Integration work

This commit is contained in:
jaseg 2025-10-02 07:09:50 +02:00
parent 84e80a1944
commit 086d45306e
10 changed files with 430 additions and 31 deletions

View file

@ -4,20 +4,6 @@
}
\chaptertitle{Inertial Hardware Security Modules}
\begin{abstract}
In this paper, we introduce a novel countermeasure against physical attacks: Inertial Hardware Security Modules
(IHSMs). Conventional systems have in common that their security requires the crafting of fine sensor structures
that respond to minute manipulations of the monitored security boundary or volume. Our approach is novel in that we
reduce the sensitivity requirement of security meshes and other sensors and increase the complexity of any
manipulations by rotating the security mesh or sensor at high speed---thereby presenting a moving target to an
attacker. Attempts to stop the rotation are easily monitored with commercial MEMS accelerometers and gyroscopes.
Our approach leads to an HSM that can easily be built from off-the-shelf parts by any university electronics lab,
yet offers a level of security that is comparable to commercial HSMs. We have built a proof-of-concept hardware
prototype that demonstrates solutions to the concept's main engineering challenges. As part of this
proof-of-concept, we have found that a system using a coarse security mesh made from commercial printed circuit
boards and an automotive high-g-force accelerometer already provides a useful level of security.
\end{abstract}
\section{Introduction}
While information security technology has matured a great deal in the last half-century, physical security did not keep
@ -55,7 +41,7 @@ quickly become inhospitable to human life (see Section~\ref{sec_swivel_chair_att
or optical attacks are more limited in the first place and can be shielded, we have effectively forced the attacker to
use an ``attack robot''.
This paper contains the following contributions:
This chapter contains the following contributions:
\begin{enumerate}
\item We present the \emph{Inertial HSM} concept. Inertial HSMs enable cost-effective, small-scale production of
highly secure HSMs.
@ -81,7 +67,7 @@ basis, in Section~\ref{sec_ihsm_construction} we will elaborate the principles o
analyze its weaknesses in Section~\ref{sec_attacks}. Based on these results we have built a proof-of-concept hardware
prototype. In Section~\ref{sec_proto} we will elaborate on the design of this prototype. In Section~\ref{sec_accel_meas}
we present our characterization of an automotive MEMS accelerometer IC as a rotation sensor in this proof-of-concept
prototype. We conclude this paper with a general evaluation of our design in Section~\ref{sec_conclusion}.
prototype. We conclude this chapter with a general evaluation of our design in Section~\ref{sec_conclusion}.
\section{Related work}
\label{sec_related_work}
@ -248,9 +234,9 @@ attacker from following the device's motion since doing so would subject them to
Essentially, this limits the approximate maximum size and mass of an attacker under an assumption on tolerable
centrifugal force.
In this paper, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on systems
with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening the
shaft against tampering that any production device would have to tackle.
In this chapter, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on
systems with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening
the shaft against tampering that any production device would have to tackle.
\subsection{Tamper detection mesh construction}
@ -974,7 +960,7 @@ the fly, without stopping the rotor.
\section{Conclusion}
\label{sec_conclusion}
In this paper, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
In this chapter, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
advanced hardware security modules from simple components. We analyzed the concept for its security properties and
highlighted its ability to significantly strengthen otherwise weak tamper detection barriers. We validated our design
by creating a proof-of-concept hardware prototype. In this prototype, we have demonstrated practical solutions to the

View file

@ -518,8 +518,3 @@ approaches can even be integrated into existing HSM designs to provide better se
% FIXME FIXME FIXME chapter overview
\printbibliography[heading=bibintoc]
\end{document}

View file

@ -1,4 +1,4 @@
\chaptertitle{Physical Security in Quantum Key Distribution}
\chaptertitle{Case Study: Physical Security in Quantum Key Distribution}
Quantum Computing promises efficient solutions to a number of widely used cryptographic computational problems. As a
countermeasure, new \emph{post-quantum} cryptosystems have been developed that are not susceptible to known quantum or
@ -33,7 +33,7 @@ requirements of a QKD system.
\begin{figure}
\begin{center}
\includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations_censored.pdf}
\includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations.pdf}
\end{center}
\caption{Photo of our mechanical prototype.
1 - Bracket connecting payload and shaft with hidden spiral conduit for optical fibers.
@ -397,7 +397,7 @@ feedthrough that improves on the simple helical feedthrough we introduced above.
\begin{figure}
\centering
\includegraphics[width=0.45\textwidth]{schema_wire.pdf}
\includegraphics[width=0.6\textwidth]{figures/pic_bracket_routing_small.png}
\includegraphics[width=0.6\textwidth]{pic_bracket_routing_small.png}
\caption{Offset labyrinth mesh schema with fiber layout}
\label{qkd_fig_offset_lab_fiber}
\end{figure}
@ -426,9 +426,9 @@ resulted in a difference below the measurement floor of approximately \qty{0.25}
\begin{figure}
\begin{center}
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small_censored.jpg}
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small.jpg}
\hspace*{5mm}
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small_censored.jpg}
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small.jpg}
\end{center}
\caption{An disassembled view of our optical passthrough mechanical prototype. The fiber is passed through from the
shaft going through the IHSM's primary tamper sensing mesh cage to the outside into the interior of the IHSM through

Binary file not shown.

After

Width:  |  Height:  |  Size: 367 KiB

File diff suppressed because one or more lines are too long

After

Width:  |  Height:  |  Size: 526 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 335 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 260 KiB

View file

@ -1,4 +1,4 @@
\chaptertitle{Multiparty Computation in Scalable Hardware Security Modules}
\chaptertitle{Case Study: Multiparty Computation in Scalable Hardware Security Modules}
\section{Fast MPC and Slow HSMs}

View file

@ -1,4 +1,5 @@
\DeclareSIUnit{\baud}{Bd}
\DeclareSIUnit{\rpm}{rpm}
\DeclarePairedDelimiter{\ceil}{\lceil}{\rceil}
\DeclarePairedDelimiter{\paren}{(}{)}