通过分析流密码算法Mickey-128,提出一种差分错误攻击。在密钥流生成阶段插入640次错误,需要960个密钥,可计算出寄存器R和S在密钥流生成阶段的初始状态,从而恢复整个密钥流。在得出寄存器R和S在密钥流生成阶段的初始状态的前提下,在初始化阶段最坏情况下插入416次错误,需要12480个密钥可计算出密钥种子K和初始值iv。
By analyzing the weakness in design of the stream cipher Mickey-128,a differential fault attack is presented.When we induct 640 faults and have 960 stream key,we can find the initial state of register R and S,and find the entire stream key.In the initialization phase,when we induct 416 fault and have 12 480 stream key,we can find the 128-bit key-seed K and the initialization variable iv.