As the complexity of digital circuits increases, High-Level Synthesis (HLS) is becoming a valuable tool to increase productivity and design reuse by utilizing relevant Electronic Design Automation (EDA) flows, either for Application-Specific Integrated Circuits (ASIC) or for Field Programmable Gate Arrays (FPGA). Side Channel Analysis (SCA) and Fault Injection (FI) attacks are powerful hardware attacks, capable of greatly weakening the theoretical security levels of secure implementations. Furthermore, critical applications demand high levels of reliability including fault tolerance. The lack of security and reliability driven optimizations in HLS tools makes it necessary for the HLS-based designs to validate that the properties of the algorithm and the countermeasures have not been compromised due to the HLS flow. In this work, we provide results on the resilience evaluation of HLS-based FPGA implementations for the aforementioned threats. As a test case, we use multiple versions of an on-the-fly SBOX algorithm integrating different countermeasures (hiding and masking), written in C and implemented using Vivado HLS. We perform extensive evaluations for all the designs and their optimization scenarios. The results provide evidence of issues arising due to HLS optimizations on the security and the reliability of cryptographic implementations. Furthermore, the results put HLS algorithms to the test of designing secure accelerators and can lead to improving them towards the goal of increasing productivity in the domain of secure and reliable cryptographic implementations.
翻译:随着数字电路复杂性的增加,高层次综合(HLS)正成为一种有价值的工具,通过利用相关的电子设计自动化(EDA)流程(无论是针对专用集成电路ASIC还是现场可编程门阵列FPGA),来提高生产效率和设计复用。侧信道分析(SCA)和故障注入(FI)攻击是强大的硬件攻击方式,能够极大地削弱安全实现的理论安全级别。此外,关键应用对可靠性(包括容错能力)提出了较高要求。由于HLS工具缺乏安全性和可靠性驱动的优化,使得基于HLS的设计必须验证算法属性和防护措施是否未因HLS流程而受损。本文针对上述威胁,提供了基于HLS的FPGA实现的抗干扰性评估结果。作为测试案例,我们采用了用C语言编写并通过Vivado HLS实现的“即时SBOX算法”的多个版本,这些版本集成了不同的防护措施(隐藏和掩码)。我们对所有设计及其优化场景进行了广泛评估。结果表明,HLS优化会对密码实现的可靠性和安全性引发问题。此外,这些结果进一步检验了HLS算法在设计安全加速器方面的能力,并有助于改进这些算法,从而在安全可靠的密码实现领域提高生产力。