PUF security IPs bolstered by test suite, PSA certification

Find the Latest SoC Solutions
for... Automotive... IoT... Security... Audio... Video

www.edn.com, Oct. 31, 2024 – 

Internet of Things (IoT) security, one of the biggest challenges for embedded developers, is making way for physical unclonable functions (PUFs) into microcontroller (MCU) and system-on-chip (SoC) designs. And a new design ecosystem is emerging to make PUF implementation simpler and more cost-effective.

PUF, which creates secure, unclonable identities based on manufacturing variations unique to each semiconductor chip, facilitates the essential hardware root-of-trust IP required in security implementations. A cryptographic root-of-trust forms the security foundation of modern hardware infrastructures.

Here, PUF creates random numbers on demand, so there is no need to store cryptographic keys in flash memory. That, in turn, eliminates the danger of side-channel memory attacks revealing the keys. But PUF's technical merits aside, where does it stand as a cost-effective hardware security solution?

Below are two design case studies relating to PUF's certification and testing. They provide anecdotal evidence of how this hardware security technology for IoT and embedded systems is gaining traction.

PUF certification

PUFsecurity, a supplier of PUF-based security solutions and a subsidiary of eMemory, has achieved Level 3 Certification from PSA for its PUF security IP, which it calls a crypto coprocessor. PSA Certified is a safety framework that tests and verifies the reliability of secure boot, secure storage, firmware update, secure boundary, and crypto engines.

PUFsecurity has teamed up with Arm to test its crypto coprocessor IP, subsequently passing the PSA Certified Level 3 RoT Component. Its PUFcc crypto coprocessor IP, incorporated into the Arm Corstone-300 IoT reference design platform, was evaluated under the Security Evaluation Standard for IoT Platforms (SESIP) profile.

The PSA Certified framework–a globally recognized safety standard platform to ensure that the security features of IoT devices are secured during the design phase–guarantees that all connected devices are built upon a root-of-trust. "PSA Certified has become the platform of choice for our partners to swiftly meet regional cybersecurity and regulatory requirements," said Paul Williamson, senior VP and GM for IoT Line of Business at Arm.

The evaluation, carried out by an independent laboratory, used five mandatory and five optional security functional requirements (SFRs). The mandatory requirements verify platform identity, secure platform update, physical attacker resistance, secure communication support, and secure communication enforcement.

On the other hand, the optional requirements include verification of platform instance identity, attestation of platform genuineness, cryptographic operation, cryptographic random number generation, and cryptographic key generation.

click here to read more...

 Back