Abstract:Field Programmable Gate Arrays (FPGAs) are being increasingly deployed in diverse applications including the emerging Internet of Things (IoT), biomedical, and automotive systems. However, security of the FPGA configuration file (i.e. bitstream), especially during in-field reconfiguration, as well as effective safeguards against unauthorized tampering and piracy during operation, are notably lacking. The current practice of bitstreram encryption is only available in high-end FPGAs, incurs unacceptably high overhead for area/energy-constrained devices, and is susceptible to side channel attacks. In this paper, we present a fundamentally different and novel approach to FPGA security that can protect against all major attacks on FPGA, namely, unauthorized in-field reprogramming, piracy of FPGA intellectual property (IP) blocks, and targeted malicious modification of the bitstream. Our approach employs the security through diversity principle to FPGA, which is often used in the software domain. We make each device architecturally different from the others using both physical (static) and logical (time-varying) configuration keys, ensuring that attackers cannot use a priori knowledge about one device to mount an attack on another. It therefore mitigates the economic motivation for attackers to reverse engineering the bitstream and IP. The approach is compatible with modern remote upgrade techniques, and requires only small modifications to existing FPGA tool flows, making it an attractive addition to the FPGA security suite. Our experimental results show that the proposed approach achieves provably high security against tampering and piracy with worst-case 14% latency overhead and 13% area overhead.

A novel method for secure intellectual property deployment in embedded systems

MUTARCH: Architectural diversity for FPGA device and IP security

Design of a Reconfigurable Cryptographic Engine

A New Pay-per-use Scheme for the Protection of FPGA IP

An Efficient Communication Protocol for FPGA IP Protection

A Flexible Design Flow for Software IP Binding in FPGA

Toward FPGA Intellectual Property (IP) Encryption from Netlist to Bitstream

Protection of heterogeneous architectures on FPGAs: An approach based on hardware firewalls

Securing Soft IP Cores in FPGA based Reconfigurable Mobile Heterogeneous Systems

IP protection in Partially Reconfigurable FPGAs

A Pay-per-Use Licensing Scheme for Hardware IP Cores in Recent SRAM-Based FPGAs

FuncTeller: How Well Does eFPGA Hide Functionality?

A New IP Protection Method with High Safety

FPGA IP protection by binding Finite State Machine to Physical Unclonable Function

Efficient and secure intellectual property (IP) design with split fabrication

Analyzing the Vulnerabilities of External SDRAM on System-on-Chip Field Programmable Gate Array Devices

Patching FPGAs: The Security Implications of Bitstream Modifications

Dynamic FPGA Detection and Protection of Hardware Trojan: A Comparative Analysis

A Look at the Dark Side of Hardware Reverse Engineering -- A Case Study

Designing secure systems on reconfigurable hardware

Watermarking Hardware IPs Using Design Parameter Driven Encrypted Dispersion Matrix With Eigen Decomposition Based Security Framework