集成电路微控制器芯片在执行不同的指令时会产生不同的功耗旁路泄露特征,根据这些特征用统计方法构建对应不同指令以及指令执行路径的旁路模板,并根据极大似然方法匹配目标芯片工作时泄露的功耗旁路信号,进而推断芯片中程序的执行路径甚至指令代码.针对微控制器(AT89C52)上实现的RSA二进制模幂算法的简单旁路模板分析验证了旁路模板分析对于推断程序执行路径的可行性,对微控制器典型指令的统计旁路模板分析实验说明了旁路模板分析在芯片指令逆向工程中的可行性.
There are different power consumption leakage characters for different instructions executed in IC chips.These side channel characters can be used to construct templates for different instructions and different paths a program took at a certain time.And then the side channel signals obtained from an unknown chip would be matched with these side channel templates,and the according to the maximum likelihood theory the best matched candidate may be the most likely correct instruction or path.The simple side channel template analysis against the binary modular exponentiation implementation of RSA executed in a microcontroller(AT89C52) validated the effective of the side channel template analysis in programs′ path detection,and the static side channel template analysis against several typical instructions showed that the side channel template analysis is useful and powerful in reverse engineering for cipher chips.