Programmable access-controlled and generic erasable PUF design and its applications

Abstract

Physical Unclonable Functions (PUFs) have not only been suggested as a new key storage mechanism, but -in the form of so-called "Strong PUFs" -also as cryptographic primitives in advanced schemes, including key exchange, oblivious transfer, or secure multi-party computation. This notably extends their application spectrum, and has led to a sequence of publications at leading venues such as IEEE S&P, CRYPTO, and EUROCRYPT in the past. However, one important unresolved problem is that adversaries can break the security of all these advanced protocols if they gain physical access to the employed Strong PUFs after protocol completion. It has been formally proven that this issue cannot be overcome by techniques on the protocol side alone, but requires resolution on the hardware level -the only fully effective known countermeasure being so-called Erasable PUFs . Building on this work, this paper is the first to describe a generic method of how any given silicon Strong PUF with digital CRP-interface can be turned into an Erasable PUF. We describe how the Strong PUF can be surrounded with a trusted control logic that allows the blocking (or "erasure") of single CRP. We implement our approach, which we call "GeniePUF", on FPGA, reporting detailed performance data and practicality figures. Furthermore, we develop the first comprehensive definitional framework for Erasable PUFs. Our work so re-establishes the effective usability of Strong PUFs in advanced cryptographic applications, and in the realistic case, adversaries get access to the Strong PUF after protocol completion. As an extension to earlier versions of this work , we also introduce a generalization of Erasable PUFs in this paper, which we call Programmable Access Controlled PUFs (PAC PUFs). We detail their definition, and discuss various exemplary applications of theirs.

Securing Synchrophasors Using Data Provenance in the Quantum Era

“…Particularly, the vulnerability of security credentials, identities, and secret keys stored in the PDC to hardware and software exploits poses a critical challenge. It is imperative for researchers to propose innovative and reliable hybrid-controlled strong PUF [60], [89], [90], [91], or Quantum-based PUF (QPUF) solutions [92] to mitigate such attacks, further strengthening the security of synchrophasor networks in the quantum era.…”

A PUF-Based Key Storage Scheme Using Fuzzy Vault

“…Therefore, both the existing vaults and the vaults that will be generated in the future can be compromised. To countermeasure this issue, the erasable PUF technique can be used to block the physical access of strong PUFs on the hardware level, which is a generic method for any given silicon strong PUF with a digital CRP-interface [ 43 ].…”

First demonstration of reconfigurable and low-power strong physical unclonable function empowered by FeFET cycle-to-cycle variation

“…PUFs have a limited number of CRPs that are linear or polynomial to the number of PUF cells, while strong PUFs can support an exponentially large CRP space [3][4][5][6] . Therefore, in addition to realizing weak PUF applications, strong PUFs can take advantage of the large CRP space for deployment in advanced cryptographic protocols, such as device authentication 13,19 and multi-party computation 20 . Another main difference between weak and strong PUFs lies in the threat models.…”