基于RISC-V的数据安全指令  

Data Security Instruction Based on RISC-V

作　　者：刘阳[1] 汪丹[1] 方林伟 王利明[1] LIU Yang;WANG Dan;FANG Lin-Wei;WANG Li-Ming(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China)

机构地区：[1]中国科学院信息工程研究所,北京100093

出　　处：《计算机系统应用》2023年第1期392-398,共7页Computer Systems & Applications

基　　金：国家重点研发计划(2019YFB1005200)。

摘　　要：RISC-V是基于精简指令集原理建立的免费开放指令集架构,具有完全开源、架构简单、易于移植、模块化设计等特点.随着网络高速发展,安全风险无处不在,利用RISC-V的可扩展特性是一种非常有效地提升RISC-V设备安全的方式.因此,本文针对RISC-V自定义指令的安全能力,结合可信计算、流密码技术,设计了简单高效的RISC-V自定义指令,实现基于可信基的数据安全存储功能,并依托GNU编译工具链实现对自定义指令的编译支持,在模拟器上测试应用程序对自定义指令的调用执行.该指令充分结合可信计算与流密码的安全特性,可实现较强的安全性.RISC-V is a free and open instruction set architecture built by the principle of reduced instruction sets, which features complete open source, simple architecture, easy portability, and modular design. With the rapid development of networks, security risks are ubiquitous. The extensibility feature of RISC-V can be utilized to effectively improve the security of RISC-V devices. Therefore, this study designs a simple and efficient RISC-V custom instruction considering the security capabilities of RISC-V custom instructions and by use of trusted computing and stream cipher technology to realize the function of data security storage based on the trusted computing base. Moreover, the compilation support for the custom instruction is achieved with the GNU compilation toolchain. The calling and execution of the custom instruction by an application are tested on a simulator. This instruction fully combines the security features of trusted computing and stream ciphers, and hence, it can achieve strong security.

关 键 词：RISC-V 自定义指令 数据安全存储 可信计算 密码技术 处理器 云存储 隐私保护 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]