SCARV: a side-channel hardened RISC-V platform

RISC-V是一种指令集体系结构(ISA)设计。ISA本质上是任何兼容处理器实现都应该能够执行的指令以及这些指令可以访问的资源的规范；它充当处理器实现(硬件)和在其上执行的程序(软件)之间的接口。与英特尔的x86 ISA等专有类似产品形成鲜明对比的是，RISC-V是一种开源设计。这意味着任何人都可以出于任何目的自由地使用它，这在一定程度上意味着围绕该项目快速开发丰富的支持基础设施：这包括a)围绕相关的非营利性基础构建的充满活力的开发人员和用户社区，b)以HDL语言(即，用于在FPGA平台上使用的软核)和硅(即，物理IC)实现ISA的大量实现，以及c)编程工具链(例如，GCC和LVM)和操作系统(例如，LINUX)的端口。类似的开放性是安全关键环境中的核心原则，与另一种通常被俗称为“默默无闻的安全”的做法形成对比。在密码学领域尤其如此，这项技术的常规任务是确保我们的数据(通信或存储的)的保密性、健壮性和方便性，以及我们与之交互的各方的真实性：开放开发加密标准、设计和实现是现代规范。因此，RISC-V在用于执行加密软件时提供了各种机会。拟议的研究目标利用了这些机会，旨在应对对我们的数字安全，进而对社会的高级、持续的威胁。具体地说：1)由于RISC-V可由任何人实施，因此有可能开发针对特定类型攻击的强化核心；重点将放在侧通道攻击的威胁上(这与嵌入式用例特别相关，例如物联网)。此外，拟议的研究还将调查如何利用有关实施的详细信息来产生更有效的安全评估。2)由于RISC-V可以由任何人改编，因此有可能开发各种特定于密码的ISA扩展或变体，例如，提供更高的效率。如果加密软件更高效，它也可以更安全，因为例如，可以部署更大的密钥或更强大的攻击对策，而不会对延迟产生显著影响。3)侧通道安全性的评估可能是令人望而却步的，因为它需要各种特定的设备。利用一个基于RISC-V的平台，拟议的研究通过提供“实验室免费”(即，基于云的)采集和分析工作流程来解决这个问题，任何人都可以使用。

RISC-V is an Instruction Set Architecture (ISA) design. An ISA is essentially a specification for the instructions any compatible processor implementation should be able to execute, and the resources those instructions can access; it acts as the interface between the processor implementation (hardware) and programs that execute on it (software). In sharp contrast with proprietary analogues such as the x86 ISA from Intel, RISC-V is an open source design. This means it can be used freely by anyone for any purpose, which, in part, has meant rapid development of a rich support infrastructure around the project: this includes a) vibrant developer and user communities, built around an associated non-profit foundation, b) numerous implementations of the ISA, both in HDL (i.e., a soft core for use on an FPGA platform) and silicon (i.e., physical ICs), and c) ports of programming tool-chains (e.g., GCC and LLVM) and operating systems (e.g., Linux).Similar openness is a core principle in security-critical contexts, contrasting with the alternative often colloquially termed "security by obscurity". This is particularly true in the field of cryptography, a technology routinely tasked with ensuring secrecy, robustness and provenience of our data (communicated or stored), and the authenticity of parties we interact with: open development of cryptographic standards, designs, and implementations is the modern norm. As a result, RISC-V presents various opportunities when used to execute cryptographic software. The proposed research goals capitalise on these opportunities, in a way designed to address advanced, persistent threats to our digital security, and, by extension, society. Specifically:1) Since RISC-V can be implemented by anyone, it is possible to develop a core hardened against specific types of attack; the focus will be on the threat of side-channel attacks (which is particularly relevant to embedded use-cases, e.g., IoT). As well as doing so, the proposed research will investigation how detailed information about the implementation can be harnessed to produce more effective security evaluations.2) Since RISC-V can be adapted by anyone, it is possible to develop various cryptography-specific extensions or variants of the ISA that offer either, for example, higher efficiency. If cryptographic software is more efficient it can also be more secure, because, for example, larger keys or more robust attack countermeasures can be deployed without as significant an impact on latency.3) Evaluation of side-channel security can be prohibitive in the sense it needs various specific items of equipment. Harnessing a platform based on RISC-V, the proposed research with address this problem by offering a "lab. free" (i.e., cloud-based) acquisition and analysis workflow available to anyone.