摘要
给出一种简单的电磁信号的获取办法,说明密码芯片的电磁信号能够用一个手工绕制的金属线圈获取,并且其信号幅度和操作数的汉明重量相关.在描述模板攻击原理和步骤的基础上,介绍了针对密码芯片的电磁模板分析攻击,并且针对一个单片机(AT89C52)上实现的DES密码系统进行了电磁模板分析攻击实验,实验成功恢复了DES第16轮使用的48位子密钥.
In this paper, it is shown that the electromagnetic （EM） emanation of cryptographic chips could be captured easily with a handmade loop probe, and its amplitude is related to the hamming weight of the related operands. Based on the description of the principle and steps of template analysis, EM template analysis attack against cryptographic chips was introduced. Additionally, an experiment of EM template analysis attack against a singlechip （AT89C52） implemented DES was given, and the 48-bit subkey used in the 16th round of DES was recovered.
出处
《微电子学与计算机》
CSCD
北大核心
2010年第1期1-4,8,共5页
Microelectronics & Computer
基金
国家自然科学基金项目(60571037)
国家"八六三"计划项目(2007AA01Z454)
关键词
电磁
模板分析
密码芯片
DES
EM
template analysis
cryptographic chips
DES
