Abstract: The memory Cache has the features of data access time uncertainty and multi-process resource sharing.The AES software implementation uses lots of table lookup operations，while these indices will affect the Cache hit or miss，and these indices have a close connection with the secret key.According to the 128 bit AES，authors use a spy process to gather cache access patterns of the AES process，after analyzing the relationship among the table lookup indices，the plaintext and the initial key during the first two rounds encryption，64 bit partial key can be recovered through the first round analysis，the extra key can be found through the second round analysis，finally the full 128 bit AES key can be successfully got.

Key words: access-driven, Cache, timing attack, Advanced Encryption Standard（AES）, table lookup indices

摘要： 高速缓存Cache具有数据访问时间不确定和多进程资源共享两大特征，AES加密快速实现中使用了大量查表操作进行Cache访问，查表索引值会影响Cache命中与否，而查表的索引值和密钥存在密切关系。针对128位AES加密算法，利用间谍进程采集AES进程加密时Cache访问特征信息，通过对AES前两轮加密过程中查表索引值、明文和初始密钥之间关系进行分析，第一轮分析可获取64位密钥，第二轮分析可获取剩余密钥，最终成功获取AES全部密钥。

关键词: 访问驱动, Cache, 计时攻击, 高级加密标准, 查表索引