arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2008.03290cs.CR
收藏

一种基于硬件木马的AES内核篡改攻击

A Novel Tampering Attack on AES Cores with Hardware Trojans

Ayush Jain, Ujjwal Guin

阅读 PDF
arXiv 页面 ↗HTML 原文 ↗

摘要：

近年来，由于半导体制造的进步和每个晶体管成本的降低，集成电路（IC）中的密码原语的实现持续增加。硬件实现使加密操作更快，更节能。然而，已经提出了旨在提取秘密密钥以破坏这些原语的安全性的各种硬件攻击。针对目前广泛使用的高级加密标准（AES）分组密码算法，分析了其在篡改攻击下的脆弱性。我们提出的攻击依赖于由不受信任的代工厂在网表中植入硬件木马，该代工厂可以设计和实现这样的木马，因为它可以访问设计布局和掩码信息。硬件特洛伊木马的激活通过阻止所有先前回合的密钥相关计算的影响来修改特定回合的输入数据。我们建议使用一个顺序的硬件木马来提供有效载荷在输入的内部轮实现这种修改的数据。一旦特洛伊木马被激活，所有内部子密钥，以及最后的秘密密钥都可以从观察到的密文中计算出来。我们实现了我们提出的篡改攻击的顺序硬件木马插入到一个128位的AES设计从OpenCores基准套件和报告的面积开销，以证明拟议的篡改攻击的可行性。

英文摘要：

The implementation of cryptographic primitives in integrated circuits (ICs) continues to increase over the years due to the recent advancement of semiconductor manufacturing and reduction of cost per transistors. The hardware implementation makes cryptographic operations faster and more energy-efficient. However, various hardware attacks have been proposed aiming to extract the secret key in order to undermine the security of these primitives. In this paper, we focus on the widely used advanced encryption standard (AES) block cipher and demonstrate its vulnerability against tampering attack. Our proposed attack relies on implanting a hardware Trojan in the netlist by an untrusted foundry, which can design and implement such a Trojan as it has access to the design layout and mask information. The hardware Trojan's activation modifies a particular round's input data by preventing the effect of all previous rounds' key-dependent computation. We propose to use a sequential hardware Trojan to deliver the payload at the input of an internal round for achieving this modification of data. All the internal subkeys, and finally, the secret key can be computed from the observed ciphertext once the Trojan is activated. We implement our proposed tampering attack with a sequential hardware Trojan inserted into a 128-bit AES design from OpenCores benchmark suite and report the area overhead to demonstrate the feasibility of the proposed tampering attack.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

↑