A Design of DES Encryption Chip with Resistance to Differential Power AnalysisA Design of DES Encryption Chip with Resistance to Differential Power Analysis.docVIP

A Design of DES Encryption Chip with Resistance to Differential Power Analysis LI Rui, CUI Xiaoxin WEI Wei, WU Di, LIAO Kai, LIAO Nan, MA Kaisheng, YU Dunshan Institute of Microelectronics, School of Electronics Engineering and Computer Science, Peking University, Beijing 100871; Corresponding author, E-mail: cuixx@pku.edu.cn Abstract The authors propose a novel countermeasure which associates masking with RDI (random delay in-sertion). Further, multi-masking instead of transformed masking is proposed in order to defend DPA (differential power analysis) attack based on Hamming distance model. The combined countermeasure is implemented on Data Encryption Standard. The results show that combined countermeasure can defend DPA attack with 105 power traces, and increase 40% ability against DPA attack. Key words DPA; DES; multiple masking; RDI; combined countermeasure 抗差分能量攻击的DES加密芯片设计 李睿 崔小欣 魏为 吴迪 廖凯 廖楠 马恺声 于敦山 北京大学信息科学技术学院微电子学研究院, 北京100871; 通信作者, E-mail:cuixx@pku.edu.cn 摘要 提出将掩码和随机延时两种策略综合的方法以增强加密算法的抗攻击性能, 同时, 提出一种多掩码方案取代传统的单一掩码, 进一步增强抵御以汉明重量为模型的能量攻击。此综合策略应用于DES加密设备, 结果表明, 能够成功抵御105条能量迹攻击, 抗攻击性能提高40%。 关键词 差分能量攻击; DES; 多重掩码; 随机嵌入延时; 组合策略 中图分类号 TN492 The security of mobile phone and IC has drawn attention since DPA (differential power analysis) was firstly proposed by Kocher et al.[1]in 1999. DPA has been successfully applied on many encryption algorithm implementations, such as DES and AES [2?3] . Different countermeasures are proposed to secure the cryptographic device against DPA attack. Masking and hiding are two primary countermeasures against DPA. Akkar et al.[4]proposed transformed masking, however, this countermeasure can’t resist DPA attack based on Hamming distance model by our experiment result. Instead of transformed masking, we propose multiple masking which uses different masks in each round of encryption. RDI (random delay insertion) is a typical countermeasure belonging to hiding, which was proposed by Clavier et al[5]. In