轻量级安全内存:RISC-V嵌入式微处理器安全增强  

Lightweight secure memory:Security enhancement for RISC-V embedded microprocessors

作　　者：牛世权 NIU Shi-quan(College of Computer Science and Technology,National University of Defense Technology,Changsha 410073,China)

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2021年第8期1360-1365,共6页Computer Engineering & Science

基　　金：国家自然科学基金(61832018)。

摘　　要：近年来,针对嵌入式设备中硬件的新型攻击不断出现,严重威胁嵌入式设备的安全。特别是随着非易失性存储器开始被配备到嵌入式设备中,就需要考虑如何保护配备非易失性存储器的嵌入式设备的安全。安全内存,就是这样一种通过保护内存来增强嵌入式设备安全性的有效手段。通过设计一种安全内存加密引擎来实现安全内存。在保证该安全内存加密引擎足够轻量、开销低的同时,将其集成到RISC-V嵌入式微处理器中,并通过FPGA对该安全内存加密引擎进行了评估。评估结果表明,安全内存加密引擎能够在提升RISC-V嵌入式微处理器安全性的同时,保证其合理的访存性能以及较小的面积开销。研究结果具有良好的参考价值和应用前景。In recent years,new types of attacks against the hardware in embedded devices have emerged,which seriously threaten the security of embedded devices.Especially,as non-volatile memory begins to be used in embedded devices,it is necessary to consider how to protect the security of embedded systems equipped with non-volatile memory.Secure memory is such a means to enhance the security of embedded systems by protecting their memory.It uses memory encryption technology to encrypt data in memory,thereby protecting the sensitive data in memory.A lightweight,low-overhead secure memory encryption engine is designed and integrated into the RISC-V embedded microprocessor.In addition,the secure memory encryption engine is evaluated on FPGA.The evaluation results show that the secure memory encryption engine can ensure reasonable memory access performance and small area overhead while obtaining security.The research results have good reference value and application prospects.

关 键 词：硬件安全 RISC-V 安全内存加密引擎 高级加密标准 物理不可克隆函数 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]