白盒密码技术：抵御白盒攻击的安全策略

需积分: 50 72 浏览量更新于2024-09-09 2 收藏 1.16MB PDF 举报

"白盒密码技术是一种旨在抵抗白盒攻击的密码技术，主要关注在完全受控环境下，如智能终端（Android、iOS等）中的密钥安全性。白盒攻击环境中，攻击者可以观察并修改程序运行时的内部数据。面对这样的威胁，白盒密码技术应运而生，其核心目标是保护加密过程中的敏感信息，特别是加密密钥的安全。自2002年Chow等人首次提出白盒密码学以来，已经出现了许多白盒加密方案。然而，大多数这些方案的运行速度较慢，只能用于保护非常小量的信息，例如加密密钥。因此，在实际应用中，寻找高效且安全的白盒加密方案至关重要。论文《HybridWBC: Secure and Efficient White-Box Encryption Schemes》由Jihoon Cho等人撰写，他们提出了一个新的白盒密码学威胁模型，该模型更贴近现实世界中攻击者的实际能力，并广泛适用于各种应用场景。作者还研究了设计白盒原语的关键标准，这些标准对于业界来说非常重要。他们最后提出了一种新的白盒加密方案——HybridWBC，它旨在解决现有方案的速度问题，提高效率，同时保持安全性，使其更适合于保护大量数据的加密需求。白盒密码技术通常通过混淆和编码技术来实现，目的是使得即使攻击者能够看到加密过程的内部细节，也无法从中提取出关键的密钥信息。这种技术的应用场景包括但不限于移动应用、嵌入式系统和云服务，这些领域都需要在不可信环境中执行加密操作。在评估白盒密码方案时，要考虑几个关键指标：安全性、效率、代码大小和可移植性。安全性是首要考虑的因素，必须确保即使在白盒环境中，密钥也不能被轻易破解。效率则关乎方案能否在有限的计算资源下快速执行。代码大小和可移植性则影响方案在不同平台上的部署和适应性。 HybridWBC方案可能采用了混合设计，结合了多种密码学算法和技术，以达到平衡这些指标的目的。具体实现可能包括但不限于密钥扩散、混淆函数、代码混淆和数据变形等技术，以增强密钥隐藏和抵抗攻击的能力。白盒密码技术是一项旨在应对严峻安全挑战的技术，其发展对于保障物联网、移动通信和大数据时代的隐私和信息安全具有重要意义。随着技术的不断进步，我们可以期待更加安全、高效的白盒加密解决方案，以满足日益增长的数据保护需求。"

Implementation Size Best attack

Chow et al. [5] 773 KB 2

[15]

Karroumi [13] 752 KB 2

[15]

Xiao-Lai [26] 20 MB 2

[8,19]

Bringer et al. [4] 568 MB 2

[7]

Table 1. Comparison of previous white-box AES variants.

The second class includes new block ciphers designed especially w ith white-

box protection in mind. Usually such designs are ba sed on key-dependent com-

ponents, such that even if a white-box adversary can recover the full dictionary

of such a component, he still cannot use this knowledge to recover the secret

key. Recent desig ns of this c lass include the ASASA family [2] and the SPACE

family [3]. An important advantage o f these designs is their be tter performance

and higher se curity (though, some of them were also broken, see [9,10,20]). On

the other hand, transition from existing designs to the entirely new ciphers is

not an easy task, and s o, quite often commer cial users will be reluctant to make

such a major change in the design.

Our goal in this paper is to propose a class of ne w primitives which, on

the one hand, provide strong security with respect to a white-box adversary,

and on the other hand, are convenient for practical use – meaning that the

performance is reasonable and that transition from currently used primitives to

the new primitives is relatively e asy.

To this end, we ﬁrst co nsider the threat mo de l of white-box cryptogr aphy. It

is clearly unreasonable to assume that the adversary ha s an unlimited access to

the whole encr yption process, as in this case, there is no diﬀerence whatsoever

between the legitimate users and the adversary (and so, no secret-key cryptogra-

phy is possible). Instead, most of the previous papers on white-box cryptography

(e.g., [5,6]) assume that ther e are parts of the encryption process that ca n be

protected from the white-box adversary (e.g., external encodings in Chow et

al.’s schemes). However, this assumption is problematic in scenarios where the

entire primitive must b e implemented in software. We assume, instead, that the

adversary has a one-time ‘white-box’ access to the system, and after that, his

capabilities are equal to that of a ‘classica l’ black -box adversary. This model

corres ponds to a one-time compromise of a system employed by multiple users,

when the security goal is to minimize the damage of compromise. We discuss

the model in detail and describ e practical scenarios in which it is relevant.

We then discuss the design criteria from the point of view of industry, aiming

at balancing between strong security, reasonable performance, and good com-

patibility with the currently deployed ciphers.

Finally, we present the new class of primitives, called Hybrid WBC schemes.

In Hybrid WBC, only the ﬁrst block of the messag e is encrypted using a white-

box block cipher, while all remaining blocks are encrypted using a ‘classical’

cipher, like the AES. The core o f the scheme is a mode of operation which

ensures that although only a single block is encrypted by a white-box scheme,

剩余13页未读，继续阅读

明天plus

粉丝: 22
资源: 4

白盒密码技术：抵御白盒攻击的安全策略

一些经典的黑盒白盒测试例子

白盒测试实例

白盒程序测试实验报告

白盒密码技术White-Box.pdf

基于白盒密码技术的数字版权管理及其在电子文件保密中的应用探讨

白盒密码技术：AES设计与安全性分析

白盒密码技术：设计优化与安全性探究

白盒密码技术：安全分析与改进的AES实现

白盒密码技术：自等价编码与安全实现策略概述

白盒密码研究_姚思.pdf

最新资源