Autonomous NIC offloads

Pismenny, Boris; Eran, Haggai; Yehezkel, Aviad; Liss, Liran; Morrison, Adam; Tsafrir, Dan

doi:10.1145/3445814.3446732

Cited by 18 publications

(7 citation statements)

References 40 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The system configuration consisting of different devices shows similar graph behavior with different performance time. The experiments were performed on the separate edge devices: mobile workstation/laptop and Raspberry Pi 3B for measuring the detail performance [ 31 ]. We used different PRNG for different time-quarters with no significant difference in the key generation and for performance, but are better for security.…”

Section: Methodsmentioning

confidence: 99%

Autonomous Mutual Authentication Protocol in the Edge Networks

Sheu

Pardeshi

Chen

2022

Sensors

View full text Add to dashboard Cite

A distinct security protocol is necessary for the exponential growth in intelligent edge devices. In particular, the autonomous devices need to address significant security concern to function smoothly in the high market demand. Nevertheless, exponential increase in the connected devices has made cloud networks more complex and suffer from information processing delay. Therefore, the goal of this work is to design a novel server-less mutual authentication protocol for the edge networks. The aim is to demonstrate an autonomous mutual authentication amongst the connected smart devices within the edge networks. The solution addresses applications of autonomous cars, smart things, and Internet of Things (IoT) devices in the edge or wireless sensor networks (WSN), etc. In this paper, the design proposes use of a public-key system, octet-based balanced-tree transitions, challenge–response mechanism, device unique ID (UID), pseudo-random number generator (PRNG), time-stamps, and event specific session keys. Ultimately, server-less design requires less infrastructure and avoids several types of network-based communication attacks, e.g., impersonating, Man in the middle (MITM), IoT-DDOS, etc. Additionally, the system overhead is eliminated by no secret key requirements. The results provide sufficient evidence about the protocol market competitiveness and demonstrate better benchmark comparison results.

show abstract

Section: Methodsmentioning

confidence: 99%

Autonomous Mutual Authentication Protocol in the Edge Networks

Sheu

Pardeshi

Chen

2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Currently, TLS 1.3 [51] supports both the AES-GCM cipher and ChaCha20/Poly1305 ciphers. A recent work (L5o [49]) offloads TLS/AES-GCM processing (encryption/decryption/authentication) to smartNIC. This paper complements these efforts by offloading ChaCha-based algorithms to Netronome smartNICs.…”

Section: Background and Motivationmentioning

confidence: 99%

Implementing ChaCha based crypto primitives on programmable SmartNICs

Kottur

Kadiyala

Tammana

et al. 2022

Proceedings of the ACM SIGCOMM Workshop on Formal Foundations and Security of Programmable Network Infrastructures

View full text Add to dashboard Cite

Control and management plane applications such as serverless function orchestration and 4G/5G control plane functions are offloaded to smartNICs to reduce communication and processing latency. Such applications involve multiple inter-host interactions that were traditionally secured using SSL/TLS gRPC-based communication channels. Offloading the applications to smartNIC implies that we must also offload the security algorithms. Otherwise, we need to send the application messages to the host VM/container for crypto operations, negating offload benefits.We propose crypto externs for Netronome Agilio smartNICs that implement authentication and confidentiality (encryption/decryption) using the ChaCha stream cipher algorithm. AES and ChaCha are two popular cipher suites, but we chose ChaCha since none of the smartNICs have ChaCha-based crypto accelerators. However, smartNICs have restricted instruction set, and limited memory, making it difficult to implement security algorithms. This paper identifies and addresses several challenges to implement ChaCha crypto primitives successfully. Our evaluations show that our crypto extern implementation satisfies the scalability requirement of popular applications such as serverless management functions and host in-band network telemetry.

show abstract

“…In addition to those in § 2. NIC vendors offer a variety of offloads, e.g., for cryptography [15,41,80,88] and storage [11,41,63]. Some offer full TCP offload engines [72].…”

Section: Related Workmentioning

confidence: 99%

FlexDriver: a network driver for your accelerator

Eran¹,

Fudim

Malka

et al. 2022

Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems

Self Cite

View full text Add to dashboard Cite

We propose a new system design for connecting hardware and FPGA accelerators to the network, allowing the accelerator to directly control commodity Network Interface Cards (NICs) without using the CPU. This enables us to solve the key challenge of leveraging existing NIC hardware offloads such as virtualization, tunneling, and RDMA for accelerator networking. Our approach supports a diverse set of use cases, from direct network access for disaggregated accelerators to inline-acceleration of the network stack, all without the complex networking logic in the accelerator.To demonstrate the feasibility of this approach, we build Flex-Driver (FLD), an on-accelerator hardware module that implements a NIC data-plane driver. Our main technical contribution is a mechanism that compresses the NIC control structures by two orders of magnitude, allowing FLD to achieve high networking scalability with low die area cost and no bandwidth interference with the accelerator logic.The prototype for NVIDIA Innova-2 FPGA SmartNICs showcases our design's utility for three different accelerators: a disaggregated LTE cipher, an IP-defragmentation inline accelerator, and an IoT cryptographic-token authentication offload. These accelerators reach 25 Gbps line rate and leverage the NIC for RDMA processing, VXLAN tunneling, and traffic shaping without CPU involvement. CCS CONCEPTS• Hardware → Hardware accelerators; Networking hardware; • Computer systems organization → Heterogeneous (hybrid) systems; Distributed architectures.

show abstract

Autonomous NIC offloads

Cited by 18 publications

References 40 publications

Autonomous Mutual Authentication Protocol in the Edge Networks

Autonomous Mutual Authentication Protocol in the Edge Networks

Implementing ChaCha based crypto primitives on programmable SmartNICs

FlexDriver: a network driver for your accelerator

Contact Info

Product

Resources

About