CRYPIREC Report  2006 19 3
2006 2000 3 ( CRYPIREC) 2003     2 CRYPIREC ( ） ( ） FIPS 140-2 I SOI EC JTC 1/SC 27/WG 3 I SOI EC  19790 2003 I SOI EC JTC 1/SC 27/WG 3 I SOI EC  19790 LSI CPKI 1 3 2005 ORYPIREC Report url http://www cryptrec.jp/report.ht nh 2 ORYPIREC info&ryptrec.jp 1 N CT I PA I SOI EC 3 (2007 ） ( 2006 9  NIT NIT ( 2005 ）
） (2005
) ) 4 (2007 3 ） NIT NEC 18 9 18  12 1. 1
ORYPTREC
e- Japan ( I PA) 5 2000 (NCT) 2001 ORYPIREC( ORYPTography Research and Eval uati on Conmittees) 2002 ORYPIREC 2000 3 B 2 2003 2003
VG
1. 2 N ST² ( 1) FIPS¹  140-2  ( ( 2) I SO/I EC   19790 (SE) 1.21 FIPS 140-2/140-3 FIPS 140-2 / CMP 6 N ST (DIR)
N ST DIR I G 5 N ST/CSE。 140- 3 2004 FI PS 9 “ CMP Synposi um2004" 2005 9 FI PS 140- 3 “ N ST Physi cal  Securi t y Test i ng Wirkshop” 9 FIPS 140-3 2007 FI PS  140-2 2007 3 2007 3 15 1.2 2   I SO/I EC 19790 I SOI EC 19790 FI PS 140-2 3 12 2005 3 2006 1 I SOI EC JTC 110 SC Z7/WG FII S'' I SOI EC  19790 FIPS 140-2 24759 2005 11 Kual a  Lunpur Randy   East er ( N ST) 3 2007 Sonmerfel d 5 2007 lst O ) Jean-Pierre   Quenard( Hans von 1st   D² FOD 2008 NST  FIPS 140-2 FIPS 140-3 SC 27 I S N ST FIPS 140-2 JTC 1 ( P 13 ) FIPS 140-3   IS I SOI EC 19790 1. 3 1. 3 1 2 2003 OMP CRYPIREC 2003 2 ( 1) 14 15 ( 2) ( 1) ( 2) 2000 ( 1) I SOI EC o ( 2 FPCA16 2004 ( 1) ( I SOI EC 19790) FIPS 140-2 o a) e) a) FIPS 140-2 ( lst  CD 19790) b) a) c) I SO’I EC  JTC  1/SC  27/WG  3 (I SOI EC  19790) d) o " I npl enent at i on Qui dance f or  FI PS PUB 140-2 and t he Crypt ographi c N ST 4 28 Modul e  Val i dat i on  Program(Last  Updat e:   Apri l  28,  2004) " e) 2003
Q 1 OHNE NOII CE N ST ( 2) 2003 Q 1 a) c) a) I NSTAC17 8 CPU (8 CPU b) I NSTAC (32 ou 32 CPU I NSTAC 2003 FPCA c) (7 ） ） OHS 2004(8 ASI AORYPT 2004( 12 Veb I SEC )   CSS 2004( 10 ） I D (9 ) I ARe-Print Archi ves 2005 ( 1 ) FIPS 140-2 I SOI EC  19790 2006 1
140-2 FIPS PUB 140-2 Security requirenents for cryptographic nodules Deri ved Test  Requi renents  [DIR]  for  FIPS  PUB 140-2 a) I SO’I EC  JTC  1/SC  27/WG  3 (FD 19790, FDS 19790) b) N ST " I npl enent at i on Gui dance f or  FI PS PUB 140-2 and t he Crypt ographi c Mdul e  Val i dat i on  Program c) 2004 FDS 19790 Q 1 Ω 1 ( 2) 2004 CPU （32 1.3.2 2006 2000 ( 1) I SOI EC  24759 FIPS 140-2 I SOI EC  19790 19790 2006 24759 I SOI EC I SOI EC JTC 1/SC 27 24759 SC 27 ( 2) FIPS  140-3 N ST 2007 FI PS 140-2 140-3 (3) 2004 32 CPU 2005 CPU FPCA 8 200 2 ( 1) I SOI EC JTC 1 SC 27 I SOI EC 19790 24759 I SOI EC 24759 W 1st O SC 27 ( 2 FIPS 140 2    FIPS 140 3 I NSTAC- 8   INSTAC- 32 (3) JIS JIS
2 2 1 2 1. 1 (1)FI PS 140-2 (SEQUI TY REQUI RENINIS FOR ORYPTOGRAPH C MIDULES) FI PS 140 N ST FIPS 140 5 1 2001 1994 FI PS 140-1 FI PS 140-2 FI PS 140-2 FI PS 140-1 FIPS 140-2 12 2002 3 2007 FI PS 140-2 11 ( ) / 4 ( 1 4) (2)DIR (Derl ved Test Requi renents for FIPS FUB 140-2) DIR FI PS 140-2 DIR FIP 140-2 3 24 2004 2007 3 DIR 11 FIPS 140-2 11 18 FI PS 140-2 FIPS 140-2 19 H (3)
l mpl enentati on Qui dance
CMP DIR I npl enent at i on  Gui dance N ST CSE CMP 2007 FI PS 140- 2 DIR I npl enent at i on Qui dance 21 3 2007 3 17  （OVERMEW  CENERAL  I SSUES, SECII ON 1 I npl enent at i on  Gui dance SECII ON 14,   EXPI RED I MPLEMENTAI TON GUIDANCE) “ SECII ON 1 FI PS  140- 2 SECII ON 14" SECII ON
“ OVERM EW “ I npl enent at i on Gui dance” I SSUES” SECII ON 14 SECII ON 1 " GENERAL “ EXPIRED I MPLEMENTAL TON QU DANTE FI PS  140-3 (4FIPS 140-2 FI PS 140- 2 2006
9
2006
IC CSD 4    I PA 28 N ST( 13)
( 2 ( 2
18 12 fi ps  140-3 FIPS 140-2 FIPS 140-3 5 FI PS  140-2 4 9 2004 CMP 2004
FSM²6 11 2 non-invasive attack ²7 3 I Gl. 9 FIPS 140-2 4 11 Mtigation of  Other  Attacks
3 DIR FI PS 140- 2 5 FIPS 140-3 FIPS 140-3 2007 1 Draft OMP (NST CSE) 2007 1
16
2007 1 lst  Draft 90 2007 4 lst  Draft 2007 OWP Synposi um 2007 2007 2nd Draft 2007 2007 3 Draft 2007 3
lst  Draft 90
6 lst  Draft
OWP Synposi um 2007 2nd Draft 2007
2 1. 2   I SOI EC
(1) I SO/I EC JTC 1/SC 27/VG 3 I SO’I EC  JTC  1 I SO I EC SC 27 I T W3 ( 2 ) I SO/I EC 19790 (Securi ty requi renents for cryptographi c nedul es) 2002 10 I SOI EC JTC 1/SC 27/WG 3 19790 2005 10 FOD 12 2005 FD S 2006 3  1 I SOI EC  19790 I SO'I EC 19790 FI PS 140-2 CC( Conmon Cri t eri a) C FI PS 140-2 CSP CSP PSP (3) I SO’I EC 24759 (Test  requi renants  for  cryptographi c  nodul es) 2005 4 I SOI EC  19790 24759 2006 5 W 2006  11 lst 2007  5 FOD I SOI EC 24759 4 FIPS 140-2    DIR FIPS 140-2 2 1.3 2006 2 1. 3 1 (1), (2) ( 1) I SOI EC  24759 I SOI EC JTC 1/SC 27 I SOI EC  19790 I SO'I EC 24795 lst  O SC 27 (2) FIPS 140-3   1st Draft 11 2006 Draft lst FIPS 140-3 2007    3    15 2 1. 3 2 I SOI EC 19790 2005 DIR FI PS 140-2 FIPS 140-2   ISOIEC 19790 FIPS 140-2 ( 2006 03-31     ) ) I npl enent at i on Gui dance( 2005       12 ( 2006 -03-31    ) I SOI EC 3 3 2007 JI S JIS X19790 JIS X5091 JIS X 19790 I SOI EC  19790 JIS X 5091 FI PS 140-2 24759 I SOI EC  24759 DIR I SOI EC 19790 ORYPIREC Report url - - 2005 2006-03-01 http://www cryptrec.jp/report.ht nh 2 2 2 2 1 I C IPA SPA 2003 FIPS 140-2      FIPS 140-2 I SOI EC  19790 FIPS 140-2    I SOI EC 19790 I NSTAC I NSTAC- 8 I NSTAC- 32 LSI LSI 2 2 2   I NSTAC-8/-32 I NSTAC- 8/- 32
I SEC SAS aes Wirkshop on Crypt ographi c  Hardvare  and  Embedded  Syst ens The International Association for Cryptologic Research CSS ( 1) 8bi t OPU (
（ ） (INSTAQ
DES (D fferenti al  Pover Anal ysi s) (お
( SA S2005 ] （ ） GSM  Q obal   Systemfor  Mobile  Communi cat i ons cl ock- cont rol A5/1
2
3
229. 48 (3) SBOX IPA ( ] SA S2005 DPA Different i al  Pover Anal ysi s S- BOX
S- BOX S- BOX IPA (4) I NSTAC- 8 ] 67 I NSTAC- 8 DPA ( 5) CPU I SEC NTT ] l NIT OPU CPU CPU 1 (6) 32bi t OPU ]  I SEC （ ） 16 32bit  OU DES RSA (7) Experi nent al  Resul t s  on I NSTAC- 8 Compl i ant  Board ( JSA/I NSTAC/TSRC （ ） JSA/I NSTAC/TSRC ] JSA/I NSTAC/TSRC Physical Security Testing Vørkshop I NSTAC- 8 3 SPA 1 DES IPA DPA I NSTAC- 8 2 l ( I NSTAO) 3 ENA (IPA) ( 2 S- box TECHN CAL REPORT OF I E CE 1 ENA 3 A5/1 SPA 9 2005 N ST I PA Physical Security Test i ng  Wrkshop Physical Security Testing Wrkshop Veb ht t p: //www ni st. gov/publ i c_af f ai rs/conf page/050926ht m ht m ht t p: //csrc. ni st. gov/crypt val /physec/physecdoc. ht nh ( 8) DPA [ SA S2006 ] 2005 9 Physical  Security Testing Wirkshop A5/1 SPA IPA Milti - bit DPA 32 I NSTAC- 8 XR 8 8 4 3000 500MSanpl e/sec XR Milti-bit DPA (9) ( ]　SO S2006 IPA (D fferenti al  Pover Anal ysi s
IPA IPA I NSTAC- 8 AES (10) CPU ( ] SA S2006 1998 Kocher CPU I NSTAC- 8 (11) Sbox IPA SA S2006 ] ( al l - key al l - key 1- key IPA (12) ( ] I SEC SPA DPA Z80 DES IPA I NSTAC- 8 (13) ( JSA JSA （ ） JSA ] I SEC 3 I NSTAC- 8 3 SPA 1 DES
ENA I NSTAC- 8 2 S- box 1 ENA 3 A5/1 SPA
2005 5 Physi cal  Securi t y Test i ng Wrkshop 2005 (14) ( NIT FPCA DPA I SEC ] IPA Akker G raud AG DPA XR IPA AG DPA FPCA DES AG FPGA DES AG ( 15 ) ( ] AES ( Advanced Encrypt i on St andard) ( ) (16) IPA ] 5 IPA DPA AND FI T2006 I NSTAC- 32 SCAPE Msserges ( (17) H gh-resol uti on si de- channel  at t ack  usi ng phase- based vavef ormnat chi ng  [ ] aes 2006
( ) Z80 DES IPA (DENA) (18) l ] CSS2006 (IPA) IPA DES IPA ( 19)
RSA SPA FPCA
SPA 2 (20) l ] 21 -- (21) I SEC
[ ] AES FPGA IPA (22) [ ]　SA S2007 (IPA) DPA IPA DPA DES ( 23)    INSTAC- 32 （ ） ] SO S2007 l NEC M SA
( 24)  RSA I NSTAC- 32 ( NEC (   ) ]　SA S2007 I NSTAC- 32 I NSTAC- 32 RSA CPU  FPCA I NSTAC- 32 FPCA RSA mary CPU 2bi t mary 4 RSA I NSTAC- 32 CPU FPCA ( 25)    eSTREAM DPA l NEC （ ） ]　SO S2007 eSTREAM eSIREAM (DPA) SW 13 HW 21 IPA DRAIN LEX PY DONG SW DRAIN LEX DONG Py I NSTAC- 8 400 IPA (26) RSA SPA[ ]　SA S2007 N− 1   N 3 SPA SPA 2 2 4 RSA FPCA N 1 2 (27) DPA --- MRSL DRSL --- [ ]　SA S2007 IPA RSL 2006 RSL RSL MRSL IRSL 2 DPA RSL RSL MPL RSL RSL MRSL DRSL IPA FPGA IPA (28) CPU AES ( NIT ]　SA S2007 CPU AES ( 29) FPCA AES ( NIT ]　SA S2007 FPGA AES DPA ( 30)     INSTAC- 32 RSA ( ]  I SEC A Lenstra RSA 32bi t OPU 2 2 3 (VQ 2006 I NSTAC- 8/- 32 VG I NSTAC- 32 W 2007 2007 2007 I NSTAC- 32
3
2006
3
1
2006 2 2