HCrypt: A Novel Concept of Crypto-processor with Secured Key Management

Abstract

The paper presents a novel concept of processor aimed at symmetric-key cryptographic applications. Its architecture is optimized for implementation of common cryptography tasks. The processor has 128-bit separated data and key registers, dedicated instruction set optimized for key generation and management, embedded cipher, and embedded random number generator. From an architectural point of view, the most important characteristic of the proposed crypto-processor is the physical separation of data and key registers and buses, insuring that confidential keys will never leave the system in clear. This way, the processor enables to separate protected and unprotected security zones easily and also achieve complete physical isolation of key management and data zones inside the single FPGA. The first version of the processor implemented in Xilinx Virtex 5 FPGA device achieves the frequency of 160 MHz and it occupies 1343 configurable logic blocks and 21 embedded memory blocks.

Secure Extension of FPGA General Purpose Processors for Symmetric Key Cryptography with Partial Reconfiguration Capabilities

“…One of solutions would be to use an open source GPP and to include the security module in the processor's data path as was the case with the NIOS II processor. This principle can be also applied to a specific-purpose processor such as that published in Gaspar et al [2010].…”

Cryptographic Extension for Soft General-Purpose Processors with Secure Key Management

“…This approach is very practical, because of the short design time and low costs. However, faster and perhaps more secure implementations could be obtained by creating a specific-purpose processor such as the one published in [13] taking advantage of a reduced instruction set dedicated to cryptographic operations. Nevertheless, this custom processor would have to comply with all the above mentioned separation techniques and the principle is thus generalizable.…”

Electromagnetic Transmission of Intellectual Property Data to Protect FPGA Designs

“…Hardware Trojans can use side channels to forward secret information such as a symmetric cipher key [21] from cryptographic hardware implementation [22], [23], even when secure key management is used [24]. Hardware Trojan is also used to cause or amplify side-channel leakage of cryptographic hardware [25]. Note that using side channels to detect a hardware Trojan has also been the subject of several studies [26], [27], [28].…”