRT revisited [C ] // Information Security and Cryptology-ICISC 2002 . 2002 : 374 - 388 .

RAUZY P , GUILLEY S . Countermeasures against high-order fault-injection attacks on CRT-RSA [C ] // Fault Diagnosis and Tolerance in Cryptography 2014 . 2014 : 68 - 82 .

BATTISTELLO A , GIRAUD C . Lost in translation:fault analysis of infective security proofs [C ] // The Workshop on Fault Diagnosis＆ Tolerance in Cryptography . 2016 : 45 - 53 .

YEN S M , KIM S , LIM S , et al . Moon.RSA speedup with Chinese remainder theorem immune against hardware fault cryptanalysis [J ] . IEEE Transactions on Computers , 2003 , 52 ( 4 ): 461 - 472 .

YEN S M , KIM D , MOON S . Cryptanalysis of two protocols for RSA with CRT based on fault infection [C ] // Fault Diagnosis and Tolerance in Cryptography 2006 . 2006 : 53 - 61 .

WAGNER D , . Cryptanalysis of a provably secure CRT-RSA algorithm [C ] // ACM Conference on Computer and Communications Security 2004 . 2004 : 92 - 97 .

GIRAUD C . An RSA implementation resistant to fault attacks and to simple power analysis [J ] . IEEE Transactions on Computers , 2006 , 55 ( 9 ): 1116 - 1120 .

VIGILANT D , . RSA with CRT:a new cost-effective solution to thwart fault attacks [C ] // Cryptographic Hardware and Embedded Systems - CHES 2008 . 2008 : 130 - 145 .

JOYE M , TUNSTALL M . Fault analysis in cryptography [M ] . Berlin Heidelberg : SpringerPress , 2012 .

LEE S , CHOI D , CHOI Y . Improved Shamir’s CRT-RSA algorithm:revisit with the modulus chaining method [J ] .,2014,36.3:469-478. ETRI Journal , 2014 , 36 3 : 469 - 478 .

王红胜 , 纪道刚 , 张阳 , 等 . 针对 RSA-CRT 数字签名的光故障攻击研究 [J ] . 电子设计工程 , 2015 , 23 ( 6 ): 12 - 5 .

WANG H S , JI D G , ZHANG Y , et al . Optical fault attack on RSA-CRT signatures [J ] . Electronic Design Engineering , 2015 , 23 ( 6 ): 12 - 15 .

李增局 . 一种关于 CRT-RSA 算法的差分错误注入攻击 [J ] . 密码学报 , 2016 , 3 ( 6 ): 546 - 554 .

LI Z J . Differential fault attack on CRT-RSA [J ] . Journal of Cryptologic Research , 2016 , 3 ( 6 ): 546 - 554 .

KISS A , KRMER J , RAUZY P , et al . Algorithmic countermeasures against fault attacks and power analysis for RSA-CRT [C ] // International Workshop on Constructive Side-Channel Analysis and Secure Design . 2016 : 111 - 129 .

KONG F , ZHOU D S , JIANG Y L , et al . Fault attack on an improved CRT-RSA algorithm with the modulus chaining method [C ] // International Conference on Computational Science and Engineering (CSE) 2017 . 2017 : 866 - 869 .

浏览量

1203

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于工业物联网的分层多设备认证密钥协商协议

智能化的安卓手势密码取证关键技术

网络加密流量侧信道攻击研究综述

基于隔离等级的网络切片部署方法

基于差分隐私模型的云数据副本安全控制方案