Power side-channel (PSC) attacks are well-known threats to sensitive hardware like advanced encryption standard (AES) crypto cores. Given the significant impact of supply voltages (VCCs) on power profiles, various countermeasures based on VCC tuning have been proposed, among other defense strategies. Driver strengths of cells, however, have been largely overlooked, despite having direct and significant impact on power profiles as well. For the first time, we thoroughly explore the prospects of jointly tuning driver strengths and VCCs as novel working principle for PSC-attack countermeasures. Toward this end, we take the following steps: 1) we develop a simple circuit-level scheme for tuning; 2) we implement a CAD flow for design-time evaluation of ASICs, enabling security assessment of ICs before tape-out; 3) we implement a correlation power analysis (CPA) framework for thorough and comparative security analysis; 4) we conduct an extensive experimental study of a regular AES design, implemented in ASIC as well as FPGA fabrics, under various tuning scenarios; 5) we summarize design guidelines for secure and efficient joint tuning. In our experiments, we observe that runtime tuning is more effective than static tuning, for both ASIC and FPGA implementations. For the latter, the AES core is rendered >11.8x (i.e., at least 11.8 times) as resilient as the untuned baseline design. Layout overheads can be considered acceptable, with, e.g., around +10% critical-path delay for the most resilient tuning scenario in FPGA. We will release source codes for our methodology, as well as artifacts from the experimental study, post peer-review.
翻译:电源侧通道攻击是众所周知的对敏感硬件的威胁,如高级加密标准(AES)加密核心的加密核心。鉴于供应电压(VCCs)对电力剖面的重大影响,除其他防御战略外,还提出了以VCC调频为基础的各种对策。尽管对电力剖面也有直接和显著影响,但驱动器的强力在很大程度上被忽视。我们首次彻底探索联合调控驱动器强力和VCCs作为PSC攻击对策新工作原则的前景。为此,我们采取了以下步骤:(1)我们制定了简单的电路级调控计划;(2)我们实施了CAD流,用于对ASICs进行设计-时间评价,从而能够在磁盘脱机前对ICs进行安全评估;(3)我们实施了一个相关能力分析框架,用于对电力剖面和比较安全剖面进行彻底和比较分析;(4)我们根据各种调制情景,对AESSIC系统以及FGA结构的定期设计进行了广泛的实验性研究。我们总结了安全性与高效的电子联合调整准则。8.在SISCSBSBSBS的后期中,我们观察了对AFP的系统进行时间的调整,作为最短的调整,作为SBSBSDFD的计算,作为最短的调整,作为SBSB。我们观察时间进行时间进行。我们观察。