摘要
作为密码安全性的根源,在各类密码体制和系统中,真随机数起着不可替代的重要作用。现实中,真随机数往往基于随机物理过程实现,从而使其可能遭受环境引入或攻击者恶意施加的影响,造成随机数生成质量的下降,进而对密码应用安全性产生威胁。该文以当前广泛应用的基于振荡环的真随机数发生器(RO-TRNG)为对象,对故障注入场景下,熵源和熵抽取部分受到的影响及由此造成的安全性变异进行了深入分析和研究,并基于捕获偏置度提出了能够充分反映故障扰动场景下RO-TRNG安全特性的度量模型。实验表明,该度量模型能够很好地反映在遭受故障扰动时,RO-TRNG在抖动方差累积和节拍延迟链上升沿捕获概率偏置等方面受到的影响,并对RO-TRNG在高危复杂环境下的安全性实施客观分析。
As the source of the cipher security,the true random number plays an important and irreplaceable role in kinds of cipher systems.In practice,the true random number is usually generated in the random physic processes,and it is vulnerable to the malicious attack,caused by the environment.Thus the poorer quality of the random number makes the cryptographic application security under threat.In order to research the Ring Oscillator-based True Random Number Generator(RO-TRNG),which is widely used currently,the impact on its entropy source and extract is further analyzed and researched,as well as the resulting security variation,in the fault injection attack scenario.Based on the acquisition bias degree,the RO-TRNG security metric model in the scenario of the fault disturbance,is prompted.It is experimented that,while exposed to the fault disturbance environment,the impact on the accumulation of the vibration variance and the bias on the acquistion probability of the rising edge of the beat delay chain for RO-TRNG,can be fully reflected by the model,and the RO-TRNG security can be analyzed objectively,while exposed to the highly dangerous and complicated environment.
作者
罗芳
欧庆于
周学广
褚潍禹
高飞
LUO Fang;OU Qingyu;ZHOU Xueguang;CHU Weiyu;GAO Fei(Department of Information Security,Naval University of Engineering,Wuhan 430033,China)
出处
《电子与信息学报》
EI
CSCD
北大核心
2022年第6期2093-2100,共8页
Journal of Electronics & Information Technology
基金
国家自然科学基金(61672531)。
关键词
振荡环
真随机数发生器
故障扰动
影响分析
安全性度量
Ring Oscillator(RO)
True Random Number Generator(TRNG)
Fault disturbance
Impact analysis
Security metric
