片外存储器的加密与完整性保护分析-encryption and integrity protection analysis of off-chip memory.docxVIP

AbstractWith the extensive application of embedded systems, security issues of embedded systems gradually attract people’s attention. In particular, security issues of off-chip memory are one of the most important security issues in embedded system and cannot be ignored. Especially in the System on Chip (SOC), the attacker can easily tamper or theft the sensitive data in the off-chip memory by monitoring the bus between the SOC chip and off-chip memory. It will obviously result in information leaks, which is a big threat to the security of embedded systems. There are many existing related findings about off-chip memory security. A classical way to address the off-chip memory security issues is to add a security protection module between the microprocessor and the external memory. However, adding the extra security hardware brings overheads in system performance, memory cost and the SOC area.This paper first in-depth analyzes the security threat of embedded system, especially the threat model considered for off-chip memory authentication. Then, we analyze the off-chip memory security strategy. To ensure the security of off-chip memory, it needs to protect the data confidentiality and integrity of off-chip memory simultaneously. We also introduce the existing approaches of protecting data confidentiality and integrity respectively. In this article we propose a novel architecture for off-chip memory encryption and integrity protection based on Advanced Encryption Standard - Galois/Counter Mode (AES-GCM). The idea relies on a novel dual-layer encryption and decryption mechanism with one layer in charge of data encryption or decryption and the other layer dedicated for encryption or decryption of the tags generated by the data encryption/decryption layer. Our approach provides data confidentiality and integrity authentication at the same time and can safeguard against a series of well-known attacks, including replay attacks, spoofing attacks. With the coordination of the