Abstract:Commercial-off-the-shelf (COTS) components are often preferred over custom Integrated Circuits (ICs) to achieve reduced system development time and cost, easy adoption of new technologies, and replaceability. Unfortunately, the integration of COTS components introduces serious security concerns. None of the entities in the COTS IC supply chain are trusted from a consumer's perspective, leading to a ''zero trust'' threat model. Any of these entities could introduce hidden malicious circuits or hardware Trojans within the component, allowing an attacker in the field to extract secret information (e.g., cryptographic keys) or cause a functional failure. Existing solutions to counter hardware Trojans are inapplicable in such a zero-trust scenario as they assume either the design house or the foundry to be trusted and consider the design to be available for either analysis or modification. In this work, we have proposed a software-oriented countermeasure to ensure the confidentiality of secret assets against hardware Trojans that can be seamlessly integrated in existing COTS microprocessors. The proposed solution does not require any supply chain entity to be trusted and does not require analysis or modification of the IC design. To protect secret assets in an untrusted microprocessor, the proposed method leverages the concept of residue number coding (RNC) to transform the software functions operating on the asset to be fully homomorphic. We have implemented the proposed solution to protect the secret key within the Advanced Encryption Standard (AES) program and presented a detailed security analysis. We also have developed a plugin for the LLVM compiler toolchain that automatically integrates the solution in AES. Finally, we compare the execution time overhead of the operations in the RNC-based technique with comparable homomorphic solutions and demonstrate significant improvement.

A 2D Cryptographic Hash Function Incorporating Homomorphic Encryption for Secure Digital Signatures (Adv. Mater. 23/2024)

A 2D Cryptographic Hash Function Incorporating Homomorphic Encryption for Secure Digital Signatures

A Secure Scan Method for Crypto Chips

Secure Electronics Enabled by Atomically Thin and Photosensitive Two-Dimensional Memtransistors

A Touch of Evil: High-Assurance Cryptographic Hardware from Untrusted Components

HOACS: Homomorphic Obfuscation Assisted Concealing of Secrets to Thwart Trojan Attacks in COTS Processor

Secure Remote Attestation with Strong Key Insulation Guarantees

Lightweight Hardware Architectures for Efficient Secure Hash Functions ECHO and Fugue

Efficient Low-Latency Hardware Architecture for Module-Lattice-Based Digital Signature Standard

Using Emerging Technologies for Hardware Security Beyond PUFs.

A signature based architecture for Trojan detection

Ultrafast Near-Ideal Phase-Change Memristive Physical Unclonable Functions Driven by Amorphous State Variations

Data-Oblivious ML Accelerators using Hardware Security Extensions

Hardware Watermarking for Finite State Machines, with Symmetric Circuit Encryption

A Provable Key Destruction Scheme Based on Memristive Crossbar Arrays

Hardware Trojans based on two-dimensional memtransistors

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories

A Secure Hash Function MD-192 With Modified Message Expansion

Design and implementation of hardware-software architecture based on hashes for SPHINCS+

Cryptographic Key Generation and In Situ Encryption in One‐Transistor‐One‐Resistor Memristors for Hardware Security

A Reconfigurable And Ultra Low-Cost Vlsi Implementation Of Sha-1 And Md5 Functions