针对智能卡采用个人身份码和密码算法双重保护机制,提出一种截断电源式的功耗分析方法,突破个人身份码的输入次数限制,通过穷举搜索获取个人身份码.并利用差分功耗分析技术,在40000个明文样本的情况下,攻击得到原型智能卡中DES密码的密钥.
The personal identification number (PIN) and encryption technologies are commonly used to form dual protection mechanism for smart cards. In this paper, a novel power analysis attack with a cut off power technique a- gainst smart cards is proposed. This attack can bypass the restriction on the times of PIN inputs to obtain it through the exhaustive search. And the differential power analysis experiment on DES implemented in an exemplary smart card showed that the secret key of DES was recovered successfully with 40000 plaintext samples.