CRYSTALS-Dilithium 대상 비프로파일링 기반 전력 분석 공격 성능 개선 연구
A Study on Performance Improvement of Non-Profiling Based Power Analysis Attack against CRYSTALS-Dilithium
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 미국의 국립표준기술연구소(NIST: National Institute of Standards and Technology)는 양자 내성 암호(PQC: Post-Quantum Cryptography, 이하 PQC) 표준화 사업을 진행하여 4개의 표준 암호 알고리즘을 발표하였다. 본 논문에서는 전자서명 분야에서 표준화가 확정된 CRYSTALS-Dilithium 알고리즘을 이용하여 서명을 생성하는 과정에서 동작하는 다항식 계수별 곱셈 알고리즘을 대상으로 비프로파일링 기반 전력 분석 공격인 CPA(Correlation Power Analysis)나 DDLA(Differential Deep Learning Analysis) 공격에 의해 개인 키가 노출될 수 있음을 실험을 통해 증명한다. ARM-Cortex-M4 코어에 알고리즘을 탑재하여 실험 결과, CPA 공격과 DDLA 공격에서 개인 키 계수를 복구할 수 있음을 확인하였다. 특히 DDLA 공격에서 StandardScaler 전처리 및 연속 웨이블릿 변환을 적용한 전력 파형을 이용하였을 때 공격에 필요한 최소 전력 파형의 개수가 줄어들고 NMM(Normalized Maximum Margin) 값이 약 3배 증가하여 공격 성능이 크게 향상됨을 확인하였다.
Abstract
The National Institute of Standards and Technology (NIST), which is working on the Post-Quantum Cryptography (PQC) standardization project, announced four algorithms that have been finalized for standardization. In this paper, we demonstrate through experiments that private keys can be exposed by Correlation Power Analysis (CPA) and Differential Deep Learning Analysis (DDLA) attacks on polynomial coefficient-wise multiplication algorithms that operate in the process of generating signatures using CRYSTALS-Dilithium algorithm. As a result of the experiment on ARM-Cortex-M4, we succeeded in recovering the private key coefficient using CPA or DDLA attacks. In particular, when StandardScaler preprocessing and continuous wavelet transform applied power traces were used in the DDLA attack, the minimum number of power traces required for attacks is reduced and the Normalized Maximum Margines (NMM) value increased by about 3 times. Conseqently, the proposed methods significantly improves the attack performance.
참고문헌 (19)
- P. Shor, "Polynomial time algorithms for discrete logarithms and factoring on a quantum computer", SIAM Journal on Computing, 26(5), pp.1484~1509 (1997)
- L. Grover, "A fast quantum mechanical algorithm for database search", ACM symposium on Theory of Computing(STOC’96), pp.212~219 (1996)
- Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process, "D. Moody", National Institute of Standards and Technology, ~ (2022)
- P. Kocher, "Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems", CRYPTO’96, LNCS, 1109, pp.104~113 (1996)
- D. Genkin, "Get your hands off my laptop : physical side-channel key-extraction attacks on PCs", Journal of Cryptographic Engineering, 5(2), pp.95~112 (2015)
- D. Genkin, "RSA key extraction via low-bandwidth acoustic cryptanalysis", CRYPTO’14, LNCS, 8616, pp.444~461 (2014)
- S. Chari, "Template attacks", CHES’02, LNCS, 2523, pp.13~28 (2003)
- G. Hospodar, "Machine learning in side-channel analysis : a first study", Journal of Cryptographic Engineering, 1(4), pp.293~302 (2011)
- L. Lerman, "Template attacks versus machine learning revisited and the curse of dimensionality in side-channel analysis", COSADE’15, LNCS, 9064, pp.20~33 (2015)
- L. Lerman, "A machine learning approach against a masked AES", Journal of Cryptographic Engineering, 5, pp.123~139 (2015)
- P. Kocher, "Differential power analysis", CRYPTO’ 99, LNCS, 1666, pp.388~397 (1999)
- E. Brier, "Correlation power analysis with a leakage model", CHES'04, LNCS, 3156, pp.16~29 (2004)
- B. Timon, "Non-profiled deep learning-based side-channel attacks with sensitivity analysis", IACR Transactions on Cryptographic Hardware and Embedded Systems, 2019(2), pp.107~131 (2019)
- D. Bae, "Non-profiling deep learning side-channel attack with Hamming weight-based binary labels", Conference on Information Security and Cryptography(CISC-W’20) (2020)
- L. Ducas, "CRYSTALS-Dilithium : A Lattice-Based Digital Signature Scheme", IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(1), pp.238~268 (2018)
- P. A. Fouque, "Falcon : Fast-Fourier Lattice-based Compact Signatures over NTRU, Specification v1. 2", NIST Post-Quantum Cryptography Standardization Round 3, ~ (2020)
- M. Tunstall, "Correlation Power Analysis of Large Word Sizes", IET Irish Signals and Systems Conference (ISSC), pp.145~150 (2007)
- Z. Chen, "An Efficient Non-Profiled Side-Channel Attack on the CRYTSTALS-Dilithium Post-Quantum Signature", 2021 IEEE 39th International Conference on Computer Design (ICCD), pp.583~590 (2021)
- D. Bae, "Performance Metric for Differential Deep Learning Analysis", Journal of Internet Services and Information Security (JISIS), 11(2), pp.22~33 (2021)