• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学 ›› 2021, Vol. 43 ›› Issue (08): 1360-1365.

• 高性能计算 • 上一篇    下一篇

轻量级安全内存:RISC-V嵌入式微处理器安全增强

牛世权   

  1. (国防科技大学计算机学院,湖南 长沙 410073)

  • 收稿日期:2020-06-09 修回日期:2020-07-15 接受日期:2021-08-25 出版日期:2021-08-25 发布日期:2021-08-24
  • 基金资助:
    国家自然科学基金(61832018)

Lightweight secure memory: Security enhancement for RISC-V embedded microprocessors

NIU Shi-quan   

  1. (College of Computer Science and Technology,National University of Defense Technology,Changsha 410073,China)
  • Received:2020-06-09 Revised:2020-07-15 Accepted:2021-08-25 Online:2021-08-25 Published:2021-08-24

摘要: 近年来,针对嵌入式设备中硬件的新型攻击不断出现,严重威胁嵌入式设备的安全。特别是随着非易失性存储器开始被配备到嵌入式设备中,就需要考虑如何保护配备非易失性存储器的嵌入式设备的安全。安全内存,就是这样一种通过保护内存来增强嵌入式设备安全性的有效手段。通过设计一种安全内存加密引擎来实现安全内存。在保证该安全内存加密引擎足够轻量、开销低的同时,将其集成到RISC-V嵌入式微处理器中,并通过FPGA对该安全内存加密引擎进行了评估。评估结果表明,安全内存加密引擎能够在提升RISC-V嵌入式微处理器安全性的同时,保证其合理的访存性能以及较小的面积开销。研究结果具有良好的参考价值和应用前景。


关键词: 硬件安全, RISC-V, 安全内存加密引擎, 高级加密标准, 物理不可克隆函数

Abstract: In recent years, new types of attacks against the hardware in embedded devices have emerged, which seriously threaten the security of embedded devices. Especially, as non-volatile memory begins to be used in embedded devices, it is necessary to consider how to protect the security of embedded systems equipped with non-volatile memory. Secure memory is such a means to enhance the security of embedded systems by protecting their memory. It uses memory encryption technology to encrypt data in memory, thereby protecting the sensitive data in memory. A lightweight, low-overhead secure memory encryption engine is designed and integrated into the RISC-V embedded microprocessor. In addition, the secure memory encryption engine is evaluated on FPGA. The evaluation results show that the secure memory encryption engine can ensure reasonable memory access performance and small area overhead while obtaining security. The research results have good reference value and application prospects.


Key words: hardware security, RISC-V, secure memory encryption engine, AES, physical unclonable function