[논문]Enhancing the Security of FPGA-SoCs via the Usage of ARM TrustZone and a Hybrid-TPM

Gross, Mathieu; Hohentanner, Konrad; Wiehler, Stefan; Sigl, Georg

doi:10.1145/3472959

[해외논문] Enhancing the Security of FPGA-SoCs via the Usage of ARM TrustZone and a Hybrid-TPM

ACM transactions on reconfigurable technology and systems, v.15 no.1, 2022년, pp.1 - 26

Gross, Mathieu (Technical University of Munich, Department of Electrical and Computer Engineering, Chair of Security in Information Technology, Munich, Germany) , Hohentanner, Konrad (Fraunhofer Research Institution AISEC, Munich, Germany) , Wiehler, Stefan (Missing Link Electronics, Neu-Ulm, Germany) , Sigl, Georg (Technical University of Munich, Department of Electrical and Computer Engineering, Chair of Security in Information Technology and Fraunhofer Research Institution AISEC, Munich, Germany)

Abstract ▼ AI-Helper

Isolated execution is a concept commonly used for increasing the security of a computer system. In the embedded world, ARM TrustZone technology enables this goal and is currently used on mobile devices for applications such as secure payment or biometric authentication. In this work, we investigate the security benefits achievable through the usage of ARM TrustZone on FPGA-SoCs. We first adapt Microsoft’s implementation of a firmware Trusted Platform Module (fTPM) running inside ARM TrustZone for the Zynq UltraScale+ platform. This adaptation consists in integrating hardware accelerators available on the device to fTPM’s implementation and to enhance fTPM with an entropy source derived from on-chip SRAM start-up patterns. With our approach, we transform a software implementation of a TPM into a hybrid hardware/software design that could address some of the security drawbacks of the original implementation while keeping its flexibility. To demonstrate the security gains obtained via the usage of ARM TrustZone and our hybrid-TPM on FPGA-SoCs, we propose a framework that combines them for enabling a secure remote bitstream loading. The approach consists in preventing the insecure usages of a bitstream reconfiguration interface that are made possible by the manufacturer and to integrate the interface inside a Trusted Execution Environment.

참고문헌 (44)

ARM Security Technology - Build a Secure System using TrustZone Technology 2016 ARM. 2016. ARM Security Technology - Build a Secure System using TrustZone Technology. Issue D.c.https://developer.arm.com/documentation/PRD29-GENC-009492/c.
10.5555/2739269
Elaine Barker and John Kelsey. 2012. NIST Special Publication 800-90A (A Revision of SP 800-90) Recommendation for Random Number Generation Using Deterministic Random Bit Generators. https://csrc.nist.gov/publications/detail/sp/800-90a/rev-1/final.
10.5555/2206233
10.5555/3361338.3361376
IACR Cryptol. ePrint Arch. Costan V. 86 2016 2016 Intel SGX explained V. Costan and S. Devadas. 2016. Intel SGX explained. IACR Cryptol. ePrint Arch. 2016 (2016), 86.
Retrieved from https://www.missinglinkelectronics.com/security Electronics Missing Link 2020 MLE OP-TEE for Zynq Ultrascale+ devices Missing Link Electronics. 2020. MLE OP-TEE for Zynq Ultrascale+ devices. Retrieved from https://www.missinglinkelectronics.com/security.
10.5555/3489212.3489314
Retrieved from https://github.com/ f-secure-foundry/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_ Only_Secure_Boot_bypass.txt 2019 Security advisory: Xilinx ZU+ Encrypt Only Secure Boot bypass F-Secure. 2019. Security advisory: Xilinx ZU+ Encrypt Only Secure Boot bypass. Retrieved from https://github.com/ f-secure-foundry/advisories/blob/master/Security_Advisory-Ref_FSC-HWSEC-VR2019-0001-Xilinx_ZU+-Encrypt_ Only_Secure_Boot_bypass.txt.
10.23919/FPL.2017.8056840
10.1007/978-3-030-42068-0_7
10.1145/3338508.3359568
Halderman, J. Alex, Schoen, Seth D., Heninger, Nadia, Clarkson, William, Paul, William, Calandrino, Joseph A., Feldman, Ariel J., Appelbaum, Jacob, Felten, Edward W.. Lest we remember : cold-boot attacks on encryption keys. Communications of the ACM, vol.52, no.5, 91-98.

상세보기
IACR Trans. Cryptogr. Hardw. Embed. Syst. Hettwer Benjamin 279 2021 1 2021 Side-channel analysis of the Xilinx Zynq UltraScale+ encryption engine Benjamin Hettwer, Sebastien Leger, Daniel Fennes, Stefan Gehrer, and Tim Güneysu. 2021. Side-channel analysis of the Xilinx Zynq UltraScale+ encryption engine. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2021, 1 (2021), 279-304. DOI:https://doi.org/10.46586/tches.v2021.i1.279-304
Holcomb, D.E., Burleson, W.P., Fu, K.. Power-Up SRAM State as an Identifying Fingerprint and Source of True Random Numbers. IEEE transactions on computers, vol.58, no.9, 1198-1210.

상세보기
Secur. Priv. Hosseinzadeh Shohreh e93 3 1 2020 10.1002/spy2.93 Recent trends in applying TPM to cloud computing Shohreh Hosseinzadeh, Bernardo Sequeiros, Pedro R. M. Inácio, and Ville Leppänen. 2020. Recent trends in applying TPM to cloud computing. Secur. Priv. 3, 1 (2020), e93. DOI:https://doi.org/10.1002/spy2.93

상세보기
Cryptographic Hardware and Embedded Systems - CHES 2017 (Lecture Notes in Computer Science) Jacob Nisha 425 2017 10.1007/978-3-319-66787-4_21 Nisha Jacob, Johann Heyszl, Andreas Zankl, Carsten Rolfes, and Georg Sigl. 2017. How to break secure boot on FPGA SoCs through malicious hardware. In Cryptographic Hardware and Embedded Systems - CHES 2017 (Lecture Notes in Computer Science), Vol. 10529. Springer, 425-442. DOI:https://doi.org/10.1007/978-3-319-66787-4_21
White Paper Kaplan David 2016 AMD memory encryption David Kaplan, Jeremy Powell, and Tom Woller. 2016. AMD memory encryption. White Paper (2016). https://developer.amd.com/wordpress/media/2013/12/AMD_Memory_Encryption_Whitepaper_v7-Public.pdf.
Khan, Nadir, Nitzsche, Sven, López, Asier Garciandia, Becker, Jürgen. Utilizing and Extending Trusted Execution Environment in Heterogeneous SoCs for a Pay-Per-Device IP Licensing Scheme. IEEE transactions on information forensics and security, vol.16, 2548-2563.

상세보기
Kim, Yoongu, Daly, Ross, Kim, Jeremie, Fallin, Chris, Lee, Ji Hye, Lee, Donghyuk, Wilkerson, Chris, Lai, Konrad, Mutlu, Onur. Flipping bits in memory without accessing them : an experimental study of DRAM disturbance errors. Computer architecture news, vol.42, no.3, 361-372.

상세보기
10.1145/3338511.3357348 Yongjin Kim and Evan Kim. 2019. hTPM: Hybrid implementation of trusted platform module. 3-10. DOI:https://doi.org/10.1145/3338511.3357348
10.46586/tches.v2018.i3.44-68
10.1007/978-3-642-28368-0_20 Vincent Leest Erik Sluis Geert Schrijen Pim Tuyls and Helena Handschuh. 2012. Efficient implementation of true random number generator based on SRAM PUFs. In Cryptography and Security: From Theory to Applications: Essays Dedicated to Jean-Jacques Quisquater on the Occasion of His 65th Birthday David Naccache (Eds.). Springer Berlin Heidelberg 300-318. DOI:10.1007/978-3-642-28368-0_20
Retrieved from https://github.com/OP-TEE 2020 OP-TEE: Open Portable Trusted Execution Environment Linaro. 2020. OP-TEE: Open Portable Trusted Execution Environment. Retrieved from https://github.com/OP-TEE.
Cryptology ePrint Archive, Report 2011/657 Maiti Abhranil 2011 A Systematic Method to Evaluate and Compare the Performance of Physical Unclonable Functions Abhranil Maiti, Vikash Gunreddy, and Patrick Schaumont. 2011. A Systematic Method to Evaluate and Compare the Performance of Physical Unclonable Functions. Cryptology ePrint Archive, Report 2011/657. Retrieved from https://eprint.iacr.org/2011/657.
Retrieved from https://github.com/microsoft/ms-tpm-20-ref 2020 MS TPM 2.0 Reference Implementation Microsoft. 2020. MS TPM 2.0 Reference Implementation. Retrieved from https://github.com/microsoft/ms-tpm-20-ref.
10.5555/3489212.3489328
10.1145/2046707.2046722
Introduction to Trusted Execution Environments Platform Global 2018 Global Platform. 2018. Introduction to Trusted Execution Environments. https://globalplatform.wpengine.com/resource-publication/introductionto-trusted-execution-environments/.
fTPM: A Firmware-based TPM 2.0 Implementation Raj Himanshu 2015 Himanshu Raj, Stefan Saroiu, Alec Wolman, Ronald Aigner, Jeremiah Cox, Paul England, Chris Fenner, Kinshuman Kinshumann, Jork Loeser, Dennis Mattoon, Magnus Nystrom, David Robinson, Rob Spiger, Stefan Thom, and David Wooten. 2015. fTPM: A Firmware-based TPM 2.0 Implementation. Technical Report MSR-TR-2015-84. Microsoft Research. Retrieved from https://www.microsoft.com/en-us/research/publication/ftpm-a-firmware-based-tpm-2-0-implementation/.
10.5555/2492708.2493033
Sun, Haonan, He, Rongyu, Zhang, Yong, Wang, Ruiyun, Ip, Wai Hung, Yung, Kai Leung. eTPM: A Trusted Cloud Platform Enclave TPM Scheme Based on Intel SGX Technology. Sensors, vol.18, no.11, 3807-.

상세보기
10.1145/3133956.3134039
Vliegen, Jo, Mentens, Nele, Verbauwhede, Ingrid. Secure, Remote, Dynamic Reconfiguration of FPGAs. ACM transactions on reconfigurable technology and systems, vol.7, no.4, 1-19.

상세보기
10.23919/DATE.2019.8714775
10.1109/FPL.2014.6927384
Developing Tamper-resistant Designs with Zynq UltraScale+ Devices 2018 Xilinx. 2018. Developing Tamper-resistant Designs with Zynq UltraScale+ Devices. XAPP1323 (v1.1).https://www.xilinx.com/support/documentation/application_notes/xapp1323-zynq-usp-tamper-resistant-designs.pdf.
Accelerating Cryptographic Performance on the Zynq UltraScale+MPSoC 2019 Xilinx. 2019. Accelerating Cryptographic Performance on the Zynq UltraScale+MPSoC. WP512 (v1.0).https://www.xilinx.com/support/documentation/white_papers/wp512-accelcrypto.pdf.
Measured Boot of Zynq UltraScale+ devices 2019 Xilinx. 2019. Measured Boot of Zynq UltraScale+ devices. XAPP1342 (v1.0).https://www.xilinx.com/support/documentation/application_notes/xapp1342-measured-boot.pdf.
Retrieved from https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/18841847/Solution+ZynqMP+PL+Programming 2020 Solution ZynqMP PL Programming Xilinx. 2020. Solution ZynqMP PL Programming. Retrieved from https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/18841847/Solution+ZynqMP+PL+Programming.
External Secure Storage Using the PUF (Xilinx) Nathan Menhorn 2018 Nathan Menhorn (Xilinx). 2018. External Secure Storage Using the PUF. XAPP1333 (v1.0).https://www.xilinx.com/support/documentation/application_notes/xapp1333-external-storage-puf.pdf.
Cryptology ePrint Archive, Report 2016/980 Zhang Ning 2016 TruSpy: Cache Side-Channel Information Leakage from the Secure World on ARM Devices Ning Zhang, Kun Sun, Deborah Shands, Wenjing Lou, and Y. Thomas Hou. 2016. TruSpy: Cache Side-Channel Information Leakage from the Secure World on ARM Devices. Cryptology ePrint Archive, Report 2016/980. Retrieved from https://eprint.iacr.org/2016/980.
IEEE Symposium on Security and Privacy (SP’18) Zhao Mark 229 2018 Mark Zhao and G. Edward Suh. 2018. FPGA-based remote power side-channel attacks. In IEEE Symposium on Security and Privacy (SP’18). 229-244. DOI:https://doi.org/10.1109/SP.2018.00049
4th International Workshop on Trustworthy Embedded Devices (TrustED’14) Zhao Shijun 25 2014 10.1145/2666141.2666145 Shijun Zhao, Qianying Zhang, Guangyao Hu, Yu Qin, and Dengguo Feng. 2014. Providing root of trust for ARM TrustZone using on-chip SRAM. In 4th International Workshop on Trustworthy Embedded Devices (TrustED’14). Association for Computing Machinery, New York, NY, 25-36. DOI:https://doi.org/10.1145/2666141.2666145

활용도 분석정보

상세보기

다운로드

내보내기

활용도 Top5 논문

해당 논문의 주제분야에서 활용도가 높은 상위 5개 콘텐츠를 보여줍니다.
더보기 버튼을 클릭하시면 더 많은 관련자료를 살펴볼 수 있습니다.

표제어: PCR

동의어: Packet Collision Rate

용어 설명 출처 목록 (6)

용어 설명: PCR은 세균 특이성이 있는 primer를 이용하여 적은 수의 세균이 있을지라도 쉽게 검출할 수 있는 유용한 방법이며, 이를 이용하여 구강 내 치면세균막이나 타액에서 직접 세균을 검출할 수 있게 되었다[8].

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증