SaTC: STARSS: Small: IoT Circuit Locking, Obfuscation & Authentication Kernel (CLOAK), A Compilable Architecture for Secure IoT Device Production, Testing, Activation & Ope

物联网（IoT）的巨大部署提供了自主、控制和驱动的机会，为我们生活和与环境互动的方式的革命打开了大门。然而，物联网的广泛采用伴随着其被滥用于恶意目的的危险，威胁着隐私，财产和生命的损失。潜在物联网安全威胁的范围和范围与物联网设备的数量和范围一样快。因此，保护物联网的硬件不能作为事后的想法。该项目旨在提高物联网设备在整个制造和运行寿命期间的安全性。为了确保物联网设备在整个制造和运行寿命期间的安全，该提案引入了物联网CLOAK -物联网电路锁定，混淆认证内核。CLOAK是一种可编译、通用和轻量级的架构，用于物联网设备的安全生产、测试和云激活操作。该项目的主要目标包括：（1）构建一个开源编译器，将任何网表合成为CLOAK保护和CLOAK混淆的网表;（2）使混淆密钥成为一个真正的移动目标，从激活到激活不断变化;（3）通过在云上按需生成密钥，消除在物联网设备或云上存储密钥的需要;（4）探索轻量级密码学及其侧信道漏洞，以保护物联网云通信;（5）解决从物联网设备安全读取PUF签名的挑战;（6）研究超轻量级PUF和TRNG解决方案;（7）研究在不受信任的设施中对受CLOAK保护的芯片进行功能测试，以及（8）开发基于云的CLOAK管理服务，能够配置、管理、解锁、许可和认证受CLOAK保护的物联网设备。

Autonomy, control and actuation opportunities offered by a colossal deployment of Internet of Things (IoT) open the door to a revolution in the way we live and interact with our environment. However, widespread adoption of IoT comes with the danger of its misuse for malicious purposes, threatening the loss of privacy, property, and life. The scope and reach of potential IoT security threat grows as fast as the number and reach of IoT devices. Hence, protecting the hardware of IoT cannot be left as an afterthought. This project aims to improve the security of the IoT devices throughout their manufacturing and operational lifespan.To secure the IoT devices throughout their manufacturing and operational lifespan, this proposal introduces IoT CLOAK - IoT Circuit Locking, Obfuscation & Authentication Kernel. CLOAK is a compilable, universal and lightweight architecture for secure production, testing, cloud activation & operation of IoT devices. The major goals of this project include: (1) building an open-source compiler to synthesize any netlist into CLOAK-protected and CLOAK-obfuscated netlist; (2) making the obfuscation-key a truly moving target that changes from activation to activation; (3) removing the need to store keys on the IoT devices or on the cloud by generating it on demand on the cloud; (4) exploring lightweight cryptography, and its side channel vulnerabilities, to secure the IoT-Cloud communication; (5) addressing the challenge of safe readout of PUF signature from IoT device; (6) investigating ultra-lightweight PUF and TRNG solutions; (7) investigating the functional testing of the CLOAK-protected chips in untrusted facilities and (8) developing cloud-based CLOAK-management services capable of configuring, managing, unlocking, licensing, and authenticating CLOAK-protected IoT devices.