Jakub Słowik, Gregory Williams, Rummah Albashir, Anthony Samagio, Geraldine Shirley Nicholas, F. Saqib
{"title":"Dynamic Key Updates for LUT Locked Design","authors":"Jakub Słowik, Gregory Williams, Rummah Albashir, Anthony Samagio, Geraldine Shirley Nicholas, F. Saqib","doi":"10.1109/HOST54066.2022.9839821","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839821","url":null,"abstract":"Given the massive influx of technological advancement, semiconductor companies have moved to offshore foundries for manufacturing and utilize third party Intellectual Property (3PIP) during design and integration processes. 3PIP improves design time, cost, and adaptability of intricate and ever-changing design flows of SoCs, however, it also opens the door for malicious actors to sabotage the semiconductor ecosystem by IP theft, trojans and counterfeit chips. We propose a secure design flow for 3PIP integration for the FPGA platform that enables the key update process for key locks during the lifecycle of the FPGA based 3PIP. The paper demonstrates the design process of partial bitstreams of secured benchmarks, implement LUT level key gates dynamic partial reconfiguration, and secure architecture to enable key provisioning during runtime.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123548741","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Towards Attack Resilient Delay-Based Strong PUFs","authors":"Nils Wisiol","doi":"10.1109/HOST54066.2022.9839791","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839791","url":null,"abstract":"We present the LP-PUF, a novel, Arbiter PUF-based, CMOS-compatible strong PUF design. We explain the motivation behind the design choices for LP-PUF and show evaluation results to demonstrate that LP-PUF has good uniqueness, low bias, and fair bit sensitivity and reliability values. Furthermore, based on analyses and discussion of the LR and splitting attacks, the reliability attacks, and MLP attack, we argue that the LP-PUF is secure against known PUF modeling attacks, which motivates a discussion of limitations of our study and suggestion for future work with respect to the LP-PUF.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"92 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133788851","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"SecSoC: A Secure System on Chip Architecture for IoT Devices","authors":"Ayman Hroub, M. Elrabaa","doi":"10.1109/HOST54066.2022.9839995","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839995","url":null,"abstract":"IoT technology is finding new applications every day and everywhere in our daily lives. With that, come new use cases with new challenges in terms of device and data security. One of such challenges arises from the fact that many IoT devices/nodes are no longer being deployed on owners' premises, but rather on public or private property other than the owner's. With potential physical access to the IoT node, adversaries can launch many attacks that circumvent conventional protection methods. In this paper, we propose Secure SoC (SecSoC), a secure system-on-chip architecture that mitigates such attacks. This include logical memory dump attacks, bus snooping attacks, and compromised operating systems. SecSoC relies on two main mechanisms, (1) providing security extensions to the compute engine that runs the user application without changing its instruction set, (2) adding a security management unit (SMU) that provide HW security primitives for encryption, hashing, random number generators, and secrets store (keys, certificates, etc.). SecSoC ensures that no secret or sensitive data can leave the SoC IC in plaintext. SecSoC is being implemented in Bluespec System V erilog. The experimental results will reveal the area, power, and cycle time overhead of these security extensions. Overall performance (total execution time) will also be evaluated using IoT benchmarks.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134589657","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Mila Anastasova, Mojtaba Bisheh-Niasar, Hwajeong Seo, R. Azarderakhsh, Mehran Mozaffari Kermani
{"title":"Efficient and Side-Channel Resistant Design of High-Security Ed448 on ARM Cortex-M4","authors":"Mila Anastasova, Mojtaba Bisheh-Niasar, Hwajeong Seo, R. Azarderakhsh, Mehran Mozaffari Kermani","doi":"10.1109/HOST54066.2022.9839742","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839742","url":null,"abstract":"The demand for classical cryptography schemes continues to increase due to the exhaustive studies on their security. Thus, constant improvement of timing, power consumption, and memory requirements are needed for the most widely used classical Elliptic Curve Cryptography (ECC) primitives, suiting high-as well as low-end devices. In this work, we present the first implementation of the Edwards Curve Digital Signature Algorithm (EdDSA) based on the Ed448 targeting the ARM Cortex-M4-based STM32F407VG microcontroller, which forms a large part of the Internet of Things (IoT) world. We report timing and memory consumption results based on portable C and target-specific hand-crafted assembly code implementations of the low-level finite filed arithmetics. We optimize the high-level group operations by implementing the efficient scalar multiplication over the Ed448 isogenous map to reduce the computation complexity. Furthermore, we provide a side-channel analysis (SCA) and fault attack protected design by developing point randomization, scalar blinding techniques, and repeated signature, and evaluate the performance. Our optimized architecture performs a signature and verification in 39.88ms and 51.54ms, respectively, where SCA protection can be achieved at less than 6.4% cost of performance overhead.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130564264","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"PUF-based Secure Test Wrapper Design for Network-on-Chip","authors":"Ying Zhang, Yuanxiang Li, Xin Chen, Jizhong Yang, Yifeng Hua, Jiaoyan Yao","doi":"10.1109/HOST54066.2022.9840115","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9840115","url":null,"abstract":"Without secure wrappers, it is impossible to protect the integrity of embedded IP cores for NoC-based SoC. This paper describes an IEEE 1500 compatible secure test wrapper NoC based on low-cost PUF circuit. The original key generated by LFSR is encrypted into a stream cipher by the PUF module, and the input key string should be equal to this cryptograph unless the wrapper is locked, which provides effective on-line authentication.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"36 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122188931","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Lightweight Mutual Authentication Protocol Based on Physical Unclonable Functions","authors":"Saeed Abdolinezhad, A. Sikora","doi":"10.1109/HOST54066.2022.9840132","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9840132","url":null,"abstract":"The desire to connect more and more devices and to make them more intelligent and more reliable, is driving the needs for the Internet of Things more than ever. Such IoT edge systems require sound security measures against cyber-attacks, since they are interconnected, spatially distributed, and operational for an extended period of time. One of the most important requirements for the security in many industrial IoT applications is the authentication of the devices. In this paper, we present a mutual authentication protocol based on Physical Unclonable Functions, where challenge-response pairs are used for both device and server authentication. Moreover, a session key can be derived by the protocol in order to secure the communication channel. We show that our protocol is secure against machine learning, replay, man-in-the-middle, cloning, and physical attacks. Moreover, it is shown that the protocol benefits from a smaller computational, communication, storage, and hardware overhead, compared to similar works.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116950714","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Detecting Continuous Jamming Attack using Ultra-low Power RSSI Circuit","authors":"Ankit Mittal, A. Shrivastava","doi":"10.1109/HOST54066.2022.9840209","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9840209","url":null,"abstract":"This paper presents an ultra-low power received signal strength indicator (RSSI) circuit to detect constant jamming attacks in the internet-of-things (IoT) network. The proposed RSSI circuit uses a passive rectifier to convert incoming radio frequency (RF) signal to a DC level. A set of cascaded ultra-low power differential amplifier stages then generate the RSSI level. The circuit is implemented in a commercial 65-nm CMOS process and consumes 25nW. It has a detection sensitivity of −70dBm and a dynamic range of 48dB with a ±1dB accuracy. Simulation results of the RSSI circuit shows its robustness to noise, process, and, temperature variations.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114861067","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Reshmi Suragani, Emiliia Nazarenko, N. Anagnostopoulos, Nico Mexis, E. Kavun
{"title":"Identification and Classification of Corrupted PUF Responses via Machine Learning","authors":"Reshmi Suragani, Emiliia Nazarenko, N. Anagnostopoulos, Nico Mexis, E. Kavun","doi":"10.1109/HOST54066.2022.9839919","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839919","url":null,"abstract":"A Physical Unclonable Function (PUF) exploits de-vice manufacturing variations to extract a number of unique responses, each of which corresponds to a specific challenge, and use them for secret generation as well as authentication. However, these responses are often excessively noisy for authentication. In this study, in order to avoid using a complicated and costly Error Correction Code (ECC) in the context of a fuzzy extractor, we propose a Machine Learning (ML)-based classification technique that works accurately even in the presence of corrupted responses and we test it on an existing SRAM PUF dataset. In this approach, the SRAM power-up responses are transformed into 2D images in order to extract features from them for classification. With our proposed architecture, an accuracy of 97.34 % is achieved for “intact” noisy images. In addition, the presented ML model is successful in classifying responses even when a large part of them was corrupted. With our approach, the model can classify responses accurately with up to a 30 % loss in data. Finally, we also propose a proof-of-concept authentication technique using the relevant Convolutional Neural Network (CNN).","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"63 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115874438","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Securing Hardware Accelerator during High-level Synthesis","authors":"Dipanjan Roy, Sabiya Jani Shaik, Sonam Sharma","doi":"10.1109/HOST54066.2022.9840309","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9840309","url":null,"abstract":"Performing Reverse Engineering (RE) on the Intellectual Property (IP) core of Hardware Accelerator (HA) becomes the first step of the attackers to launch a successful attack. This enables them to introduce hardware Trojan, create backdoors, cloning and counterfeit the IP core. In this work, a robust hardware obfuscation approach is proposed to generate a reverse engineering resilient hardware accelerator. The obfuscation is performed in three different ways during the scheduling phase of High-level Synthesis (HLS) by embedding key-controlled components. Unlike state-of-the-art approaches, a novel algorithm is developed to identify the suitable locations for embedding these key-controlled components to enhance the reverse engineering complexity. The proposed method incurs minimal average design cost overhead, i.e., 7% compared to the non-obfuscated design and achieves average design cost reduction by 12.1% compared to one closely related approach for key size 90.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131978356","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Practical Performance of Analog Attack Techniques","authors":"Vaibhav Venugopal Rao, Kyle Juretus, I. Savidis","doi":"10.1109/HOST54066.2022.9839966","DOIUrl":"https://doi.org/10.1109/HOST54066.2022.9839966","url":null,"abstract":"The increasing number of vulnerabilities in analog circuits has motivated the development of novel security techniques that protect the analog supply chain. A variety of attacks including ones based on satisfiability modulo theory (SMT) and genetic algorithms (GA) have been executed on different analog circuits to evaluate the vulnerabilities of the added protection. However, the current attack techniques assume ideal conditions, where the attacker has complete knowledge of the IC except for the key used to obfuscate the circuit. In this paper, four different threat models are examined, where an adversary is assumed to have different levels of access to circuit and security information. The analysis of the attack performance on key-based parameter obfuscation is performed premised upon the level of information possessed by the adversary. The analog attack techniques are evaluated on five distinct circuit topologies, each implemented with different key sizes and obfuscated parameters. Through analysis of the results, a characterization of the advantages and disadvantages of the analog attack algorithms is provided.","PeriodicalId":222250,"journal":{"name":"2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","volume":"217 2‐3","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132702860","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}