Abstract:Today’s data-intensive applications increasingly suffer from significant performance bottlenecks due to the limited memory bandwidth of the classical von Neumann architecture. Near-Data Processing (NDP) has been proposed to perform computation near memory or data storage to reduce data movement for improving performance and energy consumption. However, the untrusted NDP processing units (PUs) bring in new threats to workloads that are private and sensitive, such as private database queries and private machine learning inferences. Meanwhile, most existing secure hardware designs do not consider off-chip components trustworthy. Once data leaving the processor, they must be protected, e.g., via block cipher encryption. Unfortunately, current encryption schemes do not support computation over encrypted data stored in memory or storage, hindering the adoption of NDP techniques for sensitive workloads.In this paper, we propose SecNDP, a lightweight encryption and verification scheme for untrusted NDP devices to perform computation over ciphertext and verify the correctness of linear operations. Our encryption scheme leverages arithmetic secret sharing in secure Multi-Party Computation (MPC) to support operations over ciphertext, and uses counter-mode encryption to reduce the decryption latency. The security of the encryption and verification algorithm is formally proven. Compared with a non-NDP baseline, secure computation with SecNDP significantly reduces the memory bandwidth usage while providing security guarantees. We evaluate SecNDP for two workloads of distinct memory access patterns. In the setting of eight NDP units, we show a speedup up to 7.46× and energy savings of 18% over an unprotected non-NDP baseline, approaching the performance gain attained by native NDP without protection. Furthermore, SecNDP does not require any security assumption on NDP to hold, thus, using the same threat model as existing secure processors. SecNDP can be implemented without changing the NDP protocols and their inherent hardware design.

Low-latency DAE: A Configurable Lightweight Hybrid Data and Address Encryption Engine for IoT Real-time NVM Protection

Low-Latency PAE: Permutation-Based Address Encryption Hardware Engine for IoT Real-Time Memory Protection

A Reconfigurable Permutation Based Address Encryption Architecture for Memory Security

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

Efficient In-Memory AES Encryption Implementation Using a General Memristive Logic: Surmounting the Data Movement Bottleneck.

From Ideal to Practice: Data Encryption in eADR-based Secure Non-Volatile Memory Systems

Efficient Implementation of Ring-LWE Encryption on High-End IoT Platform

Efficient and Lightweight In-memory Computing Architecture for Hardware Security

An efficient run-time encryption scheme for non-volatile main memory

Embedding Security into Ferroelectric FET Array via In-Situ Memory Operation

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

AESware: Developing AES-enabled low-power multicore processors leveraging open RISC-V cores with a shared lightweight AES accelerator

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

SecDDR: Enabling Low-Cost Secure Memories by Protecting the DDR Interface

Embedding security into ferroelectric FET array via in situ memory operation

SecNDP: Secure Near-Data Processing with Untrusted Memory

In-Memory Computing Architecture for Efficient Hardware Security

An Energy-Efficient Reconfigurable DTLS Cryptographic Engine for Securing Internet-of-Things Applications

Encryption scheme design and implementation of embedded processor off-chip memory access

A Low-Cost Cryptographic Processor for Security Embedded System

WeightLock: A Mixed-Grained Weight Encryption Approach Using Local Decrypting Units for Ciphertext Computing in DNN Accelerators