SSIMA – Scalable Side-Channel Immune Micro-Architecture

SSIMA – 可扩展的侧通道免疫微架构

• 批准号: 535533866
• 负责人: Professor Dr. Amir Moradi
• 金额: --
• 依托单位: Profilbereich Cybersicherheit (CYSEC)
• 依托单位国家: 德国
• 项目类别: Priority Programmes
• 资助国家: 德国
• 项目状态: 未结题
• 来源: https://gepris.dfg.de/gepris/projekt/535533866?language=en
• 关键词: SSIMA; Scalable; Side; Channel; Immune

This research focuses on addressing the limitations of current embedded micro-architectures in providing comprehensive protection against combined passive and active physical attacks, such as side-channel analysis (SCA) and fault injection (FI). The objective is to explore the construction of composable architectures that can maintain security against these attacks in a combined setting. The study aims to achieve scalability in constructing these architectures, allowing for SCA security at arbitrary orders using a single hardware design. The primary objective is to develop methodologies for scalable physically secure software using customized embedded platforms without micro-architectural leakage. Scalability involves adapting implementations to different adversary models and fault tolerance requirements while maintaining theoretical and practical security guarantees. It is planned to design and develop a RISC-V platform, including the corresponding instruction set architecture (ISA) and dedicated Instruction Set Extensions (ISE), that enables software designers to effortlessly convert unprotected software written in high-level languages (e.g., C) into machine code for the developed platform. The resulting implementation should provide security against defined adversaries while upholding theoretical security arguments in practice. The successful outcome would represent a significant advancement in the development of ISAs with provable security for executing arbitrary software.

本研究的重点是解决当前嵌入式微架构的局限性，提供全面的保护，防止组合被动和主动的物理攻击，如侧通道分析（SCA）和故障注入（FI）。我们的目标是探索建设的组合架构，可以保持对这些攻击在一个组合的设置安全。这项研究的目的是在构建这些体系结构时实现可伸缩性，允许使用单个硬件设计实现任意顺序的SCA安全性。主要目标是开发可扩展的物理安全软件的方法，使用定制的嵌入式平台，没有微架构泄漏。可扩展性涉及使实现适应不同的对手模型和容错要求，同时保持理论和实际的安全保证。计划设计和开发一个RISC-V平台，包括相应的指令集架构（伊萨）和专用指令集扩展（伊势），使软件设计人员能够毫不费力地将用高级语言编写的未受保护的软件（例如，C）为开发平台转换成机器代码。由此产生的实现应该提供针对定义的对手的安全性，同时在实践中坚持理论安全论点。这一成功的结果将标志着在开发具有可证明的安全性的执行任意软件的国际审计准则方面取得了重大进展。