VLSI Implementation of an AES Algorithm Resistant to Differential Power Analysis Attack

Abstract-This paper proposes a low cost VLSI implementation of a masked AES algorithm resistant to DPA (Differential Power Analysis) attack. In order to minimize the influence of the modification to the hardware cost while enabling it resistant to DPA, such methods as altering calculation order, module reuse and composite field computation are employed to reduce chip area and maintain its speed. Using the HHNEC 0.25ȝm CMOS process, the scale of the design is about 48K equivalent gates and its system frequency is up to 70MHz. The throughput of the 128-bit data encryption and decryption are as high as 380Mbit/s. I