Designing Secure Cryptographic Accelerators with Information Flow Enforcement: A Case Study on AES
Designing Secure Cryptographic Accelerators with Information Flow Enforcement: A Case Study on AES
复制标题
设计具有信息流强制的安全加密加速器：AES 案例研究
DOI：
10.1145/3316781.3317798
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Zhang, Zhiru
中科院分区：
文献类型：
--
作者：
Jiang, Zhenghong;Jin, Hanchen;Suh, G. Edward;Zhang, Zhiru
设计安全的加密加速器具有挑战性，因为设计决策和实现缺陷可能会产生漏洞。为了提供高安全性保证，我们建议设计和构建具有硬件级信息流控制的加密加速器，从而可以正式验证实现的安全性。本文以AES加速器为例，演示了如何将加密加速器的安全需求表示为安全执行的信息流策略。我们在FPGA上的AES原型表明，所提出的保护对面积和性能的影响很小。
Designing a secure cryptographic accelerator is challenging as vulnerabilities may arise from design decisions and implementation flaws. To provide high security assurance, we propose to design and build cryptographic accelerators with hardware-level information flow control so that the security of an implementation can be formally verified. This paper uses an AES accelerator as a case study to demonstrate how to express security requirements of a cryptographic accelerator as information flow policies for security enforcement. Our AES prototype on an FPGA shows that the proposed protection has a marginal impact on area and performance.
DOI：
10.1145/3133956.3134054
发表时间：
2017-08
期刊：
Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security
影响因子：
--
作者：
Ethan Cecchetti;A. Myers;Owen Arden
通讯作者：
Ethan Cecchetti;A. Myers;Owen Arden
TaintHLS：动态信息流跟踪的高级综合
DOI：
10.1109/tcad.2018.2834421
发表时间：
2019
影响因子：
2.9
作者：
C. Pilato;Kaijie Wu;S. Garg;R. Karri;F. Regazzoni
通讯作者：
F. Regazzoni