|国家预印本平台
首页|FPGA上并行实现的AES的时钟毛刺故障注入及差分故障分析

FPGA上并行实现的AES的时钟毛刺故障注入及差分故障分析

lock glitch fault injection and differential fault analysis of AES implemented in parallel on FPGA

中文摘要英文摘要

大多数攻击都假设算法串行实现,然而密码算法在硬件实现往往采用并行的方式,此时,故障攻击的有效性也需要进行研究。本文实现了FPGA上时钟毛刺注入故障的平台,使用锁相环对系统时钟信号倍频得到相应频率的时钟信号,再对该信号进行不同程度的分频,四分频得到的时钟信号作为正常时钟周期,二分频得到的时钟信号相较于四分频时钟周期更短,作为毛刺时钟周期,因此可以通过二分频时钟信号的位置确定毛刺的位置。通过功能仿真和FPGA上并行实现的AES算法验证了该方案的可行性。随后,使用差分故障分析方法尝试提取密钥,进行10000次故障注入后,可以用于恢复密钥的的故障密文共有12条,我们挑选出其中8条进行密钥恢复,实验证明该方法能够有效恢复密钥,然而相较于串行实现来说注入次数增加。

Most attacks assume serial implementation of algorithms, but cryptographic algorithms are often implemented in parallel in hardware. In such cases, the effectiveness of fault attacks also needs to be studied. This article implements a platform for clock glitch injection faults on FPGA. A phase-locked loop is used to multiply the system clock signal to obtain a clock signal of the corresponding frequency. This signal is then divided by different degrees. The clock signal obtained through a quarter-frequency division is used as the normal clock cycle, while the clock signal obtained through a half-frequency division has a shorter cycle compared to the quarter-frequency clock, serving as the glitch clock cycle. Therefore, the position of the glitch can be determined by the position of the half-frequency clock signal. The feasibility of this scheme is verified through functional simulation and the parallel implementation of the AES algorithm on FPGA. Subsequently, the differential fault analysis method is used to attempt to extract the key. After 10,000 fault injections, there are 12 faulty ciphertexts that can be used to recover the key. We select 8 of them for key recovery. Experiments show that this method can effectively recover the key, but the number of injections required is increased compared to serial implementation.

宋伟、谷利泽、郑世慧

微电子学、集成电路电子电路计算技术、计算机技术

FPGA时钟毛刺ES并行实现

FPGAClock glitchAdvanced Encryption StandardParallel implementation

宋伟,谷利泽,郑世慧.FPGA上并行实现的AES的时钟毛刺故障注入及差分故障分析[EB/OL].(2024-03-27)[2025-08-23].http://www.paper.edu.cn/releasepaper/content/202403-359.点此复制

评论