A Provably Secure Strong PUF based on LWE: Construction and Implementation

Xiaodan Xi,Ge Li,Ye Wang,Yeonsoo Jeon,Michael Orshansky

2023-03-06

Abstract:We construct a strong PUF with provable security against ML attacks on both classical and quantum computers. The security is guaranteed by the cryptographic hardness of learning decryption functions of public-key cryptosystems, and the hardness of the learning-with-errors (LWE) problem defined on integer lattices. We call our construction the lattice PUF. We construct lattice PUF with a physically obfuscated key and an LWE decryption function block. To allow deployments in different scenarios, we demonstrate designs with different latency-area trade-offs. A compact design uses a highly serialized LFSR and LWE decryption function, while a latency-optimized design uses an unrolled LFSR and a parallel datapath. We prototype lattice PUF designs with $2^{136}$ challenge-response pairs (CRPs) on a Spartan 6 FPGA. In addition to theoretical security guarantee, we evaluate empirical resistance to the various leading ML techniques: the prediction error remains above $49.76\%$ after $1$ million training CRPs. The resource-efficient design requires only $45$ slices for the PUF logic proper, and $351$ slices for a fuzzy extractor. The latency-optimized design achieves a $148X$ reduction in latency, at a $10X$ increase in PUF hardware utilization. The mean uniformity of PUF responses is $49.98\%$, the mean uniqueness is $50.00\%$, and the mean reliability is $1.26\%$.

Cryptography and Security,Artificial Intelligence,Hardware Architecture

What problem does this paper attempt to address?

The main objective of this paper is to propose a Physical Unclonable Function (PUF) based on the Learning With Errors (LWE) problem, called "Lattice PUF." This PUF can demonstrate security against Machine Learning (ML) attacks, and this security holds for both classical and quantum computers.

Specifically, the paper attempts to address the following key issues:

1. **Constructing a robust PUF**: Existing PUF designs are often vulnerable to machine learning attacks. The authors propose a new PUF design that leverages the cryptographic hardness of the LWE problem to ensure its security against machine learning attacks.

2. **Theoretical security guarantees**: The paper adopts Probably Approximately Correct (PAC) learning theory as a formal framework to define the concept of machine learning resistance and proves that the LWE decryption function is not PAC learnable. This implies that any successful machine learning attack would require exponential time.

3. **Practical hardware implementation**: The authors not only provide theoretical proofs but also detail two different hardware implementation schemes—resource-efficient design and latency-optimized design—to meet the needs of different application scenarios. The resource-efficient design is suitable for resource-constrained environments, while the latency-optimized design targets applications requiring quick responses.

4. **Empirical validation**: Although theoretical analysis has proven the security of the Lattice PUF, the authors also conducted empirical studies to further validate its resistance to machine learning. Experimental results show that after 1 million training attempts, the prediction error rate remains above 49.76%, demonstrating the effectiveness of the Lattice PUF.

In summary, this paper aims to showcase a novel, LWE-based robust Physical Unclonable Function through a combination of theoretical analysis and practical validation. This PUF not only has theoretically proven security but also effectively resists machine learning attacks in practical applications.