高级检索
    李玮, 吴益鑫, 谷大武, 曹珊, 廖林峰, 孙莉, 刘亚, 刘志强. LBlock轻量级密码算法的唯密文故障分析[J]. 计算机研究与发展, 2018, 55(10): 2174-2184. DOI: 10.7544/issn1000-1239.2018.20180437
    引用本文: 李玮, 吴益鑫, 谷大武, 曹珊, 廖林峰, 孙莉, 刘亚, 刘志强. LBlock轻量级密码算法的唯密文故障分析[J]. 计算机研究与发展, 2018, 55(10): 2174-2184. DOI: 10.7544/issn1000-1239.2018.20180437
    Li Wei, Wu Yixin, Gu Dawu, Cao Shan, Liao Linfeng, Sun Li, Liu Ya, Liu Zhiqiang. Ciphertext-Only Fault Analysis of the LBlock Lightweight Cipher[J]. Journal of Computer Research and Development, 2018, 55(10): 2174-2184. DOI: 10.7544/issn1000-1239.2018.20180437
    Citation: Li Wei, Wu Yixin, Gu Dawu, Cao Shan, Liao Linfeng, Sun Li, Liu Ya, Liu Zhiqiang. Ciphertext-Only Fault Analysis of the LBlock Lightweight Cipher[J]. Journal of Computer Research and Development, 2018, 55(10): 2174-2184. DOI: 10.7544/issn1000-1239.2018.20180437

    LBlock轻量级密码算法的唯密文故障分析

    Ciphertext-Only Fault Analysis of the LBlock Lightweight Cipher

    • 摘要: LBlock算法是在2011年ANCS会议上提出来的一种轻量级分组密码算法. 它是一种具有Feistel结构的典型密码,并且广泛应用于物联网安全中.提出了针对Feistel结构的LBlock密码算法的新型唯密文故障分析方法,通过在算法的倒数第4轮导入故障,分别使用6种区分器对算法进行分析.在原有的SEI区分器、GF区分器、GF-SEI双重区分器、MLE区分器基础上,提出了GF-MLE双重区分器和MLE-SEI双重区分器作为新型区分器.仿真实验结果表明:可以在较短的时间内使用较少的故障数且以99%的成功概率恢复出主密钥并破译算法,其中提出的2种新型区分器比原有区分器所需故障数更少、效率更高.由此说明唯密文故障攻击对LBlock算法的安全性构成了巨大的威胁.

       

      Abstract: The lightweight cipher LBlock was proposed at ANCS in 2011. It has the structure of Feistel and is widely applied in the security of Internet of things (IoT). In this paper, a cipher-text fault analysis for LBlock cipher by injecting faults is proposed, and it is analyzed by 6 distinguishers in the last but 3 rounds. On the basis of original distinguishers as SEI, GF, GF-SEI, MLE, we propose GF-MLE and MLE-SEI distinguishers as new distinguishers. The simulation experiments show that the secret key can be recovered with over 99% success probability in a short period of time, and these two new distinguishers can not only improve the attacking efficiency, but also decrease the number of faults. This shows that the ciphertext-only fault analysis poses a great threat to the security of LBlock cipher.

       

    /

    返回文章
    返回