Abstract:Implementations of the SM4 algorithm, including different hardware applications with limited resources, are vulnerable to Side-Channel Attacks. This paper presents a countermeasure against such attacks by adding a random “mask” to the input plaintext and protect all variables through the whole encryption process. As is known to all, the unique nonlinear step in each round of SM4 algorithm is the “S-Box” and the previous works using lookup-table method to implement the S-Box always incur large area and high power. Here we give the compact design of masked S-Box using the normal basis in the composite field (consisting of a Galois inversion and several affine transformations). Then we compute the different masks diffused to all the steps in the SM4 algorithm process. The proposed design results in ultra-low cost of hardware and capability to resist first-order differential power analysis (DPA), which is suitable for the resource constrained devices. The synthesis result of masked S-Box shows that the area under the SMIC 0.13 (upmu )m is only about 978-gates, 46.8% fewer than the other works. Further, we apply the pipeline technique to our proposed “masked S-Box”, thereby to the whole masked SM4 algorithm. The results of FPGA implementation present that our works have achieved an ultra-high speed with frequency nearly 551 MHz and the throughput over 70 Gbps.

Power-aware Hiding Method for S-box Protection

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

Energy-Efficient Side-Channel Attack Countermeasure with Awareness and Hybrid Configuration Based on It

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

An Efficient Window-Based Countermeasure to Power Analysis of ECC Algorithms

Information Hiding for Aes Core Based on Randomness

A Compact Implementation of Masked AES S-Box

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

An AES Chip with DPA Resistance Using Hardware-Based Random Order Execution

AES (Advanced Encryption Standard) encryption method and power attack resisting method based on the same

Algorithm-Based Countermeasures against Power Analysis Attacks for Public-Key Cryptography SM2

VLSI Implementation of an AES Algorithm Resistant to Differential Power Analysis Attack

A Low Overhead DPA Countermeasure of ECC Based on Randomized Modular Multiplication

Enhanced Side-Channel Cube Attacks on PRESENT.

A Refined Simple Power Analysis Attack on Ecc with Countermeasures

S-box Algorithm Based on Walsh Spectrum Transform

An Approach of Using Different Positions of Double Registers to Protect AES Hardware Structure from DPA

A Countermeasure For Power Analysis To Scalar Multiplication Of Ecc Hardware

Efficient Hamming weight-based side-channel cube attacks on PRESENT

Lightweight Countermeasures Against Static Power Side-Channel Attacks

Making Register File Resistant to Power Analysis Attacks.