基于TRNG与PUF集成结构的安全加密认证系统  

A secure encryption authentication system based on integrated structure of TRNG and PUF

作　　者：罗晓蝶 段威 李一凡 刘如意 任仟 宋敏 LUO Xiaodie;DUAN Wei;LI Yifan;LIU Ruyi;REN Qian;SONG Min(School of Microelectronics,Hubei University,Wuhan 430062,Hubei,China;School of Optics and Electronic Information,Huazhong University of Science and Technology,Wuhan 430074,Hubei,China)

机构地区：[1]湖北大学微电子学院,湖北武汉430062 [2]华中科技大学光学与电子信息学院,湖北武汉430074

出　　处：《微电子学与计算机》2023年第10期118-124,共7页Microelectronics & Computer

摘　　要：真随机数发生器(TRNG)与物理不可克隆函数(PUF)是安全加密认证系统的重要安全基元.然而传统TRNG通常需要额外的后处理电路.通过两个不同模块同时实现TRNG与PUF结构的电路,其面积消耗过大且结构复杂.为此,在优化TRNG的基础之上,利用FPGA实现了一种适用于物联网设备的TRNG与PUF轻量级集成设计.采用快速进位链逻辑实现了TRNG,同时使用固定的比较链和多重检测的方法对传统环形振荡器型物理不可克隆函数(RO-PUF)进行了改进.采用PYNQ-Z2开发板对所提出的结构进行验证,实验结果表明:所设计的TRNG结构无需后处理过程即可通过15项NIST SP 800-22统计测试,每比特随机数的熵值为0.999997,吞吐率可达125Mbps.改进的PUF具有良好的均匀性、稳定性和接近理想的唯一性,分别为47.45%,99.48%和50.12%.True random number generator(TRNG)and physical unclonable functions(PUF)are important basic security primitives of security encryption authentication system.However,traditional TRNG usually has additional post-processing circuits.For circuits that realize TRNG and PUF structures simultaneously through two different modules,the area consumption is too large and the structure is complex.Therefore,based on the optimization of TRNG,this paper uses FPGA to implement a lightweight integrated design of TRNG and PUF for IOT devices.TRNG is implemented by using fast carry chain logic and traditional RO-PUF is improved by using fixed comparison chain and multiple detection.The proposed structure was validated by using the PYNQ-Z2.Experimental results show that the TRNG structure passes the test of NIST SP 800-22 without post-processing process,and achieves a throughput of 125 Mbps with 0.999997 bits of Shannon entropy.The improved PUF has good uniformity,stability and desired uniqueness,which are 47.45%,99.48%and 50.12%respectively.

关 键 词：真随机数发生器 物理不可克隆函数 FPGA 环形振荡器 加密认证系统 

分 类 号：TN402[电子电信—微电子学与固体电子学]