Securing Trusted Execution Environments with PUF Generated Secret Keys

Abstract

Trusted Execution Environments are quickly becoming a preferred method for providing isolation between secure and non-secure execution environments. The protection of these environments, as well as their software structure, is still a primary area of interest and research. The abililty to use a Physically Unclonable Function to generate a unique-per-device AES key provides an excellent mechanism for protection of a Trusted Execution Environment at rest through encryption. These keys can also be used to manage modification of the TEE during execution. In this paper, we present an new methodology for how this protection can be achieved, as well as a framework for the incorporation of Physically Unclonable Functions into cryptographic engines.

A Novel Technique for Ring Oscillator Based PUFs to Enroll Stable Challenge Response Pairs

“…We will demonstrate the effect of α on the reliability of the enrolled CRPs and false rejection rate in Section IV. 0 and the function of response in (3) is equivalent to (5). Thus the circuit shown in Figure 3 works exactly the same as the original RO-PUF shown in Figure 1.…”

A Compact Implementation of AES S‐Box Using Evolutionary Algorithm

“…Therefore, not only performance but also security of circuit should be considered in a crypto-chip design. Security of circuit is improved by using a Physically unclonable function (PUF) to generate a unique-perdevice AES key [13] . In other words, a framework for the incorporation of PUF into cryptographic engines is useful for preventing information from physical attacks [13] .…”

Practical and Privacy-Preserving TEE Migration

“…For instance in [2], authors proposed to protect TEE data using a unique PUF (Physical Unclonable Functions) AES encryption key for each device. In [18], authors proposed a TEE key attestation protocol proving that a TEE key has been generated inside the TEE and never left this TEE.…”