Abstract:Field Programmable Gate Arrays (FPGAs) are being increasingly deployed in diverse applications including the emerging Internet of Things (IoT), biomedical, and automotive systems. However, security of the FPGA configuration file (i.e. bitstream), especially during in-field reconfiguration, as well as effective safeguards against unauthorized tampering and piracy during operation, are notably lacking. The current practice of bitstreram encryption is only available in high-end FPGAs, incurs unacceptably high overhead for area/energy-constrained devices, and is susceptible to side channel attacks. In this paper, we present a fundamentally different and novel approach to FPGA security that can protect against all major attacks on FPGA, namely, unauthorized in-field reprogramming, piracy of FPGA intellectual property (IP) blocks, and targeted malicious modification of the bitstream. Our approach employs the security through diversity principle to FPGA, which is often used in the software domain. We make each device architecturally different from the others using both physical (static) and logical (time-varying) configuration keys, ensuring that attackers cannot use a priori knowledge about one device to mount an attack on another. It therefore mitigates the economic motivation for attackers to reverse engineering the bitstream and IP. The approach is compatible with modern remote upgrade techniques, and requires only small modifications to existing FPGA tool flows, making it an attractive addition to the FPGA security suite. Our experimental results show that the proposed approach achieves provably high security against tampering and piracy with worst-case 14% latency overhead and 13% area overhead.

IP protection in Partially Reconfigurable FPGAs

A Pay-per-Use Licensing Scheme for Hardware IP Cores in Recent SRAM-Based FPGAs

Design of a Reconfigurable Cryptographic Engine

A New Pay-per-use Scheme for the Protection of FPGA IP

A novel method for secure intellectual property deployment in embedded systems

Designing secure systems on reconfigurable hardware

Securing Soft IP Cores in FPGA based Reconfigurable Mobile Heterogeneous Systems

An Efficient Communication Protocol for FPGA IP Protection

A Flexible Design Flow for Software IP Binding in FPGA

MUTARCH: Architectural diversity for FPGA device and IP security

Stealing Maggie's Secrets -- On the Challenges of IP Theft Through FPGA Reverse Engineering

Patching FPGAs: The Security Implications of Bitstream Modifications

Flexible Updating of Internet of Things Computing Functions through Optimizing Dynamic Partial Reconfiguration

A Look at the Dark Side of Hardware Reverse Engineering -- A Case Study

FPGA IP protection by binding Finite State Machine to Physical Unclonable Function

FuncTeller: How Well Does eFPGA Hide Functionality?

Toward Hardware-Based IP Vulnerability Detection and Post-Deployment Patching in Systems-on-Chip

Reconfigurable Designs for Networking Silicon.

Regarding Processors and Reconfigurable IP Cores As Services

Toward FPGA Intellectual Property (IP) Encryption from Netlist to Bitstream