基于PUF的安全处理器指令混淆与总线加密方法  

Instruction Obfuscation and Bus Encryption Method of Secure Processor Based on PUF

作　　者：陈备 黄紫山 贺章擎[1] CHEN Bei;HUANG Zishan;HE Zhangqing(Hubei Collaborative Innovation Center for High-Efficiency Utilization of Solar Energy,Hubei University of University,Wuhan Hubei 430068,China)

机构地区：[1]湖北工业大学太阳能高效利用湖北省协同创新中心,湖北武汉430068

出　　处：《电子器件》2024年第6期1457-1464,共8页Chinese Journal of Electron Devices

基　　金：国家自然科学基金项目(62271194)。

摘　　要：针对高安全敏感处理器面临总线监听、数据篡改、代码注入等类型的恶意攻击,导致机密信息容易被窃取的问题,提出了一种基于PUF的安全处理器指令混淆和总线数据加密方案。该方案利用PUF模块生成高可靠的海量密钥,对基于RISC-V的处理器指令操作码进行混淆,同时对其总线数据进行“一次一密”异或加密。实验结果表明,所提出的指令混淆方法的时间开销小,CPU占用率低,硬件资源消耗少,同时总线加密方法在数据吞吐量性能上占有较大优势。与同类技术相比,所提出方法在实现处理器指令集和总线数据防护的同时,大幅降低了处理器开销,增强了处理器的不可克隆性。A PUF-based instruction obfuscation and bus data encryption scheme for high-security sensitive processors is proposed. The high-security sensitive processors are vulnerable to malicious attacks such as bus listening, data tampering, and code injection, resulting in theft of confidential information. The PUF module is used to generate high reliable massive keys to obfuscate the instruction opcodes of RISC-V-based processors and to encrypt the bus data in a “one-at-a-time” heterogeneous manner. The experimental results show that proposed instruction obfuscation method has low time overhead, low CPU usage, and low hardware resource consumption, while the bus encryption method has a great advantage in data throughput performance. Compared with similar techniques, the proposed method achieves the processor instruction set and bus data protection while significantly reducing the processor overhead and enhancing the processor non-clonability.

关 键 词：物理不可克隆函数 微处理器指令集 总线加密认证 RISC-V 

分 类 号：TP391[自动化与计算机技术—计算机应用技术] TP309.7[自动化与计算机技术—计算机科学与技术]