Abstract:Scan-based Design-for-testability (DfT) is the de facto standard in the semiconductor testing industry to guarantee the functional and structural correctness of chips. It provides improved observability and controllability, leading to enhanced fault coverage. However, owing to widespread usage, attackers devise techniques to misuse this method to steal secret keys embedded in a security-critical chip. A vast majority of off-the-shelf defense mechanisms are based on either randomizing the scan output or restricting access to the scan. However, none of these defense mechanisms leverage the fundamental properties of the scan attack; thus, they tend to be complex and incur high area and computation overhead. In this paper, we propose a defense mechanism by preventing the vulnerabilities of fundamental properties from being exploited in scan attacks. The paper first pinpoints the ultimate condition of the scan attack on Advanced Encryption Standard (AES). This attack condition is inherent to the cryptographic property of the cipher, which, when violated, thwarts the attack. To implement our defense, we interchange the AES round outputs by applying pre-computed masks. The designer chooses inputs with a fixed difference to swap the outputs. A modified incorrect key is recovered instead of an actual key if a scan-based attack is launched. To show the generality of the proposed defense, it is extended to another AES-like cipher, Light Encryption Device (LED). To the best of our knowledge, this is the first defense against a scan attack wherein the complete testing process, including structural and functional tests, can be outsourced to untrusted third parties without compromising the actual key. In comparison, logic locking techniques limaye2020thwarting can outsource only structural testing to untrusted third parties.

Partial Scan Design Against Scan-Based Side Channel Attacks.

A Secure Scan Method for Crypto Chips

Balancing Testability and Security by Configurable Partial Scan Design.

How to Secure Scan Design Against Scan-Based Side-Channel Attacks?

A New Countermeasure Against Scan-Based Side-Channel Attacks

Why Current Secure Scan Designs Fail and How to Fix Them?

A Memristor-based Secure Scan Design Against the Scan-based Side-Channel Attacks

A Low-overhead PUF-based Secure Scan Design

An Obfuscation Scheme of Scan Chain to Protect the Cryptographic Chips.

Static and Dynamic Obfuscations of Scan Data Against Scan-Based Side-Channel Attacks

A Secure DFT Architecture Protecting Crypto Chips Against Scan-Based Attacks

A Guaranteed Secure Scan Design Based on Test Data Obfuscation by Cryptographic Hash

Partial Scan Design Based on Circuit State Information and Functional Analysis

Building Hardware Security Primitives Using Scan-based Design-for-Testability

Secure Scan and Test Using Obfuscation Throughout Supply Chain.

A scan chain optimization method for diagnosis

DefScan : Provably Defeating Scan Attack on AES-Like Ciphers

A secure scan chain test scheme exploiting retention loss of memristors

A Multiple Phase Partial Scan Design Method

A New Secure Scan Design with PUF-based Key for Authentication

Conflict Driven Scan Chain Configuration for High Transition Fault Coverage and Low Test Power