面向可重构密码芯片的侧信道脆弱性定位与安全防护技术研究

Cryptographic chips play an important role in cyber and information security applications, however, attackers always try to leverage various attack methods to obtain sensitive information from the chips, thus threatening the security of the entire system. Cryptographic chips have different post-silicon implementations, where reconfigurable cryptographic engines act as a frontier and important development direction of new cryptographic chips. The reconfigurable cryptographic engines combine the functional flexibility driven by the instruction stream and the high energy efficiency driven by the data stream together, where better performance between the key indicators of the chip, such as performance, power consumption, and functional flexibility, can be achieved. At present, the design focus of reconfigurable cryptographic engines is still to innovate the hardware architecture and optimize performance and flexibility. However, the research on the side-channel security protection technology of reconfigurable cipher chips is seriously insufficient, leading to potential side-channel vulnerabilities. Therefore, in this project, we will carry out side-channel vulnerability identification, analysis, and mitigation, and on the premise of not affecting the energy efficiency of existing computing as much as possible, focus on breaking through the side-channel attack defense for reconfigurable cipher chips Technology, complete the development of dynamic reconfiguration strategies with high side-channel security and low additional overheads to improve the security level of existing reconfigurable cryptographic engines and enhance the level of "security and credibility" of key core information systems.

密码芯片在信息安全应用中起到关键性作用，攻击者总是试图利用各种攻击手段获取其中的密码等敏感信息，进而威胁整个信息系统的安全。密码芯片有不同的硅后实现形式，可重构密码芯片是一种将指令流驱动的功能灵活性和数据流驱动的高能量效率结合在一起的计算方式，在性能、功耗和功能灵活性等芯片的关键指标之间具有更好的平衡，是未来新型密码芯片的一个前沿和重要发展方向。目前，可重构密码芯片的设计重点是对于硬件架构进行创新以及对于性能和灵活性等进行优化，而在其侧信道安全防护技术的研究方面严重不足，存在侧信道脆弱性问题。因此，本项目拟开展针对现有可重构密码芯片的侧信道脆弱性分析与定位技术研究，在尽量不影响现有计算能效的前提下，重点突破面向可重构密码芯片的侧信道攻击防御技术，完成高侧信道安全、低额外资源开销的动态重构策略开发，以提高现有可重构密码芯片的安全等级、提升关键核心信息系统的“安全可信”水平。

密码芯片在信息安全应用中起到关键性作用，密码芯片有不同的硅后实现形式，可重构密码芯片是一种将指令流驱动的功能灵活性和数据流驱动的高能量效率结合在一起的计算方式，在性能、功耗和功能灵活性等芯片的关键指标之间具有更好的平衡，是未来新型密码芯片的一个前沿和重要发展方向。项目负责人在项目研发的过程中，针对现有可重构密码芯片的侧信道脆弱性分析与定位技术开展研究，在尽量不影响现有计算能效的前提下，重点突破了面向可重构密码芯片的侧信道攻击防御技术，完成了高侧信道安全、低额外资源开销的动态重构策略开发。形成了安全评测EDA中间件，为后续应用打好基础！