Security analysis of SM2 signature algorithm based on fault attack

Chuisheng Qian; Yan Wang; MingHua Wang; ZiQi Zhao

doi:10.1117/12.2653740

8 December 2022 Security analysis of SM2 signature algorithm based on fault attack

Chuisheng Qian, Yan Wang, MingHua Wang, ZiQi Zhao

Proceedings Volume 12474, Second International Symposium on Computer Technology and Information Science (ISCTIS 2022); 1247402 (2022) https://doi.org/10.1117/12.2653740
Event: Second International Symposium on Computer Technology and Information Science (ISCTIS 2022), 2022, Guilin, China

Abstract

SM2 digital signature algorithm (SM2-DSA) is the Chinese version of the elliptic curve digital signature algorithm (ECDSA), which has become one of the international standards of elliptic curve cryptography. Despite its solid theoretical security, SM2-DSA is still prone to a variety of physical attacks. Hence, it is important to research the security of the SM2- DSA implementation. In this paper, we propose a fault attack model for the SM2-DSA based on the weak elliptic curve. Experimental results show that the proposed model can directly calculate the parameters of the fault curve by using the fault signature pair, and if the fault injection location is correct, we only need an error signature pair to recover the 256-bit signature private key within 3 minutes. Compared with the general weak elliptic curve attack, our model is more practical and 20% more efficient in recovering the private key.

Citation Download Citation

Chuisheng Qian, Yan Wang, MingHua Wang, and ZiQi Zhao "Security analysis of SM2 signature algorithm based on fault attack", Proc. SPIE 12474, Second International Symposium on Computer Technology and Information Science (ISCTIS 2022), 1247402 (8 December 2022); https://doi.org/10.1117/12.2653740

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available