Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.

N'ime afọ iri gara aga, na mgbakwunye na ụzọ maka ịwepụ ihe nzuzo ma ọ bụ ime ihe ndị ọzọ na-akwadoghị, ndị na-awakpo amalitela iji mwepu data na-amaghị ama na ịmegharị ihe mmemme site na ọwa akụkụ.

Ụzọ mbuso agha ọdịnala nwere ike ịdị oke ọnụ n'ihe gbasara ihe ọmụma, oge na ike nhazi. N'aka nke ọzọ, enwere ike ịme mwakpo ọwa n'akụkụ n'ụzọ dị mfe na enweghị mbibi ebe ọ bụ na ha na-ekpughe ma ọ bụ na-emegharị ihe anụ ahụ nke a na-enweta n'oge arụ ọrụ nkịtị.

Site na iji usoro ndekọ ọnụ ọgụgụ iji hazie nha ọwa akụkụ ma ọ bụ site na iwebata mmejọ n'ime ọwa nke mgbawa nkeonwe, onye mwakpo nwere ike nweta ohere nzuzo ya n'ime awa ole na ole.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.

N'ihe karịrị kaadị smart 5,000 na-enye kwa afọ yana teknụzụ cryptographic ọhụrụ agbakwunyere na-abanye n'ahịa, ọ dị mkpa na-abawanye mkpa iji hụ ma azụmahịa yana nchekwa nzuzo.

Na Netherlands, Riscure emepụtala onye nyocha, nke na-enye ụlọ nyocha R&D yana ndị na-emepụta ikike ịchọpụta ihe iyi egwu nchekwa ọhụrụ, dị oke mma.

Usoro ihe ize ndụ nke onye nyocha na-akwado usoro nyocha ọwa dị iche iche (SCA) dị ka nyocha ike oriri (SPA/DPA), oge, RF, yana nyocha electromagnetic (EMA) na ọgba aghara (FI) dị ka voltaji glitches, glitches elekere na nhazi laser. Ọrụ arụnyere n'ime sistemụ ahụ na-akwado ọtụtụ algọridim nke cryptographic, protocol ngwa, oghere, na ngwa ngwa.

Usoro ahụ na-enye gị ohere ịgbatị na mejuputa ụzọ ọhụrụ na ngwa omenala maka ịchọpụta adịghị ike.

Sistemụ nyocha ọwa akụkụ Inspector SCA gụnyere:

  • Onye na-achọpụta ike;
  • ntinye nke electromagnetic sounding EM Probe Station;
  • icWaves na-akpali generator;
  • CleanWave nzacha;
  • nyocha dị ugbu a Nyochaa ugbu a.

N'ime "ihe ọma" bụ isi anyị nwere ike ime ka ndị bụ isi pụta ìhè:

  • Ọ bụ otu ihe ejikọtara ọnụ maka nyocha ọwa n'akụkụ yana nyocha ịgba ọgwụ ọjọọ;
  • Onye nleba anya na-ezute EMVco na CMVP Nkwekọrịta nkịtị enwetara ikike nnwale n'akụkụ ọwa;
  • Ọ bụ ebe mepere emepe nke na-agụnye koodu isi mmalite maka modul, si otú a na-ekwe ka usoro ndị dị ugbu a gbanwee na usoro nyocha ọhụrụ nke nwere ike ịmepụta nke onye ọrụ maka onye nyocha;
  • Akụrụngwa na ngwaike kwụsiri ike na agbakwunyere gụnyere nnweta data dị elu n'ofe nde akara;
  • Usoro ntọhapụ nke ọnwa isii nke ngwanro ahụ na-eme ka ndị ọrụ nweta usoro kachasị ọhụrụ maka ịnwale ọwa akụkụ n'ọhịa.

Onye nyocha dị na ụdị dị iche iche n'otu ikpo okwu:

  • Onye nyocha SCA na-enye nhọrọ niile dị mkpa maka ịme nyocha ọwa akụkụ DPA na EMA.
  • Onye nyocha FI na-enye ọrụ ịgba ntụtụ zuru oke (mwakpo mmejọ) yana nyocha mmejọ dị iche (DFA).
  • Onye nyocha Core na SP (Nhazi akara) na-enye ọrụ isi SCA etinyere na modul dị iche iche iji nye ngwungwu ngwanrọ ịnweta maka inweta data ma ọ bụ nhazi nhazi.

Onye nyocha SCA

Ozugbo enwetara nsonaazụ nha, usoro nhazi mgbaàmà dị iche iche dị iji mepụta ọtụtụ akara ngosi dị elu na obere mkpọtụ. Emepụtala ọrụ nhazi mgbaama nke na-eburu n'uche ọdịiche dị nro dị n'etiti EM trace, trace trace, na nhazi akara akara RF. Ngosipụta trace eserese siri ike nke onye nyocha na-enye ndị ọrụ ohere nyocha oge ma ọ bụ nyochaa akara, dịka ọmụmaatụ, maka adịghị ike SPA.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
Na-eme DPA mgbe emejuputa ECC

Maka ọtụtụ mmejuputa iwu nchekwa ndị a na-ewere na-eguzogide SPA ụbọchị ndị a, a na-elekwasị anya n'ule ule na ụzọ nnwale dị iche iche (ya bụ, DPA/CPA). Iji mezuo nke a, Inspector na-enye usoro nhazi dị iche iche na-ekpuchi ọtụtụ algorithms cryptographic na algọridim ndị a na-ejikarị eme ihe dị ka (3)DES, AES, RSA na ECC.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
EM radieshon nke mgbawa ịchọta ebe kachasị mma mgbe ị na-emejuputa DEMA

Isi atụmatụ

  • Ihe ngwọta a na-ejikọta nyocha ike (SPA/DPA/CPA), electromagnetic (SEMA/DEMA/EMA-RF), na ụzọ nyocha na-abụghị kọntaktị (RFA).
  • A na-eme ka ọsọ nke inweta data dịkwuo mma site na njikọ oscilloscope siri ike na onye nyocha.
  • A na-eji usoro ịha nhata dị elu iji gbochie mgbanaka elekere na enweghị ihe ọ bụla
  • Onye ọrụ nwere ike hazie modul cryptanalysis nke na-akwado ọgụ mbụ na nke dị elu na algọridim niile dị ka (3)DES, AES, RSA na ECC.
  • A na-eji nkwado agbasawanye maka ngalaba akọwapụtara algọridim, gụnyere SEED, MISTY1, DSA, gụnyere Camellia.

Akụrụngwa

Na mgbakwunye na PC Inspector workstation, SCA na-eji ngwaike emebere maka data ọwa akụkụ yana nweta mgbaama:

  • Ọkpụkpọ ike maka SPA/DPA/CPA na kaadị smart
  • EM Probe ọdụ maka SEMA / DEMA / EMA RF
  • Nyocha dị ugbu a maka SPA/DPA/CPA na ngwaọrụ agbakwunyere
  • CleanWave filter na Micropross MP300 TCL1/2 maka RFA na RF EMA
  • Oscilloscope dakọtara IVI

Ihe ndị a na-enyocha na-achọkarị nha, mgbanwe na njikwa ngwaike dị mkpa iji rụọ SCA. Onye njikwa ngwaike na-agbanwe agbanwe nke onye nyocha, gburugburu mmepe mepere emepe, yana nhọrọ interface sara mbara na-enye ntọala siri ike maka nha dị elu site na iji ngwaike omenala.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
Onye nyocha SCA

Onye ndu injinia nchekwa ime obodo Joh John Connor na-ekwu maka sistemu a:
“Onye nyocha agbanweela ụzọ anyị si enyocha nguzogide dị iche iche nke ngwaahịa anyị. ike oriri ọgụ DPA. Ike ya dabere n'eziokwu na ọ na-ejikọta nchịkọta na usoro nyocha nke na-enye anyị ohere nyochaa ngwa ngwa nke ngwa ngwa ngwa ngwa cryptographic ọhụrụ. Ọzọkwa, eserese eserese ya dị elu na-enye onye ọrụ ohere iji anya nke uche hụ mbinye aka ike sitere na data anakọtara n'otu n'otu ma ọ bụ n'otu oge - bara uru mgbe ị na-akwadebe data maka DPA n'oge ọgụ - ebe ọba akwụkwọ nyocha ya siri ike na-akwado algọridim nzuzo nzuzo azụmahịa nke a na-ejikarị. Mmelite ngwanrọ na teknụzụ nke Riscure na-akwado na-enyere anyị aka idobe nchekwa nke ngwaahịa anyị.

Onye nyocha FI

Inspector FI - Injection mmejọ - na-enye atụmatụ dị iche iche iji rụọ ule ịgbanye mmejọ na kaadị smart yana teknụzụ ngwaọrụ agbakwunyere. Ụzọ nnwale akwadoro gụnyere mkpọchi elekere, glitches voltaji, na ọgụ laser anya. Mwakpo ogwu ogbugba mmejọ—nke a makwaara dị ka mwakpo mkparị—gbanwe omume nke mgbawa, na-ebute ọdịda enwere ike iji ya.

Site na Inspector FI, ndị ọrụ nwere ike nwalee ma enwere ike ịwepụta igodo site n'ime ka ọdịda arụ ọrụ cryptographic nke mgbawa, gafere nlele dị ka nyocha ma ọ bụ ọkwa ndụ ndụ, ma ọ bụ gbanwee ka mmemme si agba mgbawa.

Nhọrọ nhazi sara mbara

Onye nleba anya FI na-agụnye ọnụ ọgụgụ buru ibu nke onye ọrụ nwere ike ịhazi ya iji jikwaa mgbanwe na ọgba aghara dị ka pulses nke ogologo oge dị iche iche, nkwughachi pulse, na mgbanwe ọkwa voltaji. Akụrụngwa na-ewepụta nsonaazụ ya, na-egosi omume a na-atụ anya ya, nrụpụta kaadị, na omume a na-atụghị anya ya, yana ndekọ ndekọ zuru ezu. Modul ọgụ DFA dị maka algọridim nzuzo nzuzo. Iji "ọkachamara" ahụ, ndị ọrụ nwekwara ike iji API mepụta mmemme ọgba aghara omenala.

Isi atụmatụ

  • Nke na-abụghị nke na n'ụzọ dị mfe reproducible ziri ezi na oge maka niile glitching ngwaike.
  • ndapụta imewe ọgụ site na iji usoro iwu siri ike yana onye nyocha IDE agbakwunyere.
  • Nhọrọ nhazi nke onye nleba anya zuru oke maka nnwale ịgba ọgwụ mgbochi akpaghị aka.
  • Ngwá ọrụ laser maka multi-glitching na azụ na akụkụ ihu nke kaadị ahụ, nke emebere maka ịnwale site na iji usoro injection glitch.
  • Modul DFA maka mmejuputa algọridim nzuzo nzuzo, gụnyere RSA, AES, na 3DES
  • Ịkwalite na laser multi-point na-enye ohere imetụta microcircuit n'ọtụtụ ebe n'otu oge.
  • Mmekọrịta dabere na ọrụ site na iji icWaves trigger generator nwere ike igbochi ihe mgbochi ma gbochie mfu sample.

Akụrụngwa

Enwere ike iji onye nyocha FI nwere ngwa ngwa ndị a iji mee ọgụ:

  • VC Glitcher nwere nkwalite glitch ọzọ
  • Ebe laser diode nwere nkwalite ọtụtụ ihe nhọrọ
  • PicoScope 5203 ma ọ bụ oscilloscope dakọtara IVI

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
Onye nyocha FI nwere VC Glitcher, icWaves Trigger Generator, Glitch Amplifier na ọdụ Laser

Igwe ọkụ VC Glitcher na-etolite isi nke sistemu inspector glitch injection architecture. N'iji teknụzụ FPGA ngwa ngwa, enwere ike ịmepụta mmejọ dị mkpụmkpụ dị ka nanoseconds abụọ. Ngwaike nwere interface mmemme enyi na enyi. A na-ebunye mmemme na-ezighi ezi nke onye ọrụ mepụtara n'ime FPGA tupu nnwale ahụ. VC Glitcher gụnyere sekit agbakwunyere maka iwebata glitches voltaji na glitches elekere, yana mmepụta ọwa maka ịchịkwa ọdụ laser.

Ọdụdọ Laser Diode nwere usoro omenala nke lasers diode dị elu nwere ngwa anya omenala nke VC Glitcher na-achịkwa ngwa ngwa na ngbanwe. Akụrụngwa ahụ na-anwale ule anya gaa n'ọkwa ọzọ site n'inye ọtụtụ mmejọ nke ọma, njikwa ike ziri ezi, na nzaghachi ngwa ngwa na nke a na-ahụ anya maka mgbanwe pulse.

Site n'ịkwalite ọdụ laser diode na ụdị ọnụọgụ ọtụtụ, enwere ike ịnwale ọtụtụ mpaghara na mgbawa site na iji usoro oge dị iche iche na voltaji ọkọnọ.

Mgbasa sitere na mgbama na-eji icWaves na-akpalite generator

Jitter elekere, nkwụsị usoro enweghị usoro, yana oge usoro dabere data chọrọ ngbanwe mmejọ na nchịkọta data ọwa akụkụ. Igwe ọkụ icWaves nke sistemu onye nyocha na-emepụta ihe na-akpalite pulse na nzaghachi maka nchọpụta oge dị iche site na ụdị enyere na ọkụ mgbawa ma ọ bụ akara EM. Ngwaọrụ ahụ gụnyere nzacha ọkaibe pụrụ iche iji hụ na achọpụtara dakọtara ụdịdị ọbụlagodi na mgbaama mkpọtụ.

Enwere ike gbanwee akara nrụtụ aka ejiri mee ihe dabara n'ụdị n'ime ngwaọrụ FPGA site na iji ọrụ nhazi mgbaàmà nke onye nyocha. Kaadị smart nke achọpụtala ịgba ọgwụ mgbochi nwere ike ibido usoro nchebe iji wepụ data dị nro ma ọ bụ gbochie kaadị ahụ. Enwere ike iji akụrụngwa icWaves kpalite mmechi kaadị mgbe ọ bụla oriri ike ma ọ bụ profaịlụ EM na-apụ na ọrụ ọkọlọtọ.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
Laser Station (LS) nwere nhọrọ ịnweta multipoint,
na microscope na tebụl nhazi

Entegrated Development Environment (IDE)

Emebere gburugburu mmepe onye nyocha iji nye mgbanwe kachasị maka onye ọrụ iji SCA na FI maka ebumnuche ọ bụla.

  • Mepee API: na-eme ka ọ dị mfe iji mejuputa modul ọhụrụ
  • Koodu isi mmalite: Modul ọ bụla na-abịa na koodu isi mmalite nke ya, yabụ enwere ike ịmegharị modul ahụ n'ọchịchọ onye ọrụ ma ọ bụ jiri ya mee ihe ndabere maka imepụta modul ọhụrụ.

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.
Onye nyocha FI

Onye nleba anya na-ejikọta ntụtụ mmejọ yana usoro nyocha ọwa akụkụ n'otu ngwungwu arụmọrụ dị elu.

Ọmụmaatụ nke nyocha omume ọdịda:

Ịchọpụta adịghị ike na nyochaa nguzogide mwakpo hacker nke kaadị smart na ndị na-emepụta crypto nwere nchebe arụnyere.

Mpaghara nke mwakpo ọwa n'akụkụ na-etolite ngwa ngwa, na-ebipụta nchoputa nyocha ọhụrụ kwa afọ, bụrụ ndị a ma ama, ma ọ bụ mee ka asambodo nke atụmatụ na ụkpụrụ bụrụ iwu. Onye nleba anya na-enye ndị ọrụ ohere ịnọrọ anya maka mmepe ọhụrụ yana mmelite ngwanrọ oge niile na-emejuputa usoro ọhụrụ.

isi: www.habr.com

Tinye a comment