适于软硬件实现的安全轻量S盒的设计

随着物联网的发展，轻量级分组密码算法的设计显得尤为重要。S盒是对称密码算法的关键部件。许多加密算法的硬件实现过程易受侧信道攻击，门限实现是一种基于秘密共享和多方计算的侧信道攻击对策。通过简单地对三次布尔函数中的变量进行循环移位，构建密码性质最优的4×4安全轻量S盒，并且为所构造的S盒设计了门限实现方案来抵御侧信道攻击，该方案是可证安全的。该方法构造的S盒的四个分量函数的实现电路相同，极大地降低了硬件实现的复杂度。给定S盒的一个分量，其余的三个分量可通过该分量的循环移位获得，这样大大降低硬件实现成本，易于快速软件实现。

Design of secure lightweight S-box for software and hardware implementation

With the development of the Internet of Things, the design of lightweight block cipher algorithms is particularly important. The S-box is a vital component of the symmetric cryptographic algorithm. The hardware implementation of many cryptographic algorithms is vulnerable to side-channel attacks, threshold implementation is a side-channel attack strategy based on secret sharing and multiparty computing. This paper constructed safe lightweight 4×4 S-box with optimal cryptographic properties by simply cyclically shifting the variables in the Boolean functions with degree 3. It designed and the threshold implementation for the constructed S-boxes to resist side channel attacks, which is provably secure. The implementation of the four component functions of the S-boxes constructed by this method were same, greatly reducing the complexity of the hardware implementation. It gave out a component of the S-box, the remaining three components can be obtained by cyclic shifting of the component, which greatly reduces the hardware implementation cost and is easy to implement in a fast software.