{"id":24566,"date":"2020-04-20T13:56:54","date_gmt":"2020-04-20T20:56:54","guid":{"rendered":"https:\/\/www.rambus.com\/?page_id=24566"},"modified":"2020-04-21T10:22:58","modified_gmt":"2020-04-21T17:22:58","slug":"anti-tamper-cryptographic-cores","status":"publish","type":"page","link":"https:\/\/www.rambus.com\/security\/dpa-countermeasures\/sca-resistant-cores\/anti-tamper-cryptographic-cores\/","title":{"rendered":"Anti-Tamper Cryptographic Cores"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Home<\/a><\/span><\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Security\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Security<\/span><\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Anti-Tamper Cryptographic Cores<\/h1>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Rambus DPA (Differential Power Analysis) Resistant Cryptographic hardware cores guard against the various side channel attacks that exploit unprotected cryptographic designs. Easily integrated into an ASIC or FPGA design, these cores resist tampering attacks attempting to obtain secret cryptographic key material through Differential Power Analysis (DPA), Differential Electromagnetic Analysis (DEMA) or Fault Injection Attacks (FIA).<\/p>

These cores provide robust anti-tamper resistance across different security and performance levels making them ideal for government and defense applications where attack vectors include side channel attacks like DPA, DEMA and FIA.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\"ContactContact<\/a>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\"DownloadProduct Brief<\/a>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How the Anti-Tamper Cores Work<\/h2>

The DPA Resistant Hardware Cores offer military and government chip and security architects an easy-to-integrate, technology-independent soft-macro security solution with built-in DPA, DEMA, Correlation Template Attack (CPA, CEMA) and FIA resistance for cryptographic functions across a wide array of devices.<\/p>

Rambus DPA Resistant Cores implement DPA countermeasures such as LUT-Masked Dual-rail with Pre-charge Logic (LMDPL) gate level masking and Domain Oriented Model (DOM). DPA and DEMA resistant implementations are available for AES, 3DES, HMAC-SHA-2 and PKE (Public Key Engine implementing RSA and ECC algorithms) accelerators.<\/p>

In addition, the DPA Resistant Cores protect against CPA and CEMA where an attacker has full access to blank, unprovisioned and unprogrammed devices. In such a case, an attacker can profile the power and electromagnetic behavior of the device and create a template. Using such a template allows for easier CPA or CEMA-based attacks.<\/p>

These countermeasures are portable to all modern FPGA or ASIC technologies, allowing reuse across hardware platforms and programs. They deliver the highest level of security while meeting silicon area, performance and power budget targets.<\/p>

All implemented DPA and DEMA countermeasures are extensively validated using the Test Vector Leakage Assessment (TVLA) methodology and are validated to the FIPS 140-2 CAVP standard. Additionally, all cores are validated using the Rambus DPA Workstation.<\/p>

Rambus FIA Resistant Cores implement detection mechanisms that flag bit flips in registers, in finite state machines, on buses and in cryptographic logic. Bit flips may happen unintentionally or may happen as an effect of active FIA techniques, such as light, laser, voltage or clock glitching. The effect of a successful FIA action can influence the operation of a cryptographic hardware core. Examples include influencing finite state machines to skip cryptographic rounds or skip encryption completely, allowing keys to be read out, or disabling, or reducing the effectiveness of, DPA countermeasures. FIA countermeasures are extensively validated using state-of-the-art fault injection modeling.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"DPA\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Included in the Side Channel Attack Resistant product family are a series of cores with varying levels of DPA and FIA resistance. DPA and DEMA resistant implementations are available for AES, 3DES, HMAC-SHA-2 and PKE (Public Key Engine implementing RSA and ECC algorithms) accelerators. AES and 3DES resistance extends to 1 billion traces and beyond, HMAC resistance extends up to 100 million traces, and PKE up to 10 million traces.<\/p>