计算机工程与应用 ›› 2017, Vol. 53 ›› Issue (10): 8-12.DOI: 10.3778/j.issn.1002-8331.1701-0148

• 热点与综述 • 上一篇    下一篇

RSA密码核时间侧信道检测与量化分析

毛保磊,慕德俊,胡  伟,张慧翔,秦茂源   

  1. 西北工业大学 自动化学院,西安 710072
  • 出版日期:2017-05-15 发布日期:2017-05-31

Detection and quantitative analysis of timing channel in RSA cryptographic core

MAO Baolei, MU Dejun, HU Wei, ZHANG Huixiang, QIN Maoyuan   

  1. School of Automation, Northwestern Polytechnical University, Xi’an 710072, China
  • Online:2017-05-15 Published:2017-05-31

摘要: 攻击者通过RSA时间侧信道可有效破解其密钥。但目前缺乏有效的方法检测和评估RSA硬件密码核时间侧信道信息泄漏。针对此问题,利用门级信息流追踪方法检测RSA时间侧信道;提出一种测试框架对密钥位泄露进行定性检测和定量分析。通过对五种不同RSA密码硬件体系结构进行案例研究,实验结果显示,所提方法可有效评估和验证迁移技术对RSA时间侧信道信息泄露的影响。该测试方法可有效辅助硬件设计人员权衡时间侧信道安全性、硬件资源消耗和性能等指标。

关键词: 时间信道, 信息流, RSA算法, 硬件设计

Abstract: The attackers can extract the RSA private key by timing channel. Currently, there is a lack of effective method to detect and evaluate information leakage from RSA hardware timing channel. In this paper, Gate Level Information Flow tracking(GLIFT) method is employed to detect RSA timing channel and a test framework is proposed to evaluate RSA timing channel qualitatively and quantitatively. By case studies on 5 different RSA architectures, the experimental results show that the test framework can evaluate the effect of mitigation techniques on reducing and eliminating information leakage from RSA timing channel effectively and efficiently, which indicates that the test framework can help designers to tradeoff timing channel security, resource utilization and performance.

Key words: timing channel, information flow, RSA algorithm, hardware design