Abstract:Dynamic data security in embedded systems is raising more and more concerns in numerous safety-critical applications. In particular, the data exchanges in embedded Systems-on-Chip (SoCs) using main memory are exposing many security vulnerabilities to external attacks, which will cause confidential information leakages and program execution failures for SoCs at key points. Therefore, this paper presents a security SoC architecture with integrating a four-parallel Advanced Encryption Standard-Galois/Counter Mode (AES-GCM) cryptographic accelerator for achieving high-efficiency data processing to guarantee data exchange security between the SoC and main memory against bus monitoring, off-line analysis, and data tampering attacks. The architecture design has been implemented and verified on a Xilinx Virtex-5 Field Programmable Gate Array (FPGA) platform. Based on evaluation of the cryptographic accelerator in terms of performance overhead, security capability, processing efficiency, and resource consumption, experimental results show that the parallel cryptographic accelerator does not incur significant performance overhead on providing confidentiality and integrity protections for exchanged data; its average performance overhead reduces to as low as 2.65% on typical 8-KB I/D-Caches, and its data processing efficiency is around 3 times that of the pipelined AES-GCM construction. The reinforced SoC under the data tampering attacks and benchmark tests confirms the effectiveness against external physical attacks and satisfies a good trade-off between high-efficiency and hardware overhead.

Dynamic encryption key design and management for memory data encryption in embedded systems

Encryption scheme design and implementation of embedded processor off-chip memory access

An efficient run-time encryption scheme for non-volatile main memory

A Cost-Efficient Implementation Of Public-Key Cryptography On Embedded Systems

Low-latency DAE: A Configurable Lightweight Hybrid Data and Address Encryption Engine for IoT Real-time NVM Protection

Dynamically Reconfigurable Encryption and Decryption System Design for the Internet of Things Information Security

FEDTIC: A Security Design for Embedded Systems with Insecure External Memory

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

A Reconfigurable Permutation Based Address Encryption Architecture for Memory Security

Architecting Non-Volatile Main Memory to Guard Against Persistence-based Attacks

Security Memory System for Mobile Device or Computer Against Memory Attacks

A Logic Resistive Memory Chip for Embedded Key Storage with Physical Security

Small private key MQPKS on an embedded microprocessor

Protecting mobile devices from physical memory attacks with targeted encryption

Dynamic Key AES Encryption Algorithm Based on Compound Chaotic Sequence

Improve the Security of Random Executing Encryption ICs by the Data Flow Mode

Leveraging Dual-Mode Magnetic Crossbar for Ultra-low Energy In-memory Data Encryption.

A Cost-Effective Tag Design For Memory Data Authentication In Embedded Systems

AN ANTI-DPA HARDWARE ARCHITECTURE OF EMBEDDED CPU BASED ON RANDOM DELAY

A Dynamic Reconfigurable Design of Multiple Cryptographic Algorithms Based on FPGA

Concealable Physical Unclonable Function Generation and In-Memory Encryption Machine using Vertical Self-Rectifying Memristors