Potestad-Ordóñez Francisco Eugenio, Tena-Sánchez Erica, Mora-Gutiérrez José Miguel, Valencia-Barrero Manuel, Jiménez-Fernández Carlos Jesús
Department of Electronic Technology, University of Seville, 41004 Sevilla, Spain.
Microelectronic Institute of Seville (IMSE-CNM-CSIC/US), 41092 Sevilla, Spain.
Sensors (Basel). 2021 Nov 16;21(22):7596. doi: 10.3390/s21227596.
The security of cryptocircuits is determined not only for their mathematical formulation, but for their physical implementation. The so-called fault injection attacks, where an attacker inserts faults during the operation of the cipher to obtain a malfunction to reveal secret information, pose a serious threat for security. These attacks are also used by designers as a vehicle to detect security flaws and then protect the circuits against these kinds of attacks. In this paper, two different attack methodologies are presented based on inserting faults through the clock signal or the control signal. The optimization of the attacks is evaluated under supply voltage and temperature variation, experimentally determining the feasibility through the evaluation of different Trivium versions in 90 nm ASIC technology implementations, also considering different routing alternatives. The results show that it is possible to inject effective faults with both methodologies, improving fault efficiency if the power supply voltage decreases, which requires only half the frequency of the short pulse inserted into the clock signal to obtain a fault. The clock signal modification methodology can be extended to other NLFSR-based cryptocircuits and the control signal-based methodology can be applied to both block and stream ciphers.
加密电路的安全性不仅取决于其数学公式,还取决于其物理实现。所谓的故障注入攻击,即攻击者在密码运算过程中插入故障以导致故障发生从而泄露秘密信息,对安全性构成了严重威胁。这些攻击也被设计者用作检测安全漏洞的手段,进而保护电路免受此类攻击。本文提出了两种不同的攻击方法,分别是通过时钟信号或控制信号插入故障。在电源电压和温度变化的情况下评估攻击的优化情况,通过在90纳米ASIC技术实现中对不同版本的Trivium进行评估来实验确定可行性,同时也考虑不同的布线方案。结果表明,两种方法都可以注入有效的故障,如果电源电压降低,故障效率会提高,此时仅需将插入时钟信号的短脉冲频率减半就能获得故障。基于时钟信号修改的方法可以扩展到其他基于非线性反馈移位寄存器(NLFSR)的加密电路,基于控制信号的方法可应用于分组密码和流密码。