It is known that the protection scheme of the GIFT algorithm can only resist first-order power consumption attacks. In order to make the algorithm against high-order power attacks, this paper used the mathematical structure of GIFT algorithm and combined the threshold implementation method to construct a new second-order mask scheme of GIFT algorithm. Accor-ding to the mathematical characteristics of the nonlinear part S-box, it constructed second-order threshold implementation schemes(3, 9), (6, 7) and(5, 10) respectively, and selected the(3, 9) scheme with the least required hardware resources and simulated it in FPGA environment. In the hardware implementation, in order to better analyze and compare the hardware resources consumed, it used the parallel and serial hardware implementation methods respectively. The results show that under the NanGate 45nm open library process library, the total area consumed by the parallel implementation is 12043GE, and the total area consumed by the serial implementation is 6 373 GE. By collecting the actual power consumption curve, the T-test is used to evaluate the second-order threshold implementation scheme, which confirms the security of the second-order threshold implementation scheme.

[2020-08-05] Printed Article /doc/2019.01.0068/v2