Electromagnetic analysis on ring oscillator-based true random number generators

Bayon, Pierre; Bossuet, Lilian; Aubert, Alain; Fischer, Viktor

doi:10.1109/iscas.2013.6572251

Cited by 19 publications

(10 citation statements)

References 5 publications

(6 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We can also conclude that the activity of the AES block inside the FPGA has no influence on the result of the electromagnetic differential frequency analysis. More information on the method itself and more results can be found in [18].…”

Section: Results Of Our Differential Frequency Analysismentioning

confidence: 99%

See 1 more Smart Citation

Fault model of electromagnetic attacks targeting ring oscillator-based true random number generators

Bayon¹,

Bossuet

Aubert

et al. 2015

J Cryptogr Eng

Self Cite

View full text Add to dashboard Cite

International audienceMany side channels including power consumption, electromagnetic emanation, optical radiation, and even sound have been studied since the first publication of a side channel attack at the end of the 1990s. Most of these channels can be relatively easily used for an overall analysis of the cryptographic system (implementation of efficient passive attacks) or for injection of faults. Until recently, only the optical channel allowed both analysis of locally leaked information and precise injection of faults (single-bit errors). Recent works showed that the near-field electromagnetic channel enables similar results to be obtained. Like the optical channel, the near-field electromagnetic channel allows both active and passive attacks, which, in addition, can be theoretically non-invasive and contactless. However, the cost of the attack bench that is needed to exploit the near-field electromagnetic channel is less than that of an optical channel. Recently, we showed that it is possible to use the near-field electromagnetic channel to perform an efficient active attack targeting the true random number generator (TRNG) based on ring oscillators. In cryptography, TRNGs are chiefly used to generate encryption keys and other critical security parameters, so the proposed active attack could have serious consequences for the security of the whole cryptographic system. Here, we present the coupling of a passive attack and an active attack. The proposed coupled attack first uses a spectral differential analysis of the TRNG electromagnetic radiation to obtain valuable information on the position of ring oscillators and their frequency range. This information is then used to tune the electromagnetic harmonic signal to temporarily synchronize the ring oscillators. In this paper, we propose a fault model of the entropy extractor which shows that the behavior of the ring oscillators changes, and that it occurs additional and unwanted “fake rising edges” of the clock signal which disturb the flip-flops involved in such TRNGs. The effectiveness of our proposed coupled attack questions the use of ring oscillators in the design of TRNGs

show abstract

Section: Results Of Our Differential Frequency Analysismentioning

confidence: 99%

“…13 The simulation results (Figs. 18,19) showed that the two models produced exactly the same results. We obtained the same effect as in Figs.…”

Section: Electrical Simulationmentioning

confidence: 92%

Fault model of electromagnetic attacks targeting ring oscillator-based true random number generators

Bayon¹,

Bossuet

Aubert

et al. 2015

J Cryptogr Eng

Self Cite

View full text Add to dashboard Cite

show abstract

“…Indeed, it is a suitable PUF for both in terms of feasibility, cost and efficiency. However, the RO-PUF has security problems since it can be cloned [22] and is subject to locking phenomena [24].…”

Section: The Tero-puf For Iotmentioning

confidence: 99%

“…Indeed, the locking phenomena correspond to the manipulation of the frequency of oscillating cell in order to force them to operate at a particular frequency. More explanation of this can be found in [22]. Since the principle of the RO-PUF is based on the frequency mismatch of theoretically identical cells, lock them to the same frequency becomes a real issue.…”

Section: The Tero-puf For Iotmentioning

confidence: 99%

See 1 more Smart Citation

Implementation and Characterization of a Physical Unclonable Function for IoT: A Case Study With the TERO-PUF

Marchand

Bossuet

Mureddu

et al. 2018

IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst.

Self Cite

101

View full text Add to dashboard Cite

Today, life is becoming increasingly connected. From TVs to smartphones, including vehicles, buildings, and household appliances, everything is interconnected in what we call the "Internet of Things" (IoT). IoT is now part of our life and we have to deal with it. More than 10 billion devices are already connected and five times more are expected to be deployed in the next five years. While deployment and integration of IoT is expanding, one of the main challenge is to provide practical solutions to security, privacy and trust issues in IoT. Protection and security mechanisms need to include features such as interoperability and scalability but also traceability, authentication and access control while remaining lightweight. Among the most promising approaches to such security mechanisms, physical unclonable functions (PUF) provide a unique identifier for similar but different integrated circuits using some of their physical characteristics. These types of functions can thus be used to authenticate integrated circuits, provide traceability and access control. This paper presents a comprehensive case study of the transient effect ring oscillator (TERO) PUF from its implementation on FPGAs to its complete characterization. The implementation of the PUF is detailed for two different families of FPGAs: Xilinx Spartan 6 and Altera Cyclone V. All the metrics used for the characterization are explained in detail and the results of the characterization include robustness to environmental parameters including variations in temperature and voltage. Finally, we compare our results with those obtained for another PUF: the ring oscillator (RO) PUF. All the design files are available online to ensure repeatability and enable comparison of our contribution with other studies.

show abstract