Improved differential fault analysis on authenticated encryption of PAEQ-128
点击次数：
所属单位：计算机科学与技术学院/人工智能学院/软件学院
发表刊物：Lect. Notes Comput. Sci.
摘要：PAEQ is an AES-based authenticated encryption proposed by Biryukov and Khovratovich in 2014, which stays in the CAESAR competition until the second round. In CHES 2016, Dhiman Saha and Dipanwita Roy Chowdhury first discussed the differential fault analysis to PAEQ. Their work shows that the nonce used in PAEQ that is usually considered as a natural DFA countermeasure can be overcome by carefully constructing the encryption message and injecting two faults. This work presents a fully optimized DFA attack on PAEQ-128 with regard to the key recovery process. We apply the information theoretical analysis and the DFA techniques for AES into the DFA key recovery on PAEQ-128. As a result, without changing the attack assumption, the key recovery complexity is reduced from 250 to 224 for PAEQ-128. The successful key recovery together with its computational complexity have been verified with the key recovery simulations. © 2019, Springer Nature Switzerland AG.
ISSN号：0302-9743
是否译文：否
发表时间：2019-01-01
合写作者：Wang, Ruyan,Meng, Xiaohan,Li, Yang
通讯作者：王箭