TC: Medium: Collaborative Research: Side-Channel-Proof Embedded Processors with Integrated Multi-Layer Protection

TC：中：协作研究：具有集成多层保护的侧通道防护嵌入式处理器

• 批准号: 0905223
• 负责人: Huiyang Zhou
• 金额: $ 10万
• 依托单位: The University of Central Florida Board of Trustees
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2009
• 资助国家: 美国
• 起止时间: 2009-09-01 至 2010-03-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0905223&HistoricalAwards=false
• 关键词: TC; Medium; Collaborative; Research; Side

Abstract: Side-Channel-Proof Embedded Processors with Integrated Multi-Layer ProtectionEmbedded digital systems are ubiquitous and may contain sensitive information that could be used for malicious purposes if fallen into the wrong hands. Therefore, strong cryptographic algorithms have been incorporated inside these devices. However, attackers have switched their targets from the cryptographic algorithms themselves to the hardware/software implementations of these algorithms, through ?side-channel? chip measurements. From a hardware perspective, such side-channel attacks can be implemented at both the circuit-level and architecture-level. Although much research has been performed in mitigating side-channel attacks, these solutions are inflexible, unsystematic, and have high overhead. The goal of this research is to develop a universal solution that synergistically combines both architecture-level and circuit-level countermeasures for mitigating all major categories of side-channel attacks, to yield an extremely secure, highly flexible, low overhead digital system design methodology. In this proof-of-concept project, preliminary research will be carried out at both levels. At the architecture-level, novel architectural support to mitigate architecture-level timing and access-driven attacks will be developed. At the circuit-level, Delay-Insensitive Ternary Logic will be utilized to design the new architectural support as well as other key components of a MIPS32 4K-compatible embedded microprocessor. The effectiveness and efficiency of side-channel attack resistance at both architecture-level and circuit-level will be evaluated. Educational modules of circuit-level and architecture-level attack mitigation will be developed. Graduate and undergraduate students, especially from underrepresented groups, will be involved in this project. The research outcome will be disseminated to the academic and industrial communities through journal articles, conference presentations, and appropriate websites.

摘要：具有集成多层保护功能的防侧信道嵌入式处理器嵌入式数字系统无处不在，并且可能包含敏感信息，如果落入坏人之手，这些信息可能会被用于恶意目的。因此，这些设备内部集成了强大的加密算法。然而，攻击者已经将他们的目标从加密算法本身转向这些算法的硬件/软件实现，通过？侧频道？芯片测量从硬件的角度来看，这种侧信道攻击可以在电路级和架构级实现。虽然已经进行了大量的研究，以减轻侧信道攻击，这些解决方案是不灵活的，非系统性的，并有很高的开销。本研究的目标是开发一种通用的解决方案，协同结合架构级和电路级的对策，以减轻所有主要类别的侧信道攻击，产生一个非常安全，高度灵活，低开销的数字系统设计方法。在这一概念验证项目中，将在两个层面开展初步研究。在架构级别，将开发新的架构支持，以减轻架构级别的时序和访问驱动的攻击。在电路级，延迟不敏感的三进制逻辑将被用来设计新的架构支持，以及其他关键组件的MIPS 32 4K兼容的嵌入式微处理器。在架构级和电路级的侧信道攻击抵抗的有效性和效率将被评估。将开发电路级和架构级攻击缓解的教育模块。研究生和本科生，特别是来自代表性不足的群体的学生，将参与这个项目。研究成果将通过期刊文章、会议报告和适当的网站传播给学术界和工业界。