一种针对AES密码芯片的相关功耗分析方法

iming at the influence of the noise and other factors in the process of classical correlation power analysis, basedon the linear correlation between Hamming weight and power traces, a correlation power analysis method for AES cryptographicchip is proposed. According to the uneven distribution of the median Hamming weight of the S-box output of thecryptographic algorithm, a set of plaintexts with strong correlation with the power traces is obtained by filtering the correctkeys and the wrong keys by using the discrimination ratio. In the stage of key recovery, the leakage points of the first twoS-boxes are found by observing this set of plaintext inputs, and the leakage intervals of the remaining 14 S-boxes are foundone by one by using the separate guessing method, so that the key information of the remaining bytes can be captured withouttraversing all power traces. The experimental analysis of AT89S52 chip shows that the proposed method can correctlyrecover the one-byte key of AES with 90% success rate by using only 9 plaintexts and corresponding power traces, and thecomputational complexity is only 4.1% of the classical correlation power analysis, which significantly improves the efficiencyof the correlation power analysis.