MAFIA: Protecting the microarchitecture of embedded systems against fault injection attacks
Autor: | Thomas Chamelot, Damien Couroussé, Karine Heydemann |
---|---|
Přispěvatelé: | Laboratoire Fonctions Innovantes pour circuits Mixtes (LFIM), Université Grenoble Alpes (UGA)-Département Systèmes et Circuits Intégrés Numériques (DSCIN), Laboratoire d'Intégration des Systèmes et des Technologies (LIST (CEA)), Direction de Recherche Technologique (CEA) (DRT (CEA)), Commissariat à l'énergie atomique et aux énergies alternatives (CEA)-Commissariat à l'énergie atomique et aux énergies alternatives (CEA)-Direction de Recherche Technologique (CEA) (DRT (CEA)), Commissariat à l'énergie atomique et aux énergies alternatives (CEA)-Commissariat à l'énergie atomique et aux énergies alternatives (CEA)-Laboratoire d'Intégration des Systèmes et des Technologies (LIST (CEA)), Commissariat à l'énergie atomique et aux énergies alternatives (CEA)-Commissariat à l'énergie atomique et aux énergies alternatives (CEA), Université Grenoble Alpes [2016-2019] (UGA [2016-2019]), Architecture et Logiciels pour Systèmes Embarqués sur Puce (ALSOC), LIP6, Sorbonne Université (SU)-Centre National de la Recherche Scientifique (CNRS)-Sorbonne Université (SU)-Centre National de la Recherche Scientifique (CNRS), ANR-18-CE39-0003,COFFI,Intégrité du flot d'exécution: du logiciel à la micro-architecture(2018) |
Jazyk: | angličtina |
Rok vydání: | 2023 |
Předmět: |
Pipelines
[INFO.INFO-AR]Computer Science [cs]/Hardware Architecture [cs.AR] counter-measures Circuit faults control logic control-signal integrity Computer Graphics and Computer-Aided Design Codes [INFO.INFO-CR]Computer Science [cs]/Cryptography and Security [cs.CR] Hardware control-flow integrity code integrity code authenticity Security fault injection attacks Process control Electrical and Electronic Engineering Microarchitecture Software |
Zdroj: | IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2023, ⟨10.1109/TCAD.2023.3276507⟩ |
ISSN: | 0278-0070 |
Popis: | International audience; Fault injection attacks represent an effective threatto embedded systems. Recently, Laurent et al. have reported thatfault injection attacks can leverage faults inside the microarchi-tecture. However, state-of-the-art counter-measures, hardware-only or with hardware support, do not consider the integrityof microarchitecture control signals that are the target of thesefaults.We present MAFIA, a microarchitecture protection againstfault injection attacks. MAFIA ensures integrity of pipelinecontrol signals through a signature-based mechanism, and en-sures fine-grained control-flow integrity with a complete indirectbranch support and code authenticity. We analyse the securityproperties of two different implementations with different secu-rity/overhead trade-offs: one with a CBC-MAC/Prince signaturefunction, and another one with a CRC32. We present ourimplementation of MAFIA in a RISC-V processor, supportedby a dedicated compiler toolchain based on LLVM/Clang. Wereport a hardware area overhead of 23.8 % and 6.5 % for theCBC-MAC/Prince and CRC32 respectively. The average code sizeand execution time overheads are 29.4 % and 18.4 % respectivelyfor the CRC32 implementation and are 50 % and 39 % for theCBC-MAC/Prince. |
Databáze: | OpenAIRE |
Externí odkaz: |