A LOW MEMORY MASKING METHOD FOR ARIA TO RESIST AGAINST DIFFERENTIAL POWER ATTACK

摘要

A low memory masking method for resisting against a differential power attack for an ARIA(Academy, Research Institute, Agency) is provided to improve an operation speed by using one inverse table at once. A low memory masking method for resisting against a differential power attack for an ARIA includes the steps of: if an x + M value in which M is masked to original information x is inputted, making an MS-BOX which outputs a value to adapt a conventional S-BOX to a mask M'; previously calculating an inverse value for the masked input x + m by generating a masked inverse table in which m' becomes XOR to an inverse value of the original information x based on MInvTable(x + m)=InvTable(x) + m'; and adapting added masking to one inverse table, calculating a new table based on MSubBytes(x + m)=SubBytes(x) + M', and using the new table commonly in a plurality of S-BOX layers.