Abstract:Logic locking aims to prevent intellectual property (IP) piracy and unauthorized overproduction of integrated circuits (ICs). However, initial logic locking techniques were vulnerable to the Boolean satisfiability (SAT)-based attacks. In response, researchers proposed various SAT-resistant locking techniques such as point function-based locking and symmetric interconnection (SAT-hard) obfuscation. We focus on the latter since point function-based locking suffers from various structural vulnerabilities. The SAT-hard logic locking technique, InterLock [1], achieves a unified logic and routing obfuscation that thwarts state-of-the-art attacks on logic locking. In this work, we propose a novel link prediction-based attack, UNTANGLE, that successfully breaks InterLock in an oracle-less setting without having access to an activated IC (oracle). Since InterLock hides selected timing paths in key-controlled routing blocks, UNTANGLE reveals the gates and interconnections hidden in the routing blocks upon formulating this task as a link prediction problem. The intuition behind our approach is that ICs contain a large amount of repetition and reuse cores. Hence, UNTANGLE can infer the hidden timing paths by learning the composition of gates in the observed locked netlist or a circuit library leveraging graph neural networks. We show that circuits withstanding SAT-based and other attacks can be unlocked in seconds with 100% precision using UNTANGLE in an oracle-less setting. UNTANGLE is a generic attack platform (which we also open source [2]) that applies to multiplexer (MUX)-based obfuscation, as demonstrated through our experiments on ISCAS-85 and ITC-99 benchmarks locked using InterLock and random MUX-based locking.

ALT-Lock: Logic and Timing Ambiguity-Based IP Obfuscation Against Reverse Engineering

IP Protection and Supply Chain Security through Logic Obfuscation

IP Protection and Supply Chain Security Through Logic Obfuscation: A Systematic Overview

UNTANGLE: Unlocking Routing and Logic Obfuscation Using Graph Neural Networks-based Link Prediction

Cross-Lock

High-Level Synthesis of Key-Obfuscated RTL IP with Design Lockout and Camouflaging

SubLock: Sub-Circuit Replacement based Input Dependent Key-based Logic Locking for Robust IP Protection

Utilizing Layout Effects for Analog Logic Locking

ASSURE: RTL Locking Against an Untrusted Foundry

TriLock: IC Protection with Tunable Corruptibility and Resilience to SAT and Removal Attacks

Functional Analysis Attacks on Logic Locking

Unraveling Latch Locking Using Machine Learning, Boolean Analysis, and ILP

Attack of the Genes: Finding Keys and Parameters of Locked Analog ICs Using Genetic Algorithm

Leveraging Layout-based Effects for Locking Analog ICs

Removal of SAT-Hard Instances in Logic Obfuscation Through Inference of Functionality

Resynthesis-based Attacks Against Logic Locking

Exploiting Spin-Orbit Torque Devices As Reconfigurable Logic for Circuit Obfuscation

ALL-MASK: A Reconfigurable Logic Locking Method for Multicore Architecture with Sequential-Instruction-Oriented Key

Cyclic Obfuscation for Creating SAT-Unresolvable Circuits.

RESAA: A Removal and Structural Analysis Attack Against Compound Logic Locking