Abstract:Data recovery has long been a focus of the electronics industry for decades by security experts, focusing on hard disk recovery, a type of non-volatile memory. Unfortunately, none of the existing research, neither from academia, industry, or government, have ever considered data recovery from volatile memories. The data is lost when it is powered off, by definition. To the best of our knowledge, we are the first to present an approach to recovering data from a static random access memory. It is conventional wisdom that SRAM loses its contents whenever it turns off, and it is not required to protect sensitive information, e.g., the firmware code, secret encryption keys, etc., when an SRAM-based computing system retires. Unfortunately, the recycling of integrated circuits poses a severe threat to the protection of intellectual properties. In this paper, we present a novel concept to retrieve SRAM data as aging leads to a power-up state with an imprint of the stored values. We show that our proposed approaches can partially recover the previously used SRAM content. The accuracy of the recovered data can be further increased by incorporating multiple SRAM chips compared to a single one. It is impossible to retrieve the prior content of some stable SRAM cells, where aging shifts these cells towards stability. As the locations of these cells vary from chip to chip due to uncontrollable process variation, the same cell has a higher chance of being unstable or stable against aging in any of the chips, which helps us recover the content. Finally, majority voting is used to combine a set of SRAM chips' data to recover the stored data. We present our experimental result using commercial off-the-shelf SRAMs with stored binary image data before performing accelerated aging. We demonstrate the successful partial retrieval on SRAMs that are aged with as little as 4 hours of accelerated aging with 85C.

Challenging on-chip SRAM security with boot-state statistics

A Logic Resistive Memory Chip for Embedded Key Storage with Physical Security

Beware of Discarding Used SRAMs: Information is Stored Permanently

64kb Logic Rram Chip Resisting Physical And Side-Channel Attacks For Encryption Keys Storage

Dataplant: Enhancing System Security with Low-Cost In-DRAM Value Generation Primitives

Analyzing the Vulnerabilities of External SDRAM on System-on-Chip Field Programmable Gate Array Devices

RRAM-Based Hardware Security Primitives

Connecting the Dots: Privacy Leakage via Write-Access Patterns to the Main Memory

Authenticated encryption chip implementation against side-channel attack

A Physically-Secure Write Scheme of Multi-Time Programmable Rram for Critical Information Storage

Security Enhancement for RRAM Computing System through Obfuscating Crossbar Row Connections

A 22-nm 1-Mb 1024-b Read Data-Protected STT-MRAM Macro With Near-Memory Shift-and-Rotate Functionality and 42.6-GB/s Read Bandwidth for Security-Aware Mobile Device

Cache Bypassing and Checkpointing to Circumvent Data Security Attacks on STTRAM

Threshold-based Obfuscated Keys with Quantifiable Security against Invasive Readout

Security Memory System for Mobile Device or Computer Against Memory Attacks

SRAM Cell Design Challenges in Modern Deep Sub-Micron Technologies: An Overview

A RRAM-based Data Hiding Technique Utilizing the Impact of Form Condition on SET Performance

Detecting Recycled Commodity SoCs: Exploiting Aging-Induced SRAM PUF Unreliability

Application of Resistive Random Access Memory in Hardware Security: A Review

SecDDR: Enabling Low-Cost Secure Memories by Protecting the DDR Interface

RowHammer: Reliability Analysis and Security Implications