이중 멱승과 오류 확산 기법을 이용한 RSA-CRT에서의 물리적 공격 대응 방법
Countermeasure for Physical Attack in RSA-CRT using Double Exponentiation Algorithm and Fault Infective Method
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Many experimental results shows that RSA-CRT algorithm can be broken by fault analysis attacks. We analyzed the previous fault attacks and their countermeasures on RSA-CRT algorithm and found an weakness of the countermeasure proposed by Abid and Wang. Based on these analyses, we propose a new countermeasure which uses both double exponentiation and fault infective computation method. The proposed method efficiently computes a fault verification information using double exponentiation. And, it is designed to resist simple power analysis attack and (N-1) attack.
Abstract
Many experimental results shows that RSA-CRT algorithm can be broken by fault analysis attacks. We analyzed the previous fault attacks and their countermeasures on RSA-CRT algorithm and found an weakness of the countermeasure proposed by Abid and Wang. Based on these analyses, we propose a new countermeasure which uses both double exponentiation and fault infective computation method. The proposed method efficiently computes a fault verification information using double exponentiation. And, it is designed to resist simple power analysis attack and (N-1) attack.
참고문헌 (19)
- R.Rivest, "A method for obtaining digital signature and public key cryptosystems", Comm.of ACM, 21(2), pp.120~126 (1978)
- C.Couvreur, "Fast decipherment algorithm for RSA public-key cryptosystem", Electronics Letters, 18(21), pp.905~907 (1982)
- J.S.Coron, "Resistance Against Differential Power Analysis for Elliptic Curve Cryptosystems", CHES'99,LNCS 1717, pp.292~302 (1999)
- D.Boneh, "On the importance of checking cryptographic protocols for faults", EUROCRYPT'97,LNCS 1233, pp.37~51 (1997)
- M.Joye, "Chinese remaindering based cryptosystems in the presence of faults", Journal of Cryptology, 12(4), pp.241~245 (1999)
- C.Aumuller, "Fault attack on RSA with CRT:Concrete results and practical countermeasures", CHES'02,LNCS 2553, pp.260~275 (2002)
- C.Kim, "Fault Attacks for CRT Based RSA:New Attacks,New Results,and New Countermeasures", WISTP'07,LNCS 4462, pp.215~228 (2007)
- A.Shamir, "Mehtod and apparatus for protecting public key schemes from timing and fault attacks", United States Patent p-5991415, ~ (1999)
- S.Yen, "RSA speedup with residue number system immune against hardware fault cryptanalysis", ICISC'01,LNCS 2288, pp.397~413 (2001)
- F.Funaroli, "Blinded fault resistant exponentiation", FDTC '06,LNCS 4236, pp.62~70 (2006)
- Z.Abid, "Countermeasures for Hardware Fault Attack in Multi-Prime RSA Cryptosystems", International Journal of Network Security, 6(2), pp.190~200 (2008)
- B. Chevallier-Mames, "Low-cost solutions for preventing simple side-channel analysis: side-channel atomicity", IEEE Transactions on Computers, 53(6), pp.760~768 (2004)
- S.Yen, "Power Analysis by Exploiting Chosen Message and Internal Collisions-Vulnerability of Checking Mechanism for RSA Decryption", Mycrypt'05,LNCS 3715, pp.183~195 (2005)
- M.Joye, "Secure evaluation of modular functions", International Workshop on Cryptology and Network Security-2001, pp.227~229 (2001)
- C.Giraud, "An RSA Implementation Resistant to Fault Attacks and Simple Power Analysis", IEEE Trans on Computers, 55(9), pp.1116~1120 (2006)
- J.Blomer, "A new CRT-RSA algorithm secure against Bellcore attacks", 10th ACM Conference on Computer and Communications Security, pp.311~320 (2003)
- D.Wagner, "Cryptanalysis of a provably secure CRT-RSA algorithm", 11th ACM Conference on Computers and Communications Security, pp.92~97 (2004)
- C.Kim, "How can we overcome both side channel analysis and fault attacks on RSA-CRT?", FDTC'07, pp.21~29 (2007)
- J.Ha, "A New CRT-RSA Scheme Resistant to Power Analysis and Fault Attacks", International Conference on Convergence and Hybrid Information Technology-ICCIT'08, pp.351~356 (2008)