Instruction Set Architecture for Pervasive Security

用于普遍安全的指令集架构

• 批准号: 0105677
• 负责人: Ruby Lee
• 金额: $ 25.66万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-09-01 至 2004-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0105677&HistoricalAwards=false
• 关键词: Instruction; Set; Architecture; Pervasive; Security

This research investigates core architectural features for secure and private communications and computations over the public Internet and wireless infrastructures. It focuses on what instruction-set architecture (ISA) features general-purpose processors would have, if secure information processing is the default pervasive mode of operation, with non-secure processing the optional mode, rather than vice versa. It proposes ISA features for very fast, flexible, software cryptographic processing, not only for current algorithms but also to enable algorithm designers to create new cryptographic algorithms that are more secure and more efficient. Word-oriented, programmable processors can be radically more effective for cryptographic functions with new instructions for sub-word manipulations, as well as for multi-word arithmetic. Novel bit permutation instructions are proposed for providing superior diffusion capabilities for current and future symmetric key algorithms. Their performance, area and latency tradeoffs, and scalability with superscalar organizations are studied. Very fast table lookup and other ISA features are also studied for algorithms like Rijndael, the recent Advanced Encryption Standard winner, and for public-key algorithms like Elliptic Curve Cryptography. The research also investigates architectural features for secure key management, and other ISA features designed to enhance or enforce system security.

本研究探讨了在公共互联网和无线基础设施上进行安全和私有通信和计算的核心架构特征。 它关注的是，如果安全信息处理是默认的普遍操作模式，而非安全处理是可选模式，而不是相反，通用处理器将具有哪些防御集架构（伊萨）功能。 它提出了非常快速，灵活的软件加密处理伊萨功能，不仅适用于当前的算法，而且使算法设计者能够创建更安全，更有效的新加密算法。 面向字的可编程处理器可以从根本上更有效地用于子字操作的新指令的密码功能，以及用于多字算术。 提出了新的比特置换指令，用于为当前和未来的对称密钥算法提供上级扩散能力。 它们的性能，面积和延迟的权衡，并与超标量组织的可扩展性进行了研究。 非常快速的表查找和其他伊萨功能也研究了算法，如Rijndael，最近的高级加密标准的赢家，并为公钥算法，如椭圆曲线密码。 该研究还调查了安全密钥管理的体系结构功能，以及旨在增强或加强系统安全性的其他伊萨功能。