电子科技 ›› 2023, Vol. 36 ›› Issue (9): 15-20.doi: 10.16180/j.cnki.issn1007-7820.2023.09.003

• • 上一篇    下一篇

基于轻量级分组密码算法的SoC安全存储器设计

刘伟,曾祥义,肖昊   

  1. 合肥工业大学 微电子学院,安徽 合肥 230009
  • 收稿日期:2022-04-01 出版日期:2023-09-15 发布日期:2023-09-18
  • 作者简介:刘伟(1996-),男,硕士研究生。研究方向:可信计算芯片。|肖昊(1982-),男,教授,博士生导师。研究方向:可信计算芯片、专用硬件加速器、多核片上系统(MPSoC)设计。
  • 基金资助:
    国家自然科学基金(61974039);航空科学基金(2018ZCP4003)

Design of SoC Secure Memory Based on Lightweight Block Cipher

LIU Wei,ZENG Xiangyi,XIAO Hao   

  1. School of Microelectronics,Hefei University of Technology,Hefei 230009,China
  • Received:2022-04-01 Online:2023-09-15 Published:2023-09-18
  • Supported by:
    National Natural Science Foundation of China(61974039);Aero Science Foundation of China(2018ZCP4003)

摘要:

针对嵌入式片上系统的RAM(Random Access Memory)、Flash存储器面临的安全风险,文中概述了针对传统SoC(System on Chip)芯片存储器的物理攻击,并提出一种支持加密算法的存储器控制器。使用轻量级分组密码算法LBlock-s,通过密码学安全分析证明了该算法具有较好的抵抗差分分析的能力。相对于传统分组密码算法AES(Advanced Encryption Standard),文中所提方法在保证安全性的前提下减少了硬件资源开销,适用于各种资源受限的安全SoC芯片。为提高数据的吞吐率,将算法的硬件结构进行展开,使标准的32轮加/解密耗时1个时钟周期。该方案在不耗费较多硬件资源和加密延时的前提下,保证了存储器的数据即使被攻击者获取也无法解析出敏感数据,有效避免了安全芯片遭受物理攻击。

关键词: 安全存储器, 安全SoC芯片, 信息安全, 数据加密, 轻量级分组密码, 差分分析, 物理攻击, 吞吐率

Abstract:

In view of the security risks faced by RAM(Random Access Memory) and Flash memory of embedded on-chip systems, this study outlines physical attacks against memory of traditional SoC(System on Chip) chips, and presents a memory controller that supports encryption algorithms. Using the lightweight block cipher algorithm LBlock-s, the cryptographic security analysis shows that the algorithm has a good resistance to differential cryptanalysis. Compared with traditional block cipher algorithms such as AES(Advanced Encryption Standard), the proposed method reduces hardware resource consumption while guaranteeing security and is suitable for all kinds of resource-constrained secure SoC chips. To improve the data throughput, the hardware structure of the algorithm is expanded so that the standard 32 rounds of encryption or decryption take 1 clock cycle. This scheme guarantees that sensitive data cannot be parsed even if acquired by the attacker without consuming more hardware resources and encrypting delay, and effectively avoids physical attack on the security chip.

Key words: secure memory, secure SoC chip, information security, data encryption, lightweight block cipher, differential cryptanalysis, physical attacks, throughput

中图分类号: 

  • TP309