Abstract:Chip designers outsource chip fabrication to external foundries, but at the risk of IP theft. Logic locking, a promising solution to mitigate this threat, adds extra logic gates (key gates) and inputs (key bits) to the chip so that it functions correctly only when the correct key, known only to the designer but not the foundry, is applied. In this paper, we identify a new vulnerability in all existing logic locking schemes. Prior attacks on logic locking have assumed that, in addition to the design of the locked chip, the attacker has access to a working copy of the chip. Our attack does not require a working copy and yet we successfully recover a significant fraction of key bits from the design of the locked chip only. Empirically, we demonstrate the success of our attack on eight large benchmark circuits from a benchmark suite that has been tailored specifically for logic synthesis research, for two different logic locking schemes. Then, to address this vulnerability, we initiate the study of provably secure logic locking mechanisms. We formalize, for the first time to our knowledge, a precise notion of security for logic locking. We establish that any locking procedure that is secure under our definition is guaranteed to counter our desynthesis attack, and all other such known attacks. We then devise a new logic locking procedure, Meerkat, that guarantees that the locked chip reveals no information about the key or the designer's intended functionality. A main insight behind Meerkat is that canonical representations of boolean functionality via Reduced Ordered Binary Decision Diagrams (ROBDDs) can be leveraged effectively to provide security. We analyze Meerkat with regards to its security properties and the overhead it incurs. As such, our work is a contribution to both the foundations and practice of securing digital ICs.

Transistor-Level Camouflaged Logic Locking Method For Monolithic 3d Ic Security

Leveraging Layout-based Effects for Locking Analog ICs

Hardware-Efficient Logic Camouflaging for Monolithic 3-D ICs.

Utilizing Layout Effects for Analog Logic Locking

ALL-MASK: A Reconfigurable Logic Locking Method for Multicore Architecture with Sequential-Instruction-Oriented Key

Security Closure of IC Layouts Against Hardware Trojans

IP Protection and Supply Chain Security through Logic Obfuscation

A Novel Interconnect Camouflaging Technique using Transistor Threshold Voltage

IP Protection and Supply Chain Security Through Logic Obfuscation: A Systematic Overview

Is The Secure Ic Camouflaging Really Secure?

Logic Locking for Secure Outsourced Chip Fabrication: A New Attack and Provably Secure Defense Mechanism

Quantifying the Efficacy of Logic Locking Methods

Unraveling Latch Locking Using Machine Learning, Boolean Analysis, and ILP

SubLock: Sub-Circuit Replacement based Input Dependent Key-based Logic Locking for Robust IP Protection

Provably Secure Camouflaging Strategy for IC Protection

A Module-Level Configuration Methodology for Programmable Camouflaged Logic

TroLLoc: Logic Locking and Layout Hardening for IC Security Closure against Hardware Trojans

Dynamic Current Mode Logic Based Flip-Flop Design for Robust and Low-Power Security Integrated Circuits

Attack of the Genes: Finding Keys and Parameters of Locked Analog ICs Using Genetic Algorithm

A Modern Approach to IP Protection and Trojan Prevention: Split Manufacturing for 3D ICs and Obfuscation of Vertical Interconnects