文档介绍：Advanced Encryption Standard (AES)
Implementation with Increased DPA Resistance
and Low Overhead
John Goodwin, Peter R. Wilson, Senior Member, IEEE
determine which of the hypotheses is the most probable.
Abstract—The use of the Advanced Encryption Standard Several countermeasures have been proposed to DPA, they
(AES) has e pervasive in a large number munication are typically expensive in terms of area or performance, some
applications. The hardware to implement AES is non trivial and adding on average 3 times the area and reducing throughput
as a result it has a significant overhead in its raw form. Despite by a factor of 4 [1]. A more efficient solution would be if
the algorithm being inherently secure, side channel attacks have
exposed potential weaknesses via the implementation route, devices did not need protecting from this attack because the
particularly power analysis. As a result, much effort has been algorithms that they implemented were inherently resistant to
expended in identifying techniques to mask the power signature it. This paper describes an approach whereby a simple
that can give away the secret key. Unfortunately, the hardware modification of the Advanced Encryption Standard (AES)
overhead is usually a significant proportion of the size of the provides protection against DPA using the existing key
original algorithm and in a