Physical Random Functions and Secure Hardware Architectures

提案ccr -0309562标题：物理随机函数和安全硬件架构respii: Srinivas devadas计算元素正变得越来越小，分散和无监督，并且重要的责任被放在它们身上。物理攻击的风险越来越大，必须加以应对。介绍了物理随机函数（Physical Random Functions，简称PUF），它是一种与物理设备建立共享秘密的抗篡改方式。他们依靠设备之间不可避免的制造差异来为设备创造不可克隆的身份。puf可以直接用于经过身份验证的识别应用，如钥匙卡和智能卡。在目前的智能卡中，拥有智能卡的人可以通过许多有案可查的攻击之一提取其数字密钥信息来制造它的克隆。由于智能卡上有一个独特的PUF，可以用来验证芯片，因此不需要数字密钥；智能卡硬件本身就是密钥。为了实现更复杂的应用，引入了受控物理随机函数（cpuf），这是一种只能通过以不可分割的方式物理绑定到PUF的算法访问的PUF。cpuf可用于在物理设备和远程用户之间建立共享密钥。一旦建立，共享秘密就可以用于支持广泛的应用程序，包括认证执行和知识产权保护。

Proposal CCR-0309562Title: Physical Random Functions and Secure Hardware ArchitecturesPI: Srinivas DevadasComputing elements are becoming small, disseminated and unsupervised, and significant responsibilities are being placed on them. Physical attacks present an increasing risk that must be dealt with.Physical Random Functions (or PUF as in Physical Unclonable Function), which are a tamper resistant way of establishing shared secrets with a physical device are introduced. They rely on the inevitable manufacturing variations between devices to produce an unclonable identity for a device. PUFs can be used directly for authenticated identification applications such as key cards and smart cards. In current smartcards, it is possible for someone who is in possession of the smartcard to produce a clone of it, by extracting its digital key information through one of many well-documented attacks. With a unique PUF on the smartcard that can be used to authenticate the chip, a digital key is not required; the smartcard hardware is itself the secret key.To enable more sophisticated applications, Controlled Physical Random Functions (CPUFs) which are PUFs that can only be accessed via an algorithm that is physically bound to the PUF in an inseparable way are introduced. CPUFs can be used to establish a shared secret between a physical device and a remote user. Once established, the shared secret can be used to enable a wide range of applications, including certified execution and intellectual property protection.