Abstract:With the advancement of IoT edge devices, the threat to sensitive data processed at these devices is increasing. This research aims to enhance processor's built-in resilience against power analysis attacks (PAA) by expanding pipeline stages, employing diverse pipeline techniques, and integrating additional features. The paper proposes 32-bit RISC-V core micro-architectures with inbuilt cryptographic capabilities, extending the RISC-V ISA with custom AES instructions to reduce energy consumption, code size, and encryption time compared to software AES solutions. An area-efficient 128-bit, 12-clock AES based on the Masoleh S-box is integrated into the RISC-V core, resulting in low area and power overheads. Two cores are presented: Core1, a 3-stage pipelined core with a software pause, and Core2, a 4-stage pipelined core with a hardware pause for securing data with AES instructions. Despite their vulnerabilities, the integration of AES with RISC-V architecture significantly improves their intrinsic resilience against PAA. This work analyses the vulnerability and improvement in intrinsic resilience of these cores to side-channel attacks, the impact of hardware versus software pause and the effect of pipeline stages on security metrics. The proposed designs are validated on a Xilinx Basys3 FPGA and developed in UMC 65 nm technology node. Power traces generated during AES encryption are extracted using Synopsys PrimeTime PX and analyzed with a MATLAB power attack model to successfully recover all key bytes. Core1 and Core2 achieved higher throughput of and , respectively, than the Arm CryptoCell312. Core2's added circuits for hardware pause and increased number of pipeline stages significantly boost performance and enhance security against power attacks, with only a modest increase in area and power consumption.

Low-Latency PAE: Permutation-Based Address Encryption Hardware Engine for IoT Real-Time Memory Protection

A Reconfigurable Permutation Based Address Encryption Architecture for Memory Security

Low-latency DAE: A Configurable Lightweight Hybrid Data and Address Encryption Engine for IoT Real-time NVM Protection

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

ProtFe: Low-Cost Secure Power Side-Channel Protection for General and Custom FeFET-Based Memories

HPME: A High-Performance Hardware Memory Encryption Engine Based on RISC-V TEE

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

An AES Chip with DPA Resistance Using Hardware-Based Random Order Execution

An Approach of Using Different Positions of Double Registers to Protect AES Hardware Structure from DPA

AESware: Developing AES-enabled low-power multicore processors leveraging open RISC-V cores with a shared lightweight AES accelerator

Encryption scheme design and implementation of embedded processor off-chip memory access

AN ANTI-DPA HARDWARE ARCHITECTURE OF EMBEDDED CPU BASED ON RANDOM DELAY

A 3T Edram In-Memory Physically Unclonable Function with Spatial Majority Voting Stabilization

Power Side-Channel Attacks on Crypto-Core Based on RISC-V ISA for High-Security Applications

Hardware/Software Cooperative Design Against Power Side-Channel Attacks on IoT Devices

Architecting Non-Volatile Main Memory to Guard Against Persistence-based Attacks

Cryptographie Coprocessor Design for IoT Sensor Nodes.

KPAC: Efficient Emulation of the ARM Pointer Authentication Instructions

Concealable Physical Unclonable Function Generation and In-Memory Encryption Machine using Vertical Self-Rectifying Memristors

A 0.09-Pj/bit Logic-Compatible Multiple-Time Programmable (MTP) Memory-Based PUF Design for IoT Applications

In-Memory Computing Architecture for Efficient Hardware Security