CAJ | 학술논문

目前，公开研究SM4能量攻击的实验中，功耗波形都采用计算机仿真、单片机软件实现等手段，这与实际中使用的SM4硬件电路实现的功耗尚有很大差别。由此分析了一种SM4算法硬件电路实现的安全性，将它的Verilog硬件电路下载到SAKURA‐G开发板中，并采集其实际运行时的功耗信息。通过相关性能量分析技术对首轮S盒输入、首轮S盒输出、首轮输出寄存器多个可能泄露信息的位置进行攻击，还原了首轮子密钥。通过相同方法可以还原第2～4轮子密钥，最终推导128比特源密钥。最后分别从系统级和算法级探讨了相应的防御对策。
목전，공개연구SM4능량공격적실험중，공모파형도채용계산궤방진、단편궤연건실현등수단，저여실제중사용적SM4경건전로실현적공모상유흔대차별。유차분석료일충SM4산법경건전로실현적안전성，장타적Verilog경건전로하재도SAKURA‐G개발판중，병채집기실제운행시적공모신식。통과상관성능량분석기술대수륜S합수입、수륜S합수출、수륜수출기존기다개가능설로신식적위치진행공격，환원료수륜자밀약。통과상동방법가이환원제2～4륜자밀약，최종추도128비특원밀약。최후분별종계통급화산법급탐토료상응적방어대책。
Currently ,in public researches about SM4 power attack ,the power traces are generated by computer simulation or software implementation .However ,this is different with hardware implementation which is used in actual .A research of a SM4 algorithm hardware implementation is given out ,which is applied in market .we download the Verilog code to a SAKURA‐G board , and collect the power traces when it actually operates . Correlation Power Analysis method is used to analyze the leakage of the input of the S‐box in the first round ,the output of the S‐box in the first round and the output registers of the first round .We recovered the sub‐key of the first round .By the same method ,we can recover the sub‐keys of round 2‐4 ,and eventually get the 128‐bit key .