Abstract:With rapidly increasing demands for cloud computing, Field Programmable Gate Array (FPGA) has become popular in cloud datacenters. Although it improves computing performance through flexible hardware acceleration, new security concerns also come along. For example, unavoidable physical leakage from the Power Distribution Network (PDN) can be utilized by attackers to mount remote Side-Channel Attacks (SCA), such as Correlation Power Attacks (CPA). Remote Fault Attacks (FA) can also be successfully presented by malicious tenants in a cloud multi-tenant scenario, posing a significant threat to legal tenants. There are few hardware-based countermeasures to defeat both remote attacks that aforementioned. In this work, we exploit Time-to-Digital Converter (TDC) and propose a novel defense technique called DARPT (Defense Against Remote Physical attack based on TDC) to protect sensitive information from CPA and FA. Specifically, DARPT produces random clock jitters to reduce possible information leakage through the power side-channel and provides an early warning of FA by constantly monitoring the variation of the voltage drop across PDN. In comparison to the fact that 8k traces are enough for a successful CPA on FPGA without DARPT, our experimental results show that up to 800k traces (100 times) are not enough for the same FPGA protected by DARPT. Meanwhile, the TDC-based voltage monitor presents significant readout changes (by 51.82% or larger) under FA with ring oscillators, demonstrating sufficient sensitivities to voltage-drop-based FA.

Dpa Countermeasures For Reconfigurable Crypto Processor Using Non-Deterministic Execution

Design of a Reconfigurable Cryptographic Engine

AN ANTI-DPA HARDWARE ARCHITECTURE OF EMBEDDED CPU BASED ON RANDOM DELAY

An AES Chip with DPA Resistance Using Hardware-Based Random Order Execution

A Power Analysis Attack Countermeasure Based on Random Data Path Execution for CGRA.

Countering Power Analysis Attacks by Exploiting Characteristics of Multicore Processors

A Hardware Implementation Of Des With Combined Countermeasure Against Dpa

An Approach of Using Different Positions of Double Registers to Protect AES Hardware Structure from DPA

An Efficient Implementation of Advanced-Encryption-Standard Based on a Coarse-Grained Reconfigurable Processor

A Countermeasure For Power Analysis To Scalar Multiplication Of Ecc Hardware

The Configurable Current Flattening Circuit for DPA Countermeasures

Physical Attack Countermeasures for Reconfigurable Cryptographic Processors

A DPA-Resistant Digit-Parallel Modular Multiplier over GF (2m)

VLSI Implementation of an AES Algorithm Resistant to Differential Power Analysis Attack

DARPT: defense against remote physical attack based on TDC in multi-tenant scenario

Design and implementation of a Differential Power Analysis System for cryptographic devices

A Low Overhead DPA Countermeasure of ECC Based on Randomized Modular Multiplication

A combined countermeasure against DPA and implementation on DES

A Low Cost, Low Power Aes Asic With High Dpa Resisting Ability

Modeling Timing Randomization in Cryptographic Chip Against Power Analysis Attack

A Power Analysis Attack Resistant Multicore Platform with Effective Randomization Techniques