针对DSA滑动窗口算法实现的指令Cache计时攻击

摘要

在现有的针对RSA等公钥密码的指令Cache计时攻击的研究基础上,提出了一套可行的针对DSA的指令Cache计时攻击方法,并对计时信息采集、识别、密钥恢复等环节进行了研究,给出了一种随机密钥恢复算法.搭建了攻击实验平台,利用编写的间谍程序对滑动窗口算法实现的DSA签名进行了实际攻击,验证了指令Cache计时攻击方法是可行、有效的.%Digital signature algorithm (DSA) is one of the wildly used signature algorithms.Based on present work on RSA and other public key cryptography,a feasible method for instruction Cache timing attack on DSA is proposed.Some key technologies like timing information gaining and identifying,and key recovering are investigated and an algorithm for key recovering is proposed.This paper also builds an attack platform and launches an attack on slide window method DSA via the spy program.The results demonstrate the feasibility and effectiveness of the method.