Publishing Service

Polishing & Checking

Frontiers of Information Technology & Electronic Engineering

ISSN 2095-9184 (print), ISSN 2095-9230 (online)

Correlation power attack on a message authentication code based on SM3

Abstract: Hash-based message authentication code (HMAC) is widely used in authentication and message integrity. As a Chinese hash algorithm, the SM3 algorithm is gradually winning domestic market value in China. The side channel security of HMAC based on SM3 (HMAC-SM3) is still to be evaluated, especially in hardware implementation, where only intermediate values stored in registers have apparent Hamming distance leakage. In addition, the algorithm structure of SM3 determines the difficulty in HMAC-SM3 side channel analysis. In this paper, a skillful bit-wise chosen-plaintext correlation power attack procedure is proposed for HMAC-SM3 hardware implementation. Real attack experiments on a field programmable gate array (FPGA) board have been performed. Experimental results show that we can recover the key from the hypothesis space of 2256 based on the proposed procedure.

Key words: HMAC-SM3, Side channel analysis, Correlation power attack, Bit-wise chosen-plaintext

Chinese Summary  <21> 针对一种基于SM3算法的消息验证码的相关能量攻击

摘要:基于哈希函数的消息验证码(HMAC)被广泛应用于身份认证和消息完整性领域。SM3函数作为中国的哈希函数在国内具有很高市场价值。基于SM3的HMAC(HMAC-SM3)侧信道安全性依旧处于被评估阶段,尤其在硬件实现下的侧信道安全性更具研究价值。在硬件实现下,存储在寄存器的中间值有明显的汉明距离泄漏。此外,SM3算法结构决定了HMAC-SM3侧信道分析难度。针对HMAC-SM3的硬件实现,提出一种技巧性的基于比特值的选择明文相关能量攻击策略。在一款现场可编程门阵列(FPGA)开发板上进行实际攻击实验。实验结果表明,利用所提选择明文攻击策略,可从2256的密钥猜测空间中恢复正确密钥。

关键词组:HMAC-SM3;侧信道分析;相关能量攻击;基于比特值的选择明文


Share this article to: More

Go to Contents

References:

<Show All>

Open peer comments: Debate/Discuss/Question/Opinion

<1>

Please provide your name, email address and a comment





DOI:

10.1631/FITEE.1800312

CLC number:

TP309

Download Full Text:

Click Here

Downloaded:

2108

Download summary:

<Click Here> 

Downloaded:

1459

Clicked:

6607

Cited:

0

On-line Access:

2019-08-05

Received:

2018-05-19

Revision Accepted:

2018-07-30

Crosschecked:

2019-07-12

Journal of Zhejiang University-SCIENCE, 38 Zheda Road, Hangzhou 310027, China
Tel: +86-571-87952276; Fax: +86-571-87952331; E-mail: jzus@zju.edu.cn
Copyright © 2000~ Journal of Zhejiang University-SCIENCE