KLEIN-64 is a lightweight block cipher designed for resource-constrained environment,and it has advantages in software performance and hardware implementation.Recent investigation shows that KLEIN-64 is vulnerable to ...KLEIN-64 is a lightweight block cipher designed for resource-constrained environment,and it has advantages in software performance and hardware implementation.Recent investigation shows that KLEIN-64 is vulnerable to differential fault attack(DFA).In this paper,an improved DFA is performed to KLEIN-64.It is found that the differential propagation path and the distribution of the S-box can be fully utilized to distinguish the correct and wrong keys when a half-byte fault is injected in the 10th round.By analyzing the difference matrix before the last round of S-box,the location of fault injection can be limited to a small range.Thus,this improved analysis can greatly improve the attack efficiency.For the best case,the scale of brute-force attack is only 256.While for the worst case,the scale of brute-force attack is far less than 232 with another half byte fault injection,and the probability for this case is 1/64.Furthermore,the measures for KLEIN-64 in resisting the improved DFA are proposed.展开更多
IPv6地址空间巨大,IPv6单播地址可分为网络前缀和接口标识两部分,网络前缀由运营商(ISP,Internet service provider)分配,接口标识可以手工配置、随机生成或者通过EUI-64格式生成。手工配置或通过EUI-64格式生成的静态IPv6地址存在个人...IPv6地址空间巨大,IPv6单播地址可分为网络前缀和接口标识两部分,网络前缀由运营商(ISP,Internet service provider)分配,接口标识可以手工配置、随机生成或者通过EUI-64格式生成。手工配置或通过EUI-64格式生成的静态IPv6地址存在个人隐私泄露的网络安全风险;随机生成的IPv6地址不满足基于IP地址的网络访问控制需求。因此,提出了一种基于祖冲之(ZUC,ZU Chongzhi)加密的IPv6地址动态编码(ZBDA,ZUC-based dynamic addressing)算法,将网络终端的MAC地址通过ZUC算法加密生成动态的IPv6地址,在接收端解密即可获得终端的MAC地址,以此验证终端的访问权限。ZBDA算法既解决了不当的IPv6地址编址带来的个人隐私泄露问题,又满足了基于IP地址的网络访问控制需求,且该算法的IPv6地址编码和地址验证速度快,具有实际应用价值。展开更多
基金This work was supported in part by project supported by National Natural Science Foundation of China(Grant Nos.U1936115,61572182).
文摘KLEIN-64 is a lightweight block cipher designed for resource-constrained environment,and it has advantages in software performance and hardware implementation.Recent investigation shows that KLEIN-64 is vulnerable to differential fault attack(DFA).In this paper,an improved DFA is performed to KLEIN-64.It is found that the differential propagation path and the distribution of the S-box can be fully utilized to distinguish the correct and wrong keys when a half-byte fault is injected in the 10th round.By analyzing the difference matrix before the last round of S-box,the location of fault injection can be limited to a small range.Thus,this improved analysis can greatly improve the attack efficiency.For the best case,the scale of brute-force attack is only 256.While for the worst case,the scale of brute-force attack is far less than 232 with another half byte fault injection,and the probability for this case is 1/64.Furthermore,the measures for KLEIN-64 in resisting the improved DFA are proposed.
