Abstract:Field Programmable Gate Arrays (FPGAs) are being increasingly deployed in diverse applications including the emerging Internet of Things (IoT), biomedical, and automotive systems. However, security of the FPGA configuration file (i.e. bitstream), especially during in-field reconfiguration, as well as effective safeguards against unauthorized tampering and piracy during operation, are notably lacking. The current practice of bitstreram encryption is only available in high-end FPGAs, incurs unacceptably high overhead for area/energy-constrained devices, and is susceptible to side channel attacks. In this paper, we present a fundamentally different and novel approach to FPGA security that can protect against all major attacks on FPGA, namely, unauthorized in-field reprogramming, piracy of FPGA intellectual property (IP) blocks, and targeted malicious modification of the bitstream. Our approach employs the security through diversity principle to FPGA, which is often used in the software domain. We make each device architecturally different from the others using both physical (static) and logical (time-varying) configuration keys, ensuring that attackers cannot use a priori knowledge about one device to mount an attack on another. It therefore mitigates the economic motivation for attackers to reverse engineering the bitstream and IP. The approach is compatible with modern remote upgrade techniques, and requires only small modifications to existing FPGA tool flows, making it an attractive addition to the FPGA security suite. Our experimental results show that the proposed approach achieves provably high security against tampering and piracy with worst-case 14% latency overhead and 13% area overhead.

Binding Hardware IPs to Specific FPGA Device via Inter-twining the PUF Response with the FSM of Sequential Circuits

FPGA IP protection by binding Finite State Machine to Physical Unclonable Function

A Flexible Design Flow for Software IP Binding in FPGA

Design and Implementation of a Delay-Based PUF for FPGA IP Protection

Techniques for Design and Implementation of an FPGA-Specific Physical Unclonable Function

Hardware Implementation of Physical Unclonable Function on FPGAs

A New Pay-per-use Scheme for the Protection of FPGA IP

Locking Secret Data in the Vault Leveraging Fuzzy PUFs

An ultra-low overhead LUT-based PUF for FPGA

A Highly Reliable Strong Physical Unclonable Function Design Based on FPGA

Efficient Attacks on Strong PUFs via Covariance and Boolean Modeling

Design and FPGA implementation of secure key management

Shift Register, Reconvergent-Fanout (SiRF) PUF Implementation on an FPGA

Design and Implementation of High Efficiency PUF Circuit on FPGA

An Efficient Communication Protocol for FPGA IP Protection

MUTARCH: Architectural diversity for FPGA device and IP security

A novel method for secure intellectual property deployment in embedded systems

Protection of heterogeneous architectures on FPGAs: An approach based on hardware firewalls

RISecure-PUF: Multipurpose PUF-Driven Security Extensions with Lookaside Buffer in RISC-V

Barrel Shifter Physical Unclonable Function Based Encryption

UNBIAS PUF: A Physical Implementation Bias Agnostic Strong PUF