Abstract:The semiconductor industry is fully globalized and integrated circuits (ICs) are commonly defined, designed and fabricated in different premises across the world. This reduces production costs, but also exposes ICs to supply chain attacks, where insiders introduce malicious circuitry into the final products. Additionally, despite extensive post-fabrication testing, it is not uncommon for ICs with subtle fabrication errors to make it into production systems. While many systems may be able to tolerate a few byzantine components, this is not the case for cryptographic hardware, storing and computing on confidential data. For this reason, many error and backdoor detection techniques have been proposed over the years. So far all attempts have been either quickly circumvented, or come with unrealistically high manufacturing costs and complexity. This paper proposes Myst, a practical high-assurance architecture, that uses commercial off-the-shelf (COTS) hardware, and provides strong security guarantees, even in the presence of multiple malicious or faulty components. The key idea is to combine protective-redundancy with modern threshold cryptographic techniques to build a system tolerant to hardware trojans and errors. To evaluate our design, we build a Hardware Security Module that provides the highest level of assurance possible with COTS components. Specifically, we employ more than a hundred COTS secure crypto-coprocessors, verified to FIPS140-2 Level 4 tamper-resistance standards, and use them to realize high-confidentiality random number generation, key derivation, public key decryption and signing. Our experiments show a reasonable computational overhead (less than 1% for both Decryption and Signing) and an exponential increase in backdoor-tolerance as more ICs are added.

A Hardware Security Evaluation Platform on RISC-V SoC

A Hardware Platform for Ensuring OS Kernel Integrity on RISC-V

System-on-Chip Platform Security Assurance: Architecture and Validation

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

Hardware Verification of a 32-Bit Embedded RISC Microprocessor

An FPGA-Based Open-Source Hardware-Software Framework for Side-Channel Security Research

Unlocking Hardware Security Assurance: The Potential of LLMs

A Survey on RISC-V Security: Hardware and Architecture

Secure Software/Hardware Hybrid In-Field Testing for System-on-Chip

Design of Research Platform for Security Architecture of SoC

A 55nm 350mhz 328mw Secure RISC-V CPU for Lightweight Systems

Hardware security and reliability verification based on fault propagation model

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories

Towards Single-Event Upset detection in Hardware Secure RISC-V processors

Don't CWEAT It: Toward CWE Analysis Techniques in Early Stages of Hardware Design

A Heterogeneous RISC-V SoC for Confidential Computing and Password Recovery

Control-Flow Integrity at RISC: Attacking RISC-V by Jump-Oriented Programming

Verifying RISC-V Physical Memory Protection

SoK: Where's the "up"?! A Comprehensive (bottom-up) Study on the Security of Arm Cortex-M Systems

Hardware-Assisted Monitoring For Instruction Security In Embedded System

A Touch of Evil: High-Assurance Cryptographic Hardware from Untrusted Components