상세정보
학술지
Improved Shamir's CRT-RSA Algorithm: Revisit with the Modulus Chaining Method
- 발행일
- 201406
- 출처
- ETRI Journal, v.36 no.3, pp.469-478
- ISSN
- 1225-6463
- 출판사
- 한국전자통신연구원 (ETRI)
- 초록
- RSA signature algorithms using the Chinese remainder theorem (CRT-RSA) are approximately four-times faster than straightforward implementations of an RSA cryptosystem. However, the CRT-RSA is known to be vulnerable to fault attacks; even one execution of the algorithm is sufficient to reveal the secret keys. Over the past few years, several countermeasures against CRT-RSA fault attacks have tended to involve additional exponentiations or inversions, and in most cases, they are also vulnerable to new variants of fault attacks. In this paper, we review how Shamir's countermeasure can be broken by fault attacks and improve the countermeasure to prevent future fault attacks, with the added benefit of low additional costs. In our experiment, we use the sidechannel analysis resistance framework system, a fault injection testing and verification system, which enables us to inject a fault into the right position, even to within 1 μs. We also explain how to find the exact timing of the target operation using an Atmega128 software board. © 2014 ETRI.
- KSP 제안 키워드
- CRT-RSA, Chinese remainder theorem(CRT), Fault Attacks, Fault injection testing, RSA Algorithm, RSA Cryptosystem, Verification system, secret key, testing and verification