<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of cea-04706853</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T04:54:06+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Fault-resistant partitioning of secure CPUs for system Co-verification against faults</title>
            <author role="aut">
              <persName>
                <forename type="first">Simon</forename>
                <surname>Tollec</surname>
              </persName>
              <idno type="halauthorid">2640222-0</idno>
              <affiliation ref="#struct-1071828"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Vedad</forename>
                <surname>Hadžić</surname>
              </persName>
              <idno type="halauthorid">1981285-0</idno>
              <affiliation ref="#struct-65509"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pascal</forename>
                <surname>Nasahl</surname>
              </persName>
              <idno type="halauthorid">3239334-0</idno>
              <affiliation ref="#struct-65509"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Mihail</forename>
                <surname>Asavoae</surname>
              </persName>
              <idno type="halauthorid">830554-0</idno>
              <affiliation ref="#struct-1071828"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Roderick</forename>
                <surname>Bloem</surname>
              </persName>
              <idno type="halauthorid">1063063-0</idno>
              <affiliation ref="#struct-65509"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Damien</forename>
                <surname>Courousse</surname>
              </persName>
              <idno type="halauthorid">2904797-0</idno>
              <affiliation ref="#struct-1071824"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Karine</forename>
                <surname>Heydemann</surname>
              </persName>
              <idno type="halauthorid">19187-0</idno>
              <affiliation ref="#struct-541712"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Mathieu</forename>
                <surname>Jan</surname>
              </persName>
              <idno type="halauthorid">115236-0</idno>
              <affiliation ref="#struct-1071828"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Stefan</forename>
                <surname>Mangard</surname>
              </persName>
              <idno type="halauthorid">1050536-0</idno>
              <affiliation ref="#struct-65509"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Contributeur MAP</forename>
                <surname>CEA</surname>
              </persName>
              <email type="md5">abb42943d34935171157f3fe9edfc3b1</email>
              <email type="domain">cea.fr</email>
            </editor>
            <funder ref="#projanr-69635"/>
            <funder ref="#projanr-134328"/>
            <funder ref="#projanr-49925"/>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-09-23 22:03:42</date>
              <date type="whenModified">2025-11-21 08:42:36</date>
              <date type="whenReleased">2024-09-25 12:04:27</date>
              <date type="whenProduced">2024-09-05</date>
              <date type="whenEndEmbargoed">2024-09-25</date>
              <ref type="file" target="https://cea.hal.science/cea-04706853v1/document">
                <date notBefore="2024-09-25"/>
              </ref>
              <ref type="file" subtype="publisherPaid" n="1" target="https://cea.hal.science/cea-04706853v1/file/main.pdf" id="file-4706853-4096223">
                <date notBefore="2024-09-25"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="643748">
                <persName>
                  <forename>Contributeur MAP</forename>
                  <surname>CEA</surname>
                </persName>
                <email type="md5">abb42943d34935171157f3fe9edfc3b1</email>
                <email type="domain">cea.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">cea-04706853</idno>
            <idno type="halUri">https://cea.hal.science/cea-04706853</idno>
            <idno type="halBibtex">tollec:cea-04706853</idno>
            <idno type="halRefHtml">&lt;i&gt;IACR Transactions on Cryptographic Hardware and Embedded Systems&lt;/i&gt;, 2024, 2024 (4), pp.179-204. &lt;a target="_blank" href="https://dx.doi.org/10.46586/tches.v2024.i4.179-204"&gt;&amp;#x27E8;10.46586/tches.v2024.i4.179-204&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">IACR Transactions on Cryptographic Hardware and Embedded Systems, 2024, 2024 (4), pp.179-204. &amp;#x27E8;10.46586/tches.v2024.i4.179-204&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-4706853-4096223"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="UGA">HAL Grenoble Alpes</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="LIP6" corresp="SORBONNE-UNIVERSITE">Laboratoire d'Informatique de Paris 6</idno>
            <idno type="stamp" n="DRT" corresp="CEA">Direction de la recherche technologique</idno>
            <idno type="stamp" n="CEA-UPSAY" corresp="CEA">CEA - Université Paris-Saclay</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="LIST" corresp="CEA">Laboratoire d'Intégration des Systèmes et des Technologies</idno>
            <idno type="stamp" n="SORBONNE-UNIVERSITE">Sorbonne Université</idno>
            <idno type="stamp" n="SORBONNE-UNIV" corresp="SORBONNE-UNIVERSITE">Sorbonne Université 01/01/2018</idno>
            <idno type="stamp" n="SU-SCIENCES" corresp="SORBONNE-UNIVERSITE">Faculté des Sciences de Sorbonne Université</idno>
            <idno type="stamp" n="UNIVERSITE-PARIS-SACLAY" corresp="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="UGA-EPE">Université Grenoble Alpes [2020-*]</idno>
            <idno type="stamp" n="SU-TI">Sorbonne Université - Texte Intégral</idno>
            <idno type="stamp" n="ANR">ANR</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
            <idno type="stamp" n="GS-SPORT-HUMAN-MOVEMENT">Graduate School Sport, Mouvement, Facteurs Humains</idno>
            <idno type="stamp" n="DSCIN" corresp="DRT">Département Systèmes et Circuits Intégrés Numériques</idno>
            <idno type="stamp" n="ALLIANCE-SU"> Alliance Sorbonne Université</idno>
            <idno type="stamp" n="MAP-CEA" corresp="CEA">MAP-contributeur</idno>
            <idno type="stamp" n="CYBERSCURITE">PEPR Cybersécurité</idno>
            <idno type="stamp" n="PSACLAY-TEST">Université Paris-Saclay - Collection pour tests</idno>
            <idno type="stamp" n="SUPRA_MATHS_INFO">Mathématiques + Informatique</idno>
            <idno type="stamp" n="ARSENE">ARSENE</idno>
            <idno type="stamp" n="TEST-UGA">TEST-UGA</idno>
            <idno type="stamp" n="ANR_QUANTIQUE">ANR QUANTIQUE</idno>
            <idno type="stamp" n="ANR_QUANTIQUE_1" corresp="ANR_QUANTIQUE">ANR_QUANTIQUE_1</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="0">No</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Fault-resistant partitioning of secure CPUs for system Co-verification against faults</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Simon</forename>
                    <surname>Tollec</surname>
                  </persName>
                  <idno type="halauthorid">2640222-0</idno>
                  <affiliation ref="#struct-1071828"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Vedad</forename>
                    <surname>Hadžić</surname>
                  </persName>
                  <idno type="halauthorid">1981285-0</idno>
                  <affiliation ref="#struct-65509"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pascal</forename>
                    <surname>Nasahl</surname>
                  </persName>
                  <idno type="halauthorid">3239334-0</idno>
                  <affiliation ref="#struct-65509"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Mihail</forename>
                    <surname>Asavoae</surname>
                  </persName>
                  <idno type="halauthorid">830554-0</idno>
                  <affiliation ref="#struct-1071828"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Roderick</forename>
                    <surname>Bloem</surname>
                  </persName>
                  <idno type="halauthorid">1063063-0</idno>
                  <affiliation ref="#struct-65509"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Damien</forename>
                    <surname>Courousse</surname>
                  </persName>
                  <idno type="halauthorid">2904797-0</idno>
                  <affiliation ref="#struct-1071824"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Karine</forename>
                    <surname>Heydemann</surname>
                  </persName>
                  <idno type="halauthorid">19187-0</idno>
                  <affiliation ref="#struct-541712"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Mathieu</forename>
                    <surname>Jan</surname>
                  </persName>
                  <idno type="halauthorid">115236-0</idno>
                  <affiliation ref="#struct-1071828"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Stefan</forename>
                    <surname>Mangard</surname>
                  </persName>
                  <idno type="halauthorid">1050536-0</idno>
                  <affiliation ref="#struct-65509"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">130471</idno>
                <idno type="issn">2569-2925</idno>
                <title level="j">IACR Transactions on Cryptographic Hardware and Embedded Systems</title>
                <imprint>
                  <publisher>IACR</publisher>
                  <biblScope unit="volume">2024</biblScope>
                  <biblScope unit="issue">4</biblScope>
                  <biblScope unit="pp">179-204</biblScope>
                  <date type="datePub">2024-09-05</date>
                </imprint>
              </monogr>
              <idno type="doi">10.46586/tches.v2024.i4.179-204</idno>
              <ref type="publisher">https://tches.iacr.org/index.php/TCHES/article/view/11788</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-ar">Computer Science [cs]/Hardware Architecture [cs.AR]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-es">Computer Science [cs]/Embedded Systems</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Fault injection attacks are a serious threat to system security, enabling attackers to bypass protection mechanisms or access sensitive information.To evaluate the robustness of CPU-based systems against these attacks, it is essential to analyze the consequences of the fault propagation resulting from the complex interplay between the software and the processor.However, current formal methodologies combining hardware and software face scalability issues due to the monolithic approach used.To address this challenge, this work formalizes the k-fault-resistant partitioning notion to solve the fault propagation problem when assessing redundancy-based hardware countermeasures in a first step.Proven security guarantees can then reduce the remaining hardware attack surface when introducing the software in a second step.First, we validate our approach against previous work by reproducing known results on cryptographic circuits.In particular, we outperform state-of-the-art tools for evaluating AES under a three-fault-injection attack.Then, we apply our methodology to the OpenTitan secure element and formally prove the security of its CPU's hardware countermeasure to single bit-flip injections.Besides that, we demonstrate that previously intractable problems, such as analyzing the robustness of OpenTitan running a secure boot process, can now be solved by a co-verification methodology that leverages a k-fault-resistant partitioning.We also report a potential exploitation of the register file vulnerability in two other software use cases.Finally, we provide a security fix for the register file, prove its robustness, and integrate it into the OpenTitan project.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-1071828" status="VALID">
          <orgName>Laboratoire Environnement de Conception &amp; Architecture</orgName>
          <orgName type="acronym">LECA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>CEA-Palaiseau</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-419361" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-1071779" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="indirect"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-65509" status="VALID">
          <idno type="ROR">https://ror.org/00d7xrm67</idno>
          <orgName>Graz University of Technology [Graz]</orgName>
          <orgName type="acronym">TU Graz</orgName>
          <desc>
            <address>
              <addrLine>Rechbauerstr. 12,  8010 Graz</addrLine>
              <country key="AT"/>
            </address>
            <ref type="url">https://www.tugraz.at/en/home/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-1071824" status="VALID">
          <orgName>Laboratoire Fonctions Innovantes pour circuits Mixtes</orgName>
          <orgName type="acronym">LFIM</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>CEA-Grenoble</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-1042703" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-1071779" type="direct"/>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="indirect"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-541712" status="VALID">
          <orgName>Architecture et Logiciels pour Systèmes Embarqués sur Puce</orgName>
          <orgName type="acronym">ALSOC</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-541703" type="direct"/>
            <relation active="#struct-413221" type="indirect"/>
            <relation name="UMR7606" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-419361" status="VALID">
          <idno type="IdRef">241345251</idno>
          <idno type="ROR">https://ror.org/03xjwb503</idno>
          <orgName>Université Paris-Saclay</orgName>
          <desc>
            <address>
              <addrLine>Bâtiment Bréguet, 3 Rue Joliot Curie 2e ét, 91190 Gif-sur-Yvette</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.universite-paris-saclay.fr/fr</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-1071779" status="VALID">
          <idno type="RNSR">202123738R</idno>
          <orgName>Département Systèmes et Circuits Intégrés Numériques</orgName>
          <orgName type="acronym">DSCIN (CEA, LIST)</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DRT/LIST/DSCIN" active="#struct-40217" type="direct"/>
            <relation name="DRT/LIST" active="#struct-440043" type="indirect"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-40217" status="VALID">
          <idno type="IdRef">156836882</idno>
          <idno type="ISNI">0000 0004 0405 1788</idno>
          <idno type="RNSR">200118591H</idno>
          <idno type="ROR">https://ror.org/000dbcc61</idno>
          <idno type="Wikidata">Q30299467</idno>
          <orgName>Laboratoire d'Intégration des Systèmes et des Technologies</orgName>
          <orgName type="acronym">LIST (CEA)</orgName>
          <desc>
            <address>
              <addrLine>DRT/LISTNano-INNOVAvenue de la Vauve91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-list.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DRT/LIST" active="#struct-440043" type="direct"/>
            <relation name="DRT" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-440043" status="VALID">
          <idno type="IdRef">067087930</idno>
          <idno type="ISNI">0000000121157881</idno>
          <idno type="RNSR">199018589D</idno>
          <idno type="ROR">https://ror.org/02ggzyd20</idno>
          <idno type="Wikidata">Q30299418</idno>
          <orgName>Direction de Recherche Technologique (CEA)</orgName>
          <orgName type="acronym">DRT (CEA)</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.drt-cea.com/</ref>
          </desc>
          <listRelation>
            <relation name="DRT" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-1042703" status="VALID">
          <idno type="IdRef">240648315</idno>
          <idno type="ROR">https://ror.org/02rx3b187</idno>
          <orgName>Université Grenoble Alpes</orgName>
          <orgName type="acronym">UGA</orgName>
          <date type="start">2020-01-01</date>
          <desc>
            <address>
              <addrLine>Adresse CS 40700 - 38058 Grenoble cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-grenoble-alpes.fr</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-541703" status="VALID">
          <idno type="IdRef">13558292X</idno>
          <idno type="RNSR">199712651U</idno>
          <idno type="ROR">https://ror.org/05krcen59</idno>
          <orgName>LIP6</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>4 Place JUSSIEU 75252 PARIS CEDEX 05</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.lip6.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-413221" type="direct"/>
            <relation name="UMR7606" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-413221" status="VALID">
          <idno type="IdRef">221333754</idno>
          <idno type="ROR">https://ror.org/02en5vm52</idno>
          <orgName>Sorbonne Université</orgName>
          <orgName type="acronym">SU</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>21 rue de l’École de médecine - 75006 Paris</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.sorbonne-universite.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
      <listOrg type="projects">
        <org type="anrProject" xml:id="projanr-69635" status="VALID">
          <idno type="anr">ANR-22-PECY-0004</idno>
          <orgName>ARSENE</orgName>
          <desc>ARchitectures SEcurisées pour le Numérique Embarqué</desc>
          <date type="start">2022</date>
        </org>
        <org type="anrProject" xml:id="projanr-134328" status="VALID">
          <idno type="anr">ANR-23-CE25-0016</idno>
          <orgName>LOTR</orgName>
          <desc>Lord of the RISCs</desc>
          <date type="start">2023</date>
        </org>
        <org type="anrProject" xml:id="projanr-49925" status="VALID">
          <idno type="anr">ANR-10-AIRT-0005</idno>
          <orgName>NANOELEC</orgName>
          <desc>NANOELEC</desc>
          <date type="start">2010</date>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>