Securing Emerging Nonvolatile Main Memory With Fast and Energy-Efficient AES In-Memory Implementation
Securing Emerging Nonvolatile Main Memory With Fast and Energy-Efficient AES In-Memory Implementation
复制标题
DOI：
10.1109/tvlsi.2018.2865133
复制
发表时间：
2018-11-01
影响因子：
2.8
通讯作者：
Xie, Yuan
中科院分区：
文献类型：
--
作者：
Xie, Mimi;Li, Shuangchen;Xie, Yuan
随着CMOS技术接近其缩放极限，新兴的非易失性存储器（NVM）技术由于其低泄漏功率和更好的可缩放性而成为DRAM的有前途的替代品。然而，非易失性主存储器系统遭受新的安全漏洞。攻击者可以很容易地访问内存上的敏感信息，因为非易失性允许信息即使在断电后也可以保留很长时间。虽然使用专用高级加密标准（AES）引擎在内存访问期间进行实时内存加密是解决此漏洞的有效方法，但它会导致运行时性能和能源开销。另外，在本文中，我们提出了一个快速，高效的AES内存（AIM）实现，加密整个/部分的内存，只有当它是必要的。而不是增加额外的处理元件的成本敏感的存储器，我们利用NVM的内在逻辑运算能力来实现AES算法。我们利用内存计算架构提供的优势（大的内部带宽和显著的数据移动减少）来解决带宽密集型加密应用程序的挑战。AIM采用内存中的大规模并行性，以更高的吞吐量和更低的能耗优于现有机制。实验结果表明，与运行在2.1 GHz的最先进的AES引擎相比，AIM在1 GB NVM上的加密速度提高了80倍。
As CMOS technology approaches its scaling limit, emerging nonvolatile memory (NVM) technologies become promising alternatives to DRAM due to their low leakage power and better scalability. However, the nonvolatile main memory system suffers from a new security vulnerability. An attacker can readily access sensitive information on the memory, since the nonvolatility allows information to be retained for a long time even after the power is OFF. While real-time memory encryption during memory accesses with dedicated Advanced Encryption Standard (AES) engine is an effective solution for this vulnerability, it incurs runtime performance and energy overhead. Alternatively, in this paper, we propose a fast and efficient AES in-memory (AIM) implementation, to encrypt the whole/part of the memory only when it is necessary. Rather than adding extra processing elements to the cost-sensitive memory, we take advantage of NVM's intrinsic logic operation capability to implement the AES algorithm. We leverage the benefits (large internal bandwidth and dramatic data movement reduction) offered by the in-memory computing architecture to address the challenges of the bandwidth intensive encryption application. Embracing the massive parallelism inside the memory, AIM outperforms existing mechanisms with higher throughput yet lower energy consumption. The experimental results show that compared with state-of-the-art AES engine running at 2.1 GHz, AIM speeds up the encryption process by 80x for a 1-GB NVM.