摘要
传统密码学原语的安全性基于黑盒攻击模型,在这个模型中,攻击者只能对密码学原语进行黑盒访问(即"随机预言"访问),而对程序运行时的内部状态一无所知.理论上来讲,不考虑现实生活中程序运行时各种类型的信息泄露的话,这样的假设是合理的.但实际上,一旦我们在终端运行程序时,总会发生各种信息的泄露,造成更强的攻击.白盒攻击即是这样的一种攻击,它有别于传统密码模型中定义的攻击类型,它假设攻击者对设备终端(即应用程序的运行环境)拥有完全的控制能力,能够观测并更改软件运行时的所有内部数据,攻击者具有更强的攻击能力.因此,传统黑盒模型下安全的密码学原语在白盒攻击模型下极度的脆弱,我们需要更高强度的密码体制来抵抗这种攻击.本文介绍了白盒密码的起源及相关概念,从基础理论研究和密码方案设计技术两方面总结归纳了其研究现状及发展动态,并从效率和安全性上对目前已公开的白盒密码方案进行了评价.最后,对白盒密码的应用场景和有待解决的问题进行了说明.
The security of traditional cryptographic primitive is based on the black-box attack model, in this model, an adversary is given black-box(oracle) access to the functionality and has no idea about the implementation details of the software. In theory, this model is rational if we ignore the information leakage from implementations in the real-world. However, once a cryptosystem is implemented in software, information leakage always happens and will result in stronger attacks. White-box attack is one of such attacks. It is different with attacks defined in traditional cryptography, it assumes that the adversary has full control over the execution environment of application programs and has total visibility of the internal values of the software. Adversaries in white-box attack context are much stronger than in black-box attack context, therefore, traditional cryptographic primitives are fragile, secure cryptosystems are needed to resist such attacks. This paper introduces the original idea and related notions of white-box cryptography, concludes the research status and development trends of white-box basic theories and design techniques, and evaluates efficiency and security for the public white-box cryptographic schemes. Also, this paper presents the application prospects of white-box cryptography and some unresolved issues.
出处
《密码学报》
CSCD
2015年第3期258-267,共10页
Journal of Cryptologic Research
基金
国家自然科学基金(61272440
61472251)
中国博士后科学基金(2014T70417
2013M531174)
保密通信重点实验室资助项目
关键词
白盒密码
混淆
黑盒
白盒实现
软件保护
white-box cryptography
obfuscation
black-box
white-box implementation
software-protection
