针对椭圆曲线密码的差分错误攻击研究综述

摘要

The elliptic curve cryptogram(ECC)is a cryptosystem with the highest intensity so far. With the development of the integrated circuit and smart card technology,and large⁃scale applications of the embedded systems,the security of ECC is threatened by side channel attack. The differential fault attack (DFA) is a new attack mode of side channel attack,by which the attacker can influence on the smart card with physical means,so as to induce the error message in decrypting process,and then the private key information is recovered in combination with differential analysis. On the basis of the study and analysis of public key cryptography failure at home and abroad,the fault analysis using ECC algorithm is researched and reviewed in the as⁃pects of attack methods and defense methods. The advantages and disadvantages of each attack method are pointed,and the fu⁃ture development trend is predicted.%椭圆曲线密码（ECC）是迄今为止具有最高强度的密码系统。随着集成电路、智能卡技术的发展以及嵌入式系统大规模的应用，其安全性也受到了边信道攻击的威胁。差分错误攻击（DFA）是旁路攻击中的一种新的攻击方式，攻击者通过物理手段影响智能卡，从而在解密过程中诱导出错误信息，再结合差分分析恢复出私钥信息。立足于国内外对公钥密码故障分析研究的基础上，在攻击方法和防御方法两方面对ECC算法的故障分析进行了研究概述，并指出了每个攻击方法的优缺点，预测了未来的研究方向。