Research On Fault Attack Of A Lightweight Block Cipher Skinny

DES,AES and other traditional block ciphers play an important role in the field of information security,however,they have a large hardware cost.Since the rise of Internet of things,traditional block ciphers are difficult to play a role in chips which used in Internet of things because of the high hardware cost.Lightweight block ciphers are emerged as the times require.SKINNY is a lightweight block cipher which can run efficiently on hardware platform.It can provide good throughput and less gate circuit components under the premise of ensuring reasonable area cost.Because of its good comprehensive conditions and certain use value,it should be fully tested to make corresponding protection.The main work and innovation of this paper are as follows:1.Use differential fault attack on SKINNY-64-n in r-th round.Differential fault attack is a cryptanalysis method which uses the characteristics of cryptographic algorithm,injects fault into security chip by special means,and attacks cryptographic algorithm with differential analysis.Because of its simple principle,this method has been used to attack many cryptographic algorithms since it was proposed.Although it is difficult to inject faults,differential fault attack will become very harmful when the fault injection technology is mature.Through the differential fault attack on SKINNY-64-n(tk=1)algorithm in r-th round,it is found that it can not resist the differential fault attack,and the r-th round key can be obtained through 16 fault injections.2.Reduce the number of fault injection required to obtain the key of r-th round by differential fault attack on SKINNY-64 algorithm.Fault injection times can be reduced when obtaining the r-th round key by using differential fault attack on SKINNY-64-n in(r-1)-th round.Data shows that the r-th round key can be obtained by 8 times of fault injection in(r-1)-th round.3.Use persistent fault attack on SKINNY-64-n in r-th round.Persistent fault attack can not only overcome the defect that the fault is difficult to inject,but also can break the protection scheme of differential fault attack.Because of its novel and powerful,it has a strong threat to the cryptographic algorithm.Data shows that it can not resist persistent fault attack.Moreover,when the random plaintext number is 150,the key space of the r-th round key of SKINNY can be minimized,about 22?24.4.Study the protection scheme of persistent fault attack.Mask scheme is a kind of protection scheme against power attack in side channel attack.By trying to carry out persistent fault attack on SKINNY algorithm with mask,it is found that mask scheme can partially defend against the persistent fault attack.In this paper,the r-th round of differential fault attack,(r-1)-th round of differential fault attack and r-th round of persistent fault attack experiments are carried out on SKINNY-64 algorithm.Results show that the SKINNY-64-n(tk=1)algorithm in the r-th and(r-1)-th rounds cannot resist the differential fault attack,and the SKINNY-64-n(tk-1)algorithm cannot resist the persistent fault attack in the r-th round.Both kinds of fault attacks are very threatening.Therefore,we should find protection schemes to resist both attacks.The experiment verifies that mask scheme can partially defend against the persistent fault attack.