Research On Differential Power Analysis Method Of HMAC-SM3

Power analysis recovers the key information in cryptographic devices by analyzing the power consumption information leaked during the cryptographic algorithm being operated in target devices.HMAC is a hash-based message authentication code construction method.When the HMAC cryptographic algorithm is implemented in cryptographic devices,it is vulnerable to power analysis attacks.SM3 cryptographic hash algorithm is a new hash algorithm delivered by the State Encryption Administration in recent years.Therefore,there is few research devoted on the power analysis method of HMAC-SM3.This paper is devoted to the research on differential power analysis(DPA)of HMAC-SM3,and propose a DPA attack strategy which is later validated by a DPA attack experiment.The main work and innovation points of the research can be summarized as follows:1.We make a specific analysis of the structure of HMAC-SM3,determine the attack targets of the power analysis attack and propose a DPA attack strategy for the software-based and hardware-based implementation of HMAC-SM3.2.We finish the software-based implementation and FPGA hardware-based implementation of HMAC-SM3,and build the hardware and software experiment system used for power analysis.Then,we launch a DPA to both software-based implementation and hardware-based implementation and obtain ideal results,which show the correctness and feasibility of the proposed theory.3.Compared to some other popular cryptographic algorithms,HMAC-SM3's operations are far less non-linear.As a result,the power consumption feature of the target operation is not so characteristic,which significantly add the difficulty of DPA attack.We make use of the known plaintext and key bytes calculating the correlation to locate the operation of target parameters.Then,we launch DPA in these intervals,which overcome the former difficulties and leads to the correct results.4.What's more,we launch both time domain DPA and frequency domain DPA,and compare their results.The results show that,frequency domain DPA not only can recover the target parameters correctly,but also need less power consumption traces compared to the time domain DPA.