Abstract:Implementations of the SM4 algorithm, including different hardware applications with limited resources, are vulnerable to Side-Channel Attacks. This paper presents a countermeasure against such attacks by adding a random “mask” to the input plaintext and protect all variables through the whole encryption process. As is known to all, the unique nonlinear step in each round of SM4 algorithm is the “S-Box” and the previous works using lookup-table method to implement the S-Box always incur large area and high power. Here we give the compact design of masked S-Box using the normal basis in the composite field (consisting of a Galois inversion and several affine transformations). Then we compute the different masks diffused to all the steps in the SM4 algorithm process. The proposed design results in ultra-low cost of hardware and capability to resist first-order differential power analysis (DPA), which is suitable for the resource constrained devices. The synthesis result of masked S-Box shows that the area under the SMIC 0.13 (upmu )m is only about 978-gates, 46.8% fewer than the other works. Further, we apply the pipeline technique to our proposed “masked S-Box”, thereby to the whole masked SM4 algorithm. The results of FPGA implementation present that our works have achieved an ultra-high speed with frequency nearly 551 MHz and the throughput over 70 Gbps.

Securing SMS4 cipher against differential power analysis and its VLSI implementation

High-Speed Implementation of the SMS4 Algorithm Engine

Implementation of SMS4 block cipher on FPGA

Low Consumption Implementation of SMS4 Cipher Algorithm

Research on Differential Power Analysis Attack on SMS4 Algorithm

Differential Power Analysis Attack on SMS4 Block Cipher

Power analysis of a FPGA implementation of SM4

VLSI Implementation of an AES Algorithm Resistant to Differential Power Analysis Attack

VLSI Implementation of AES Algorithm Against Differential Power Attack and Differential Fault Attack

A new algorithm of S-box for hardware implementation of SMS4

Differential Power Attack on SM4 Block Cipher

SM4 Chaotic Masking Scheme Against Power Analysis Based on FPGA

Low-cost Reconfigurable VLSI Implementation of the SMS4 and AES Algorithms

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

Analysis Of The Sms4 Block Cipher

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

Small Tweaks Do Not Help: Differential Power Analysis of MILENAGE Implementations in 3G/4G USIM Cards

Design and implementation of a Differential Power Analysis System for cryptographic devices

A novel SM4 cryptographic architecture against higher order power analysis attacks

Research on Differential Power Analysis Attack on ECC Algorithm

A Lightweight Countermeasure of SM4 against Side Channel Analysis