用LSTM分析功耗痕迹,破解椭圆曲线加密的临时密钥
Unveiling ECC Vulnerabilities: LSTM Networks for Operation Recognition in Side-Channel Attacks
- 用LSTM识别密钥相关操作模式,定位临时密钥比特
- 在STM32F415实机上成功恢复私钥,攻击可复现
- 揭示现有随机化防护不足,适合密码学安全研究者
本文提出一种新型针对椭圆曲线密码的旁道攻击方法。受活动检测研究启发,采用长短期记忆(LSTM)神经网络分析执行ECDSA签名时的功耗痕迹,识别标量乘法算法中的操作模式,从而恢复临时密钥比特,最终获取签名者的私钥。该方法基于micro-ecc中模约减条件性执行的特性,依赖于密钥位。通过模拟与真实实现的实验验证了攻击的可行性与可复现性。在搭载micro-ecc库的STM32F415目标设备上成功实施攻击并完成破解。此外,证明当前防护措施如坐标随机化不足以抵御此类攻击,并建议其他可行的防御方案。
原文摘要 · Abstract (English)
We propose a novel approach for performing side-channel attacks on elliptic curve cryptography. Unlike previous approaches and inspired by the ``activity detection'' literature, we adopt a long-short-term memory (LSTM) neural network to analyze a power trace and identify patterns of operation in the scalar multiplication algorithm performed during an ECDSA signature, that allows us to recover bits of the ephemeral key, and thus retrieve the signer's private key. Our approach is based on the fact that modular reductions are conditionally performed by micro-ecc and depend on key bits. We evaluated the feasibility and reproducibility of our attack through experiments in both simulated and real implementations. We demonstrate the effectiveness of our attack by implementing it on a real target device, an STM32F415 with the micro-ecc library, and successfully compromise it. Furthermore, we show that current countermeasures, specifically the coordinate randomization technique, are not sufficient to protect against side channels. Finally, we suggest other approaches that may be implemented to thwart our attack.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。