Design Of High-performance And Small-area XTS-SM4 Cipher Circuit Against Side-channel Attack

In recent years,with the popularization of storage devices,the security of stored personal sensitive data is also gaining more and more attention.The SM4 algorithm is a self-designed encryption standard in our country,its high-performance design excessively pursues the data processing speed but ignores the area overhead,so the design is not suitable for the occasions where the speed and the area are limited,such as disk encryption.Since XTS encryption mode is currently the most suitable narrow-band encryption mode for disk encryption,combining it with SM4 encryption algorithm,the design of a XTS-SM4 encryption circuit with high performance,small area and SCA-resistance has important applications.This thesis focuses on the study of a XTS-SM4 encryption circuit with high performance,small area and SCA-resistance.Firstly,according to the characteristics of XTS encryption mode and SM4encryption algorithm,the design scheme of XTS-SM4 encryption circuit is proposed.A small-area S-box is designed by using the composite domain decomposition technique and the delay-aware common sub-expression elimination.And then,a high-performance and small-area XTS-SM4 encryption circuit is implemented based on the pipeline structure and the SM4 IP core multiplexing method.Secondly,the XTS-SM4 encryption circuit is effectively attacked by differential power attack(DPA)and differential fault attack(DFA),which provides the verify foundation for the subsequent research on the XTS-SM4encryption circuit against the bypass attack.The XTS-SM4 encryption circuit is synthesized using the Synopsys DC synthesis tool and Xilinx ISE software.The results show that the area of the circuit is 2082349.25?m~2 and the throughput of the circuit reaches 32Gbps,which is 22%higher than the maximum throughput 26.22Gbps of the known SM4 encryption circuit.By simulating random injection errors,the security of S-box based on error detection mechanism is verified and the security of XTS-SM4 encryption circuit is analyzed theoretically.Based on the designed DPA platform,the mask XTS-SM4 encryption circuit is attacked and the correct key can not be obtained successfully,Experimental result shows that the mask XTS-SM4 encryption circuit can resist DPA successfully.