English Abstract: Cryptographic algorithms have played fundamental roles in information security. The security of a cryptographic algorithm depends on many aspects, including the mathematical properties of the algorithm itself, the implementation security, etc. Recently, cryptoanalysis techniques based on implementation has received wide-spread attention and are becoming one of the research focuses. Fault attack is one typical kind of implementation based attacks. The faulty information can be used to obtain the secret information hidden inside the cryptographic devices, when the execution procedure of the algorithm is casually or purposedly disturbed to deviate from the normal flow. As a result, some countermeasures should be employed in order to resist fault attack and protect the secret information from being leaked. The thesis focuses on fault attacks against both block ciphers and the RSA cipher implemented using the Chinese Remainder Theorem, as well as the countermeasures. Several research results obtained are as follows. (1) A differential fault attack on block cipher ARIA is proposed. ARIA was proposed in 2003, and was selected as the standard block cipher of Korea in 2004. Using the idea of differential analysis, we induce faults during the encryption and decryption of ARIA and analyze the faulty outputs. For ARIA-128, about 8 faulty ciphertexts and 8 faulty plaintexts on average are required to recover the seed key. For ARIA-192, the num of faulty ciphertexts is 32, and for ARIA-256, the num of faulty ciphertexts is 40. (2) A differential fault attack on block cipher Camellia is proposed. Camellia was proposed in 2003, and was accepted as the international standard cipher using in SSL/TSL security protocols by international organization for standardization IETF. We induce faults during encryption and analyze the faulty ciphertexts. For Camellia-128, 64 faulty ciphertexts are required to recover the seed key. For Camellia-192/256, 96 faulty ciphertext are required. (3) Summarization of fault attacks on CRT-RSA and the related countermeasures are given, together with the analysis of the security and efficiency of the countermeasures.
许囡囡. 密码算法的故障攻击与防御对策研究[D]. 中国科学院软件研究所. 中国科学院研究生院. 2008-05-30.