Differential Fault Analysis of AES Block Cipher Base on S-box

This paper examines the strength of AES block cipher against the differential fault attack.The attack applies the byte-oriented fault model and combines the differential analysis method,after injecting one byte single fault into the 8th round of AES encryption before the MixColumns function,one faulty ciphertext is able to reduce AES key searching space from 2128 to 232.3,two faulty ciphertexts can extract the full 128-bit AES key without any brute-force search with about 93.6% probabilities.Mathematical analysis and experiments demonstrate that: the non-full coverage feature of the block cipher differential S box provides the probabilities of differential fault analysis,and the great diffusion property of AES MixColumns function greatly improves the attack efficiency of key recovering,meanwhile,the fault analysis model proposed in this paper can be applied into the fault analysis of other block ciphers with S-box.