Abstract:
In accordance with an embodiment, the logical exclusive operation on the random number RAND and the OPc value are performed several times, the logical operation and encryption processing using a random number RAND and logical operation and encryption processing using a random number S are done in any order, which brings an increase of an attack complexity as to whether to calculate the correlation coefficient from the power consumption waveform at any point when analyzing the correlation power, whereby it is possible to defend the CPA attack effectively.
Abstract:
Disclosed are a side channel analysis system that may facilitate to perform side channel analysis on a device whose dedicated side channel analysis board does not exist such as a smartphone, and a side channel analysis method using the same. The side channel analysis system includes a side channel analysis device that outputs control signals for side channel analysis and performs side channel analysis based on received measurement signals, a device to be analyzed that performs generation and encryption function of optical signals for side channel measurement, according to the control signals provided from the side channel analysis device, an optical sensor module that detects the optical signals generated from the device to be analyzed, and generates and outputs trigger signals according to the detected optical signals, and a signal measurement device that measures waveforms of at least one signal generated according to an encryption operation of the device to be analyzed using the trigger signals output from the optical sensor module, and provides the measured waveforms to the side channel analysis device.
Abstract:
A white box encryption device is provided. The device included in a second device among a first device and the second device performing wired or wireless communication, and performing an encryption/decryption operation using a white box encryption table consisting of a look-up table set, includes, a non-volatile memory configured to store an incomplete look-up table set in which at least one look-up table or a portion of entire look-up table is removed, a volatile memory configured to store the incomplete look-up table set received from the non-volatile memory and the at least one look-up table received from the first device at a time of the encryption/decryption operation, and construct a complete look-up table set, and an encryption/decryption operation unit configured to perform the encryption/decryption operation using the complete look-up table set.
Abstract:
A side channel analysis apparatus based on a profile includes a waveform collection unit configured to collect leaked information from a target device of a side channel analysis; and a preprocessing unit configured to preprocess a waveform data correspond to the leaked information collected from the waveform collection unit before analyzing same. Further, the side channel analysis apparatus includes an analysis unit configured to analyze the waveform data preprocessed in the preprocessing unit; and a profile configuration unit configured to make each process of the waveform collection unit, the preprocessing unit, and the analysis unit into a process and configure a profile for managing each process by connection of each process.
Abstract:
Provided is a white-box cryptography method and apparatus for preventing side channel analysis. An input plain text is encrypted and output according to white-box cryptography and, in this case, the value output according to the encryption includes a first value corresponding to a value obtained by masking an intermediate value obtained by encrypting the plain text with a mask and a second value corresponding to the mask.
Abstract:
Provided are an operation method and a secure terminal for performing the method. The operation method may include receiving, from a user terminal, a plain text on which an external encoding operation is to be performed, performing the external encoding operation on the plain text, and transmitting the external encoding operated plain text to the user terminal, and the operation method may include receiving, from a user terminal, a cryptogram in which a white-box cryptography operation is performed on an external encoding operated plain text; performing an external decoding operation on the cryptogram; and transmitting the external decoding operated cryptogram to the user terminal.
Abstract:
Disclosed are a white box encryption apparatus and method. The white box encryption method includes performing an encryption operation using a plurality of white box encryption tables for each of a plurality of rounds, and mixing arrangement of result tables output for each round.