论文标题
X伏:针对电力侧通道攻击的驾驶员强度和供应电压的联合调整
X-Volt: Joint Tuning of Driver Strengths and Supply Voltages Against Power Side-Channel Attacks
论文作者
论文摘要
功率侧通道(PSC)攻击是对敏感硬件(例如高级加密标准(AES)加密芯)的众所周知的威胁。鉴于供应电压(VCC)对功率概况的重大影响,已经提出了基于VCC调整的各种对策,以及其他国防策略。然而,尽管对功率概况也有直接和重大影响,但细胞的驱动力强度仍被忽略了。 我们第一次彻底探索了共同调整驾驶员优势和VCC作为PSC攻击对策的新工作原理的前景。为此,我们采取以下步骤:1)我们开发了一个简单的电路级调整方案; 2)我们实施一个CAD流,用于设计ASIC的设计时间评估,在磁带之前实现对IC的安全评估; 3)我们实施了一个相关能力分析(CPA)框架,以进行彻底和比较的安全性分析; 4)在各种调谐场景下,我们对定期AES设计进行了广泛的实验研究; 5)我们总结了安全有效的关节调整设计指南。 在我们的实验中,我们观察到,对于ASIC和FPGA实现,运行时调整比静态调整更有效。对于后者,AES核心被渲染> 11.8倍(即至少11.8次),与未调节的基线设计一样具有弹性。对于FPGA中最有弹性的调音场景,例如,左右的临界路径延迟,可以认为布局开销可被认为是可以接受的。 我们将发布用于我们的方法论的源代码,以及实验研究后的PEER-REVIEW中的工件。
Power side-channel (PSC) attacks are well-known threats to sensitive hardware like advanced encryption standard (AES) crypto cores. Given the significant impact of supply voltages (VCCs) on power profiles, various countermeasures based on VCC tuning have been proposed, among other defense strategies. Driver strengths of cells, however, have been largely overlooked, despite having direct and significant impact on power profiles as well. For the first time, we thoroughly explore the prospects of jointly tuning driver strengths and VCCs as novel working principle for PSC-attack countermeasures. Toward this end, we take the following steps: 1) we develop a simple circuit-level scheme for tuning; 2) we implement a CAD flow for design-time evaluation of ASICs, enabling security assessment of ICs before tape-out; 3) we implement a correlation power analysis (CPA) framework for thorough and comparative security analysis; 4) we conduct an extensive experimental study of a regular AES design, implemented in ASIC as well as FPGA fabrics, under various tuning scenarios; 5) we summarize design guidelines for secure and efficient joint tuning. In our experiments, we observe that runtime tuning is more effective than static tuning, for both ASIC and FPGA implementations. For the latter, the AES core is rendered >11.8x (i.e., at least 11.8 times) as resilient as the untuned baseline design. Layout overheads can be considered acceptable, with, e.g., around +10% critical-path delay for the most resilient tuning scenario in FPGA. We will release source codes for our methodology, as well as artifacts from the experimental study, post peer-review.