A crt-rsa chosen plaintext joint attack method and system

Abstract

The invention belongs to the field of information security, and discloses a CRT-RSA selected plaintext joint attack method and system. During the attack process, the d p and d q As the attack target, then derive the private key parameters p, q; in the plaintext collision attack process, select multiple sets of plaintext pairs, superimpose them, and do secondary processing on the power consumption difference of the model multiplication as a collision classification set; in the attack process, Combined with the disclosure of the Hamming weight information of the access number power consumption exponent during the CRT-RSA modular exponentiation operation, the modular multiplication power consumption is segmented, and the segmented plaintext collision attack is implemented. The present invention combines the problems of other information leaks (such as access number power consumption exponent Hamming weight information leak) in the CRT-RSA modular exponentiation process, performs modular multiplication power consumption segmentation, and implements segmentation selection plaintext collision attacks, which can avoid partial The collision attack is wrong, thereby improving the attack accuracy, and finally deriving the private key parameters p, q, and recovering the private key d value.

Description

technical field [0001] The invention belongs to the field of information security, in particular to a CRT-RSA selected plaintext combined attack method and system. Background technique [0002] At present, the existing technologies commonly used in the industry are as follows: [0003] Most smart cards use the RSA cryptographic algorithm to realize the digital signature authentication function, but the fastest RSA encryption speed is 100 times slower than DES, regardless of software or hardware implementation, the speed has always been the defect of RSA. Since 1982, two Belgian scholars (Quisquate & Couvreur) proposed a variant algorithm of RSA based on the Chinese Remainder Theorem (Chinese Remainder Theorem CRT). The storage space of the table also reduces the execution speed of multiplication in the algorithm, so CRT-RSA is widely used in smart cards and embedded devices. [0004] In the standard RSA encryption algorithm, the RSA modulus N is the product of two large pr...

AI Technical Summary

Problems solved by technology

[0016] And from the literature review, there is currently no indirect attack on the key parameter d for CRT-RSA p and d q , and then deduce the side-channel attack method of prime numbers p, q, and there is no combination of multi-point information leakage, and the secondary processing of the power consumption difference in plaintext is used as the choice of plaintext side-channel attack method for the classification data set

Images