论文标题
在设计安全且坚固的扫描链中,以保护混淆的逻辑
On Designing Secure and Robust Scan Chain for Protecting Obfuscated Logic
论文作者
论文摘要
在本文中,我们评估了在存在扫描链锁定/混淆的情况下,最先进的安全性设计(DFS)体系结构的安全性和可检验性,该解决方案以前曾提议限制未经授权的访问扫描链。我们讨论了最近发布的先前DFS体系结构中的关键泄漏漏洞。这种泄漏依赖于DFS体系结构中的潜在故障,这些故障可能导致对手在电路中产生泄漏条件。另外,我们证明了最先进的DFS体系结构施加了一些实质性的架构缺点,这些缺点会影响测试流和设计约束。我们提出了一种新的DFS体系结构,用于构建安全的扫描链体系结构,同时解决钥匙泄漏的潜力。所提出的体系结构允许设计师无限制地执行结构测试,从而使不受信任的铸造厂利用扫描链来制造故障测试,而无需访问扫描链。我们提出的解决方案在测试流以及设计标准上构成了微不足道的限制/开销。
In this paper, we assess the security and testability of the state-of-the-art design-for-security (DFS) architectures in the presence of scan-chain locking/obfuscation, a group of solution that has previously proposed to restrict unauthorized access to the scan chain. We discuss the key leakage vulnerability in the recently published prior-art DFS architectures. This leakage relies on the potential glitches in the DFS architecture that could lead the adversary to make a leakage condition in the circuit. Also, we demonstrate that the state-of-the-art DFS architectures impose some substantial architectural drawbacks that moderately affect both test flow and design constraints. We propose a new DFS architecture for building a secure scan chain architecture while addressing the potential of key leakage. The proposed architecture allows the designer to perform the structural test with no limitation, enabling an untrusted foundry to utilize the scan chain for manufacturing fault testing without needing to access the scan chain. Our proposed solution poses negligible limitation/overhead on the test flow, as well as the design criteria.