Instruction Set Architecture for Pervasive Security

这项研究调查了公共互联网和无线基础设施上的安全和私有通信和计算的核心架构特征。如果安全信息处理是默认的普遍操作模式，而非安全处理是可选模式，那么通用处理器将具有哪些指令集体系结构(ISA)功能，而不是相反。它提出了ISA功能，用于非常快速、灵活的软件密码处理，不仅适用于当前的算法，还使算法设计者能够创建更安全、更高效的新密码算法。面向字的可编程处理器对于具有用于子字操作的新指令的密码功能以及对于多字算术可以从根本上更有效。提出了新的比特置换指令，用于为当前和未来的对称密钥算法提供优越的扩散能力。研究了它们的性能、面积和延迟权衡以及与超标量组织的可扩展性。此外，还针对Rijndael等算法和椭圆曲线加密等公钥算法研究了非常快速的表查找和其他ISA功能。该研究还调查了用于安全密钥管理的体系结构功能，以及旨在增强或加强系统安全性的其他ISA功能。

This research investigates core architectural features for secure and private communications and computations over the public Internet and wireless infrastructures. It focuses on what instruction-set architecture (ISA) features general-purpose processors would have, if secure information processing is the default pervasive mode of operation, with non-secure processing the optional mode, rather than vice versa. It proposes ISA features for very fast, flexible, software cryptographic processing, not only for current algorithms but also to enable algorithm designers to create new cryptographic algorithms that are more secure and more efficient. Word-oriented, programmable processors can be radically more effective for cryptographic functions with new instructions for sub-word manipulations, as well as for multi-word arithmetic. Novel bit permutation instructions are proposed for providing superior diffusion capabilities for current and future symmetric key algorithms. Their performance, area and latency tradeoffs, and scalability with superscalar organizations are studied. Very fast table lookup and other ISA features are also studied for algorithms like Rijndael, the recent Advanced Encryption Standard winner, and for public-key algorithms like Elliptic Curve Cryptography. The research also investigates architectural features for secure key management, and other ISA features designed to enhance or enforce system security.