轻量级分组密码算法DoT的模板攻击

模板攻击是一种重要的侧信道分析方法，其在实际密码算法破译中具有较强的区分能力。轻量级分组密码算法DoT在硬件和软件实现中都表现出优秀的性能，尽管目前针对DoT算法的传统数学攻击已经取得了一定效果，但是该算法在具体实现中是否足以抵御侧信道攻击仍有待研究。基于DoT算法结构及其S盒特点，提出一种针对DoT算法的模板攻击方法。基于汉明重量模型来刻画加密算法运行时的能耗特征，将S盒输出值的具体分布作为中间状态值构造区分器，从而进行密钥恢复。测试结果表明，该模板攻击仅需6组明文就可恢复出8 bit密钥信息，DoT密码算法在该模板攻击下具有脆弱性。

Template Attacks Against Lightweight Block Cipher Algorithm DoT

As an important way of side channel analysis,template attacks have excellent distinguishing ability in the cracking of encryption algorithms.Recently,a lightweight block cipher algorithm called DoT performs well in both hardware and software implementation.Although some progress has been made in the traditional mathematical attacks against DoT,whether DoT can resist side channel attacks in practice remains to be an unsolved problem.This paper proposes a template attack method against DoT based on the structure of the DoT algorithm and its characteristics of S-box.This attack method uses the Hamming weight model to present the energy consumption features of the running encryption algorithms,takes the specific distribution of S-box output as the intermediate state value to construct the differentiator,and thus recovers the secret key.Experimental results show that the DoT algorithm is vulnerable to this kind of template attacks,which require only 6 groups of plaintexts to recover 8 bit key information.