芯片安全IP: Scrambled Bus

Secure-IC Security IP Cores: Scrambled Bus

安全监控，防非法跳转，Maximum security-enabling monitoring, Security policy bypass, Digital实现

1. OVERVIEW

The security of a System-on-Chip depends on various tamper protections used to protect the cryptographic keys from different kind of attacks. These keys are usually transmitted as plaintext between heterogonous modules through a SoC interconnect as bus and network-on-chip.

Advance probing techniques consist in approaching probes near an on-chip wire and observe logical values transmitted through it. This technique is applied when the on-chip wire is routed on the top metal layers of the chip.

Another technique, based on the Focused on Beam (FIB) technology, consists of drilling a hole to an on-chip wire routed on bottom metal layers, felling the hole with platinum and creating a pad on surface for easy access.

The probing attacks are expensive but they are more and more used by attackers to retrieve the keys transmitted through the SoC interconnect. Advance probing attacks might use multiple probes and access to full data word carried by the bus. This is why busses should be protected against probing attacks.

The typical protection against the probing attacks is shielding using dedicated wires routed above the buses to be protected. The shield protection deteriorates the chip performances in term of area and power consumption when the shield lines cover the whole circuit. To reduce the shield cost, the designer can select only sensitive zones of the chip to be covered with the shield; however, this solution introduces a breach because the buses that transmit sensitive data between the zones covered by the shield remain vulnerable.

Secure-IC Scrambled Bus IP masks all data carried on the bus with random variables generated locally by cryptographic primitives.

Features:

· Cryptographically secure masking

· On-the-fly masking and unmasking, no additional latency

· Transparent for bus masters and slaves, no modifications on the wrappers

· Easy integration

· Adaptable to various protocols

· High frequency (more than 1GHz is reached with 28nm technology)

关于Secure-IC

Secure-IC位于法国，专业从事电子产品安全性保护咨询服务和安全性分析测试平台的研发。从研究安全性加密保护算法起家，到销售保护IP授权，到现在提供全方位的安全性分析测试套件。Secure-IC的测试套件作为欧洲CC多家认证实验室的认证工具，可以帮助客户获得CC EAL5+的认证。Secure-IC进入中国市场数年来，已经有多家厂商和科研院所等选用了Secure-IC套件作为安全性测试和研究的工具，受到了良好的评价。
Secure-IC相对于竞争者主要的优势是技术，前端的技术和跨越式的发展。具体包括：加密算法、分析算法、各种保护模块IP，以及针对实际芯片的安全攻击分析设备和针对芯片设计源代码的安全仿真分析软件。这些也是Secure-IC最核心的产品。

随着智能化时代的到来，物联网、车联网、人工智能、云计算、电子支付等会越来越多的进入人们的生活并极大的改善人们的生活，然而随着嵌入式系统的推广应用，其安全性也受到越来越多的威胁，现阶段嵌入式系统芯片安全面临的最前沿的威胁有旁路攻击和故障注入等。

• 旁路攻击又称侧信道攻击，利用嵌入式系统的功耗、电磁等泄露信息，通过统计数学的分析方法比如SPA、CPA、DPA、MIA、CEMA等破解一个加密算法的秘钥；

• 故障注入攻击分析是通过对加密系统注入故障迫使系统产生可利用的错误反馈，通过对反馈结果的分析，而破解一个系统的安全机制，相较于侧信道分析，故障注入分析方法手段更复杂先进，效率更高。常见的故障注入方式有激光故障注入、电磁故障注入、电压毛刺故障注入和时钟毛刺故障注入等方式。

Secure-IC公司开发出了不同的安全分析和保护工具以应对嵌入式系统安全面临的威胁：

1.旁路攻击及故障注入安全分析设备：Secure-IC Analyzer

2.旁路攻击及故障注入仿真分析软件：Secure-IC Virtualyzer

3.旁路攻击及故障注入仿真大数据分析软件：Secure-IC Catalyzer

4.安全保护IP核:Secure-IC Security IP cores

关于Secure-IC Security IP Cores

安全分析是为了发现芯片的安全漏洞，了解芯片的安全等级，但发现安全漏洞之后更重要的是解决它。Secure-IC针对不同的安全漏洞设计了不同的安全保护IP核。

Secure-IC所售IP核可基于客户要求，按不同等级license出售，包括从最初步到全部源代码等不同程度。