A new method of DEFAULT block cipher resisting differential fault attack

Aiming at the problem that DEFAULT cannot resist to the differential fault attack, a protection method is proposed by using both the horizontal obfuscation and the linear codes. This method is implemented via horizontal confusion (or vertical hiding) in the redundant implementation. In particular, each S-box is masked by combining the 1-bit error correction and 4-bit error detection capabilities of 10, 4, 6 linear code. The experimental results illustrate that this method can provide half byte error correction and all bit error detection capability for cipher with only 25.08% additional software consumption. Compared with previous works, this approach achieves the advantages in terms of universality, fault detection ability and implementation cost.