"Formalism to Assess the Entropy and Reliability of Loop - - PowerPoint PPT Presentation

formalism to assess the
SMART_READER_LITE
LIVE PREVIEW

"Formalism to Assess the Entropy and Reliability of Loop - - PowerPoint PPT Presentation

CRYPTARCHI 2017 Smolenice "Formalism to Assess the Entropy and Reliability of Loop PUF" Jean-Luc Danger 1,2 Olivier Rioul 1 Sylvain Guilley 1,2 Alexander Schaub 1 1 Tlcom ParisTech, LTCI, UPSAY 2 Secure-IC Page 1


slide-1
SLIDE 1

Jean-Luc Danger CRYPTARCHI 2017

Page 1

Télécom-ParisTech

CRYPTARCHI 2017 Smolenice "Formalism to Assess the Entropy and Reliability of Loop PUF"

Jean-Luc Danger1,2 Olivier Rioul1 Sylvain Guilley1,2 Alexander Schaub1

1 Télécom ParisTech, LTCI, UPSAY 2 Secure-IC

slide-2
SLIDE 2

Jean-Luc Danger CRYPTARCHI 2017

Page 2

Télécom-ParisTech

Outline

 Loop PUF architecture  Entropy assessment  Reliability assessment  Results on real silicon  Conclusions

* Depends on algorithm, not implementation

slide-3
SLIDE 3

Jean-Luc Danger CRYPTARCHI 2017

Page 3

Télécom-ParisTech

Loop PUF architecture

slide-4
SLIDE 4

Jean-Luc Danger CRYPTARCHI 2017

Page 4

Télécom-ParisTech

Operating Mode

The information for each challenge is D Sign = identifier Module = reliability

slide-5
SLIDE 5

Jean-Luc Danger CRYPTARCHI 2017

Page 5

Télécom-ParisTech

Balance of Delay Elements in ASIC

duplication

slide-6
SLIDE 6

Jean-Luc Danger CRYPTARCHI 2017

Page 6

Télécom-ParisTech

Balance of Delay Elements in FPGA

Cluster 1 Cluster N Cluster 2 duplication N duplications

slide-7
SLIDE 7

Jean-Luc Danger CRYPTARCHI 2017

Page 7

Télécom-ParisTech

Delay measurement

slide-8
SLIDE 8

Jean-Luc Danger CRYPTARCHI 2017

Page 8

Télécom-ParisTech

Entropy

 For a n-delay LPUF

  • If challenge = Hadamard codeword of n bits => Entropy = n *

* Rioul, O., Solé, P ., Guilley, S., & Danger, J. L. (2016, July). On the Entropy of Physically Unclonable

  • Functions. In Information Theory (ISIT), 2016 IEEE International Symposium on (pp. 2928-2932).

IEEE.

slide-9
SLIDE 9

Jean-Luc Danger CRYPTARCHI 2017

Page 9

Télécom-ParisTech

Entropy with more than n challenges

slide-10
SLIDE 10

Jean-Luc Danger CRYPTARCHI 2017

Page 10

Télécom-ParisTech

LPUF reliability

With

slide-11
SLIDE 11

Jean-Luc Danger CRYPTARCHI 2017

Page 11

Télécom-ParisTech

LPUF reliability

The Reliability is not enough ~10-3 even with high SNR => Needs of secure sketch : Error Correcting codes and Helper data

slide-12
SLIDE 12

Jean-Luc Danger CRYPTARCHI 2017

Page 12

Télécom-ParisTech

Reliability enhancement by delay knowledge

The bits in the unreliable area "B" are discarded The helper data indicates the unreliable bits

Bit unreliable  |delay| < Th Th= Ws

slide-13
SLIDE 13

Jean-Luc Danger CRYPTARCHI 2017

Page 13

Télécom-ParisTech

New BER with filtered bits

slide-14
SLIDE 14

Jean-Luc Danger CRYPTARCHI 2017

Page 14

Télécom-ParisTech

Entropy after bit filtering

Number of delay elements to reach n bits of entropy with Hadamard codes

slide-15
SLIDE 15

Jean-Luc Danger CRYPTARCHI 2017

Page 15

Télécom-ParisTech

Results on real silicon

 n=54 cells, 65nm technology

slide-16
SLIDE 16

Jean-Luc Danger CRYPTARCHI 2017

Page 16

Télécom-ParisTech

i..i.d. check

No correlation between the 64 delay elements => entropy ~ 64 with Hadamard codes Correlation matrix on the 64 elements of the 49 PUFs

slide-17
SLIDE 17

Jean-Luc Danger CRYPTARCHI 2017

Page 17

Télécom-ParisTech

Impact of the measurement window on the SNR

SNR ~60 for log2L=14

slide-18
SLIDE 18

Jean-Luc Danger CRYPTARCHI 2017

Page 18

Télécom-ParisTech

Entropy

slide-19
SLIDE 19

Jean-Luc Danger CRYPTARCHI 2017

Page 19

Télécom-ParisTech

Reliability: BER results

slide-20
SLIDE 20

Jean-Luc Danger CRYPTARCHI 2017

Page 20

Télécom-ParisTech

Conclusions

 The Entropy of the Loop PUF can be formally obtained if Hadamard codes are used:

  • Entropy = number of delay elements n
  • The entropy increases non linearly if M > n

 The reliability of the Loop PUF is low (BER ~10-3)  It can be easily improved by exploiting the delay knowledge

  • The unreliable bits are discarded
  • BER can go down 10-9
  • But more bits are needed to reach the same entropy

N=Number of challenges

slide-21
SLIDE 21

Jean-Luc Danger CRYPTARCHI 2017

Page 21

Télécom-ParisTech

THANK YOU FOR YOUR ATTENTION