Abstract:The proliferation of devices for the Internet of Things (IoT) and their implication in many activities of our lives have led to a considerable increase in concern about the security of these devices, posing a double challenge for designers and developers of products. On the one hand, the design of new security primitives, suitable for resource-limited devices, can facilitate the inclusion of mechanisms and protocols to ensure the integrity and privacy of the data exchanged over the Internet. On the other hand, the development of techniques and tools to evaluate the quality of the proposed solutions as a step prior to their deployment, as well as to monitor their behavior once in operation against possible changes in operating conditions arising naturally or as a consequence of a stress situation forced by an attacker. To address these challenges, this paper first describes the design of a security primitive that plays an important role as a component of a hardware-based root of trust, as it can act as a source of entropy for True Random Number Generation (TRNG) or as a Physical Unclonable Function (PUF) to facilitate the generation of identifiers linked to the device on which it is implemented. The work also illustrates different software components that allow carrying out a self-assessment strategy to characterize and validate the performance of this primitive in its dual functionality, as well as to monitor possible changes in security levels that may occur during operation as a result of device aging and variations in power supply or operating temperature. The designed PUF/TRNG is provided as a configurable IP module, which takes advantage of the internal architecture of the Xilinx Series-7 and Zynq-7000 programmable devices and incorporates an AXI4-based standard interface to facilitate its interaction with soft- and hard-core processing systems. Several test systems that contain different instances of the IP have been implemented and subjected to an exhaustive set of on-line tests to obtain the metrics that determine its quality in terms of uniqueness, reliability, and entropy characteristics. The results obtained prove that the proposed module is a suitable candidate for various security applications. As an example, an implementation that uses less than 5% of the resources of a low-cost programmable device is capable of obfuscating and recovering 512-bit cryptographic keys with virtually zero error rate.

Tunnel FET‐based ultra‐lightweight reconfigurable TRNG and PUF design for resource‐constrained internet of things

A Unified PUF and TRNG Design Based on 40-Nm RRAM with High Entropy and Robustness for IoT Security

Unified 0.75pj/bit TRNG and Attack Resilient 2f2/bit PUF for Robust Hardware Security Solutions with 4-Layer Stacking 3D NbOx Threshold Switching Array

Unified 0.75pJ/Bit TRNG and Attack Resilient 2F<sup>2</sup>/Bit PUF for Robust Hardware Security Solutions with 4-layer Stacking 3D NbO<inf>x</inf> Threshold Switching Array

A Novel Configurable RO-Obfuscated PUF Design with Machine Learning Immunity

A Unified Memory and Hardware Security Module Based on the Adjustable Switching Window of Resistive Memory

An Ultra-Low-Power High-Speed Variation-Resilient DLJLT-PUF for IOT Devices

Hardware-Efficient Configurable Ring-Oscillator-Based Physical Unclonable Function/True Random Number Generator Module for Secure Key Management

A Novel FeFET Array-Based PUF: Co-optimization of Entropy Source and CRP Generation for Enhanced Robustness in IoT Security

On-Line Evaluation and Monitoring of Security Features of an RO-Based PUF/TRNG for IoT Devices

Exploiting FeFET Switching Stochasticity for Low-Power Reconfigurable Physical Unclonable Function.

First demonstration of reconfigurable and low-power strong physical unclonable function empowered by FeFET cycle-to-cycle variation

Ferroelectric FET-based strong physical unclonable function: a low-power, high-reliable and reconfigurable solution for Internet-of-Things security

RPPUF: an Ultra-Lightweight Reconfigurable Pico-Physically Unclonable Function for Resource-Constrained IoT Devices

Memristive True Random Number Generator with Intrinsic Two-Dimensional Physical Unclonable Function

Building Secure SRAM PUF Key Generators on Resource Constrained Devices

A 144-fJ/Bit Reliable and Compact TRNG Based on the Diffusive Resistance of 3-D Resistive Random Access Memory

Ternary bistable ring PUF for high-secure applications

A Homogeneous, Reconfigurable, and Efficient Implementation of PUF in 3-D Selector-Free RRAM

A 0.09-Pj/bit Logic-Compatible Multiple-Time Programmable (MTP) Memory-Based PUF Design for IoT Applications

A Reconfigurable Arbiter PUF Based on STT-MRAM