Fault-resistant partitioning of secure CPUs for system Co-verification against faults - CEA - Commissariat à l’énergie atomique et aux énergies alternatives
Journal Articles IACR Transactions on Cryptographic Hardware and Embedded Systems Year : 2024

Fault-resistant partitioning of secure CPUs for system Co-verification against faults

Abstract

Fault injection attacks are a serious threat to system security, enabling attackers to bypass protection mechanisms or access sensitive information. To evaluate the robustness of CPU-based systems against these attacks, it is essential to analyze the consequences of the fault propagation resulting from the complex interplay between the software and the processor. However, current formal methodologies combining hardware and software face scalability issues due to the monolithic approach used. To address this challenge, this work formalizes the k-fault-resistant partitioning notion to solve the fault propagation problem when assessing redundancy-based hardware countermeasures in a first step. Proven security guarantees can then reduce the remaining hardware attack surface when introducing the software in a second step. First, we validate our approach against previous work by reproducing known results on cryptographic circuits. In particular, we outperform state-of-the-art tools for evaluating AES under a three-fault-injection attack. Then, we apply our methodology to the OpenTitan secure element and formally prove the security of its CPU's hardware countermeasure to single bit-flip injections. Besides that, we demonstrate that previously intractable problems, such as analyzing the robustness of OpenTitan running a secure boot process, can now be solved by a co-verification methodology that leverages a k-fault-resistant partitioning. We also report a potential exploitation of the register file vulnerability in two other software use cases. Finally, we provide a security fix for the register file, prove its robustness, and integrate it into the OpenTitan project.
Fichier principal
Vignette du fichier
main.pdf (1.01 Mo) Télécharger le fichier
Origin Publication funded by an institution
Licence

Dates and versions

cea-04706853 , version 1 (23-09-2024)

Licence

Identifiers

Cite

Simon Tollec, Vedad Hadžić, Pascal Nasahl, Mihail Asavoae, Roderick Bloem, et al.. Fault-resistant partitioning of secure CPUs for system Co-verification against faults. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024, 2024 (4), pp.179-204. ⟨10.46586/tches.v2024.i4.179-204⟩. ⟨cea-04706853⟩
50 View
23 Download

Altmetric

Share

More