Veiligheidsanalyse van PUF-gebaseerde sleutelgeneratie en entiteitsauthenticatie

No two physical objects are exactly the same, even when manufactured with a nominally identical process. For example, two sheets of paper that are indistinguishable with the naked eye, still differ considerably in their nanoscale fiber structures. Although manufacturing variability is usually undesired, the associated ability to uniquely identify a physical object, which is constrained to an integrated circuit (IC) in this thesis, can be leveraged for security purposes. To facilitate the registration of unique features, a so-called physically unclonable function (PUF) can be implemented on the IC. A PUF circuit is designed to be sensitive to process variations, i.e., challenged with a binary input, it provides a binary, device-unique response. This building block can hence be understood as the silicon equivalent of human biometrics. PUFs can augment the security architecture of an ever-increasing number of electronic devices that access our personal data and/or represent our identities. This includes but is not limited to smartphones, credit cards, access badges, the sensors and actuators of automated home, and medical implants. PUFs usually need to team up with other building blocks, e.g., true random number generators (TRNGs), cryptographic algorithms, error-correcting codes, non-volatile memory (NVM), etc. We analyze the security of such multi-component systems in a format that allows for comparisons among proposals that have similar or identical objectives. Numerous newly revealed flaws and attacks are presented throughout this thesis. On the bright side, the lessons learned can help improve the quality of future PUF-based systems.Abstract List of Acronyms List of Symbols Contents 1 Introduction 1.1 Securing Electronic Devices 1.2 Thesis Outline and Contributions 2 Preliminaries 2.1 Notation 2.2 Min-Entropy 2.3 Probability Distributions 2.4 Coding Theory 2.5 Embedded, Non-Volatile Memory 2.6 Cryptographic Algorithms 2.7 Physically Unclonable Functions 2.7.1 Informal 2.7.2 Formal 3 Security Analysis of PUF Circuits - Novel Methods 3.1 A Representative Set of PUF Circuits 3.1.1 Two Design Flavors: Weak and Strong PUFs 3.1.2 Selected Weak PUFs 3.1.3 Selected Strong PUFs 3.1.4 Machine Learning 3.1.5 An Accurate Variability–Noise Model 3.2 Min-Entropy 3.2.1 Overview 3.2.2 Black-Box Bounds 3.2.3 Gray-Box Bounds 3.2.4 White-Box Bounds 3.3 Physical Attacks 3.3.1 Related Literature 3.3.2 Exploitation of Noise 3.4 Conclusion 4 A Survey on PUF-Based Key Generation 4.1 System Overview 4.1.1 Reference: Key-Storage in Physically Secure NVM 4.1.2 An HDA for PUF-Based Key Generation 4.1.3 Failure Rate 4.1.4 Min-Entropy Loss 4.2 Cryptographic Back-End 4.2.1 Encryption of an Application Key 4.2.2 Integrity of Helper Data 4.2.3 Key Derivation Function 4.3 Error-Correction with a Secure Sketch 4.3.1 Definition 4.3.2 Constructions using a Block Code 4.3.3 Repeated Execution of a Concatenated Code 4.3.4 Convolutional Codes 4.3.5 Tight Bounds on the Min-Entropy Loss 4.3.6 Reusability 4.3.7 Helper Data Manipulation 4.4 Other Error-Correction Schemes 4.4.1 Exhaustive Search 4.4.2 Soft-Decision Decoding 4.4.3 Pattern Matching 4.5 Computationally Straightforward Front-End 4.5.1 Temporal Majority Vote 4.5.2 Suh and Devadas 4.5.3 Spatial Majority Vote 4.5.4 Index-Based Syndrome 4.5.5 Von Neumann 4.5.6 Comparisons 4.6 PUFs with Helper Data Input 4.7 Conclusion 5 A Survey on PUF-Based Entity Authentication 5.1 Protocol Requirements 5.1.1 Complete Specification 5.1.2 Resilience against Leakage of NVM Contents 5.1.3 Able to Handle Noise 5.1.4 Resistance to Machine Learning Attacks 5.1.5 Expanding the Response of a Strong PUF 5.1.6 Low-Cost and Resource-Constrained 5.1.7 Easy-to-instantiate 5.1.8 Resistance to Protocol Attacks 5.1.9 Scalability: Identification Prior to Authentication 5.1.10 On the Mutual Authentication Order 5.2 Authentication via PUF-Based Key Generation 5.2.1 Reference Protocols 5.2.2 Related Literature 5.3 Analysis of Protocols 5.3.1 Basic Authentication (2001) 5.3.2 Controlled PUFs (2002) 5.3.3 Bolotnyy and Robins (2008) 5.3.4 Öztürk et al. (2008) 5.3.5 Hammouri et al. (2008) 5.3.6 Kulseng et al. (2010) 5.3.7 Super High Information Content PUFs (2010) 5.3.8 Sadeghi et al. (2010) 5.3.9 Logically Reconfigurable PUFs (2011) 5.3.10 Reverse Fuzzy Extractors (2012) 5.3.11 Converse Authentication (2012) 5.3.12 Lee et al. I (2012) 5.3.13 Jin et al. (2012) 5.3.14 Slender PUFs (2012) 5.3.15 Xu and He (2012) 5.3.16 He and Zou (2012) 5.3.17 Jung and Jung (2013) 5.3.18 Lee et al. II (2013) 5.3.19 Noise Bifurcation (2014) 5.3.20 System of PUFs (2014) 5.3.21 PUF Lockdown (2016) 5.4 Overview and Discussion 5.5 Conclusion 6 Conclusions and Further Work 6.1 PUFs versus Embedded NVM 6.2 Min-Entropy 6.3 Literature Disconnect Bibliography Curriculum Vitae List of Publicationsnrpages: 258status: publishe