Preventing Scan Attacks on Secure Circuits Through Scan Chain Encryption

Silva, Mathieu Da; Flottes, Marie-Lise; Natale, Giorgio Di; Rouzeyre, Bruno

doi:10.1109/tcad.2018.2818722

Cited by 48 publications

(35 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Further, ScanSAT can be thwarted by encrypting/decrypting the stimulus and the response by using provably secure techniques [37]; but this requires using dedicated, and thus, costly on-chip cipher blocks. Another approach would be to utilize PUFs as in [38] at the expense of reliability concerns associated with PUFs.…”

Section: Limitations Of Scansatmentioning

confidence: 99%

See 1 more Smart Citation

ScanSAT: Unlocking Static and Dynamic Scan Obfuscation

Alrahis

Yasin

Limaye

et al. 2021

IEEE Trans. Emerg. Topics Comput.

View full text Add to dashboard Cite

While financially advantageous, outsourcing key steps, such as testing, to potentially untrusted Outsourced Assembly and Test (OSAT) companies may pose a risk of compromising on-chip assets. Obfuscation of scan chains is a technique that hides the actual scan data from the untrusted testers; logic inserted between the scan cells, driven by a secret key, hides the transformation functions that map the scan-in stimulus (scan-out response) and the delivered scan pattern (captured response). While static scan obfuscation utilizes the same secret key, and thus, the same secret transformation functions throughout the lifetime of the chip, dynamic scan obfuscation updates the key periodically. In this paper, we propose ScanSAT: an attack that transforms a scan obfuscated circuit to its logic-locked version and applies the Boolean satisfiability (SAT) based attack, thereby extracting the secret key. We implement our attack, apply on representative scan obfuscation techniques, and show that ScanSAT can break both static and dynamic scan obfuscation schemes with 100% success rate. Moreover, ScanSAT is effective even for large key sizes and in the presence of scan compression.

show abstract

Section: Limitations Of Scansatmentioning

confidence: 99%

“…Mode-reset countermeasure [34] ScanSAT-vulnerable BIST [36] , scan on-chip comparison [43]/compaction [44], Secure test wrapper (STW) [45] ScanSAT-resilient Scan interface encryption [37] ScanSAT-resilient…”

Section: Comparison Against Nsaa [24]mentioning

confidence: 99%

ScanSAT: Unlocking Static and Dynamic Scan Obfuscation

Alrahis

Yasin

Limaye

et al. 2021

IEEE Trans. Emerg. Topics Comput.

View full text Add to dashboard Cite

show abstract

“…In this section, we first present a SESC [19] implementation that does not present the vulnerability of the state-of-the-art solutions discussed so far (see Section V.A). After that, we describe a SEBC [23] implementation using lightweight block ciphers. Fig.…”

Section: Scan Encryption Countermeasuresmentioning

confidence: 99%

“…The present SEBC technique has been proposed in [23]. It relies on the test communication encryption with lightweight block ciphers.…”

Section: B Block-based Scan Encryptionmentioning

confidence: 99%

See 1 more Smart Citation

Stream vs block ciphers for scan encryption

Valea

Silva

Flottes

et al. 2019

Microelectronics Journal

Self Cite

View full text Add to dashboard Cite

Security in the Integrated Circuits (IC) domain is an important challenge, especially with regard to the side channel offered by test infrastructures. Test interfaces provide access to the internal states of the IC by means of the scan chains for testing and debugging purposes. In terms of security, however, scan chains are a potential source of leakage that can be exploited by attackers. A countermeasure against such attacks is to encrypt the data flowing through the scan chains. Two types of ciphers can be employed: stream ciphers or block ciphers. Both have pros and cons in terms of performance (footprint, impact on test activity) and security. In this paper, we present two solutions: one exploiting stream ciphers fulfilling security requirements, and another exploiting block ciphers. We draw a comparison between these two scan encryption countermeasures taking into account design cost functions and security properties.

show abstract

Defense against Security Threats with Regard to SoC Life Cycle

Mehta

Popat

2023

Frontiers of Quality Electronic Design (QED)

View full text Add to dashboard Cite

Preventing Scan Attacks on Secure Circuits Through Scan Chain Encryption

Cited by 48 publications

References 21 publications

ScanSAT: Unlocking Static and Dynamic Scan Obfuscation

ScanSAT: Unlocking Static and Dynamic Scan Obfuscation

Stream vs block ciphers for scan encryption

Defense against Security Threats with Regard to SoC Life Cycle

Contact Info

Product

Resources

About