没有合适的资源?快使用搜索试试~ 我知道了~
首页2013年SHARK白盒实现安全性的深度剖析
2013年SHARK白盒实现安全性的深度剖析
0 下载量 105 浏览量
更新于2024-07-14
收藏 1011KB PDF 举报
本文主要探讨了鲨鱼白盒实现的安全性问题,针对的是在白盒攻击环境下的一种加密技术。白盒攻击假设攻击者完全了解加密算法的实现细节,并能够控制其执行环境。为了应对在这种威胁下密钥暴露的风险,2013年提出了基于SHARK(一种块密码)的白盒实现——白盒SHARK。然而,经过作者的观察和深入研究,他们发现白盒SHARK的安全性存在严重漏洞,隐藏的密钥和外部编码能够在大约工作量为1.5 * (2^47)的情况下被成功提取。 白盒攻击是密码学领域中的一个重要概念,它对加密算法的安全性构成了严峻挑战。在传统的对称加密中,算法使用相同的密钥进行加解密操作,这在安全实践中至关重要。然而,白盒设计的目标是为了保护这些密钥,使其在攻击者的全面掌控下仍然保持安全。 白盒SHARK的设计初衷可能是为了提高安全性,通过复杂的代码混淆、硬件保护等手段来隐藏实际的加密逻辑。然而,作者揭示的研究结果显示,这一设计并未达到预期的效果,攻击者利用特定的技术手段能够轻易地穿透这些防护,揭示出隐藏的加密秘钥和相关的编码结构。 关键词“白盒攻击环境”、“对称加密”、“密钥暴露”、“SHARK”和“密码分析”都揭示了这篇论文的核心关注点。作者可能在文中详细分析了白盒SHARK的具体实现弱点,可能包括了对攻击者的策略、破解方法和技术细节的剖析,以及针对这些问题提出的改进建议或替代方案。这篇文章对于理解白盒加密技术的安全边界以及如何增强此类设计的抵御能力具有重要的参考价值。
资源详情
资源推荐
![](https://csdnimg.cn/release/download_crawler_static/16666612/bg4.jpg)
Unfortunately, De Mulder et al. [27] showed that the perturbation procedures and
random equation calculations can be separated from the implementation, and the linear
input and output encodings can be removed. Accordingly, attackers can transform the
white-box implementation into a simple but functional ly equivalent implementation
and then retrieve a set of keys that are equivalent to the original key. The cryptanalysis
of the white-box AES in [20] has a worst-case work factor of 2
17
.
Xiao et al. [15] proposed a white-box AES implementation after a detailed analysis
of attack techniques in [24]. The size of this implementation is considerably large to
achieve a higher security level. In Xi ao et al.’s scheme, the obfuscation works on at
least two cells of an AES stat e; moreover, the attacker cannot divide it into smaller
units (e.g. one cell of an AES state) and remove it using the attack techniques proposed
in [24]. The time complexity of the Xiao-Lai white-box AES implementation is 2
24
,
which is slower than the Chow et al.’ s implementation in [3](2
20
), and the size is
20502 KB.
De Mulder et al. [28] presented a practical cryptanalysis of Xiao et al.’s white-box
AES. They applied the linear equivalence algorithm presented by Biryukov et al. [29]
as a building block in their key-extraction algorithm. The cryptanalysis efficiently
extracts the AES key with a work factor of about 2
32
.
Another white-box implementation for AES is proposed by Karroumi [19]. This
implementation makes InvSubBytes and InvMixColumns operations variable by using
additional sets of coefficients taken from dual representations of AES. Karroumi
claimed that the expected security level is raised from 2
30
to 2
91
. However, an algebraic
analysis [30] was proposed in 2013 and Karroumi’s implementation can be easily
broken.
The two key factors of a white-box encryption algorithm are size and security level.
Unfortunately, in many cases, the two key facto rs form a tradeoff and cannot be
achieved simultaneously. The goal of light-weight WBEAs proposed in prior work
[16, 17] is to make the size of imp lementations as small as possible in order to meet the
requirements on computin g with mobile agents and sensor nodes. In general, these
white-box implementations only intend to support time-limited black box security [31].
As summarized in Table 1, white-box implementations designed for providing long
term protections (i.e., heavy-weight WBEAs) are listed in the left column with the
corresponding attacks listed in the right column. The latest published heavy-weight
WBEA (i.e., the white-box SHARK [5]) is also incl uded.
3 SHARK and its White-Box Implementation
SHARK [32] is a six round substitution-permutation-network that alternates a key
mixing stage with linear and non-linear transformation layers. Eac h round of the
SHARK encryption algorithm can be split into three distinct layers: a non-linear
confusion layer of S-Boxes, a linear diffusion layer and a key addition (XOR) layer.
Let S : GFð2
8
Þ!GFð2
8
Þ; x 7! S½x be the mapping of S-Boxes. Then the
substitution layer can be defined as c : GFð2
8
Þ
8
! GFð2
8
Þ
8
, cðaÞ¼b , b
i
¼ S½a
i
,
0 i 7.
458 Y. Shi and H. Fan
剩余16页未读,继续阅读
![docx](https://img-home.csdnimg.cn/images/20210720083331.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://csdnimg.cn/download_wenku/file_type_ask_c1.png)
![](https://profile-avatar.csdnimg.cn/default.jpg!1)
weixin_38670065
- 粉丝: 4
- 资源: 924
上传资源 快速赚钱
我的内容管理 展开
我的资源 快来上传第一个资源
我的收益
登录查看自己的收益我的积分 登录查看自己的积分
我的C币 登录后查看C币余额
我的收藏
我的下载
下载帮助
![](https://csdnimg.cn/release/wenkucmsfe/public/img/voice.245cc511.png)
最新资源
- 多模态联合稀疏表示在视频目标跟踪中的应用
- Kubernetes资源管控与Gardener开源软件实践解析
- MPI集群监控与负载平衡策略
- 自动化PHP安全漏洞检测:静态代码分析与数据流方法
- 青苔数据CEO程永:技术生态与阿里云开放创新
- 制造业转型: HyperX引领企业上云策略
- 赵维五分享:航空工业电子采购上云实战与运维策略
- 单片机控制的LED点阵显示屏设计及其实现
- 驻云科技李俊涛:AI驱动的云上服务新趋势与挑战
- 6LoWPAN物联网边界路由器:设计与实现
- 猩便利工程师仲小玉:Terraform云资源管理最佳实践与团队协作
- 类差分度改进的互信息特征选择提升文本分类性能
- VERITAS与阿里云合作的混合云转型与数据保护方案
- 云制造中的生产线仿真模型设计与虚拟化研究
- 汪洋在PostgresChina2018分享:高可用 PostgreSQL 工具与架构设计
- 2018 PostgresChina大会:阿里云时空引擎Ganos在PostgreSQL中的创新应用与多模型存储
资源上传下载、课程学习等过程中有任何疑问或建议,欢迎提出宝贵意见哦~我们会及时处理!
点击此处反馈
![](https://img-home.csdnimg.cn/images/20220527035711.png)
![](https://img-home.csdnimg.cn/images/20220527035711.png)
![](https://img-home.csdnimg.cn/images/20220527035111.png)
安全验证
文档复制为VIP权益,开通VIP直接复制
![](https://csdnimg.cn/release/wenkucmsfe/public/img/green-success.6a4acb44.png)