diff --git a/chapter-ihsm/chapter.tex b/chapter-ihsm/chapter.tex index c8d5bf5..db0a9f7 100644 --- a/chapter-ihsm/chapter.tex +++ b/chapter-ihsm/chapter.tex @@ -4,20 +4,6 @@ } \chaptertitle{Inertial Hardware Security Modules} -\begin{abstract} - In this paper, we introduce a novel countermeasure against physical attacks: Inertial Hardware Security Modules - (IHSMs). Conventional systems have in common that their security requires the crafting of fine sensor structures - that respond to minute manipulations of the monitored security boundary or volume. Our approach is novel in that we - reduce the sensitivity requirement of security meshes and other sensors and increase the complexity of any - manipulations by rotating the security mesh or sensor at high speed---thereby presenting a moving target to an - attacker. Attempts to stop the rotation are easily monitored with commercial MEMS accelerometers and gyroscopes. - Our approach leads to an HSM that can easily be built from off-the-shelf parts by any university electronics lab, - yet offers a level of security that is comparable to commercial HSMs. We have built a proof-of-concept hardware - prototype that demonstrates solutions to the concept's main engineering challenges. As part of this - proof-of-concept, we have found that a system using a coarse security mesh made from commercial printed circuit - boards and an automotive high-g-force accelerometer already provides a useful level of security. -\end{abstract} - \section{Introduction} While information security technology has matured a great deal in the last half-century, physical security did not keep @@ -55,7 +41,7 @@ quickly become inhospitable to human life (see Section~\ref{sec_swivel_chair_att or optical attacks are more limited in the first place and can be shielded, we have effectively forced the attacker to use an ``attack robot''. -This paper contains the following contributions: +This chapter contains the following contributions: \begin{enumerate} \item We present the \emph{Inertial HSM} concept. Inertial HSMs enable cost-effective, small-scale production of highly secure HSMs. @@ -81,7 +67,7 @@ basis, in Section~\ref{sec_ihsm_construction} we will elaborate the principles o analyze its weaknesses in Section~\ref{sec_attacks}. Based on these results we have built a proof-of-concept hardware prototype. In Section~\ref{sec_proto} we will elaborate on the design of this prototype. In Section~\ref{sec_accel_meas} we present our characterization of an automotive MEMS accelerometer IC as a rotation sensor in this proof-of-concept -prototype. We conclude this paper with a general evaluation of our design in Section~\ref{sec_conclusion}. +prototype. We conclude this chapter with a general evaluation of our design in Section~\ref{sec_conclusion}. \section{Related work} \label{sec_related_work} @@ -248,9 +234,9 @@ attacker from following the device's motion since doing so would subject them to Essentially, this limits the approximate maximum size and mass of an attacker under an assumption on tolerable centrifugal force. -In this paper, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on systems -with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening the -shaft against tampering that any production device would have to tackle. +In this chapter, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on +systems with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening +the shaft against tampering that any production device would have to tackle. \subsection{Tamper detection mesh construction} @@ -974,7 +960,7 @@ the fly, without stopping the rotor. \section{Conclusion} \label{sec_conclusion} -In this paper, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of +In this chapter, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of advanced hardware security modules from simple components. We analyzed the concept for its security properties and highlighted its ability to significantly strengthen otherwise weak tamper detection barriers. We validated our design by creating a proof-of-concept hardware prototype. In this prototype, we have demonstrated practical solutions to the diff --git a/chapter-introduction/chapter.tex b/chapter-introduction/chapter.tex index c39a8d5..e4dcc46 100644 --- a/chapter-introduction/chapter.tex +++ b/chapter-introduction/chapter.tex @@ -518,8 +518,3 @@ approaches can even be integrated into existing HSM designs to provide better se % FIXME FIXME FIXME chapter overview -\printbibliography[heading=bibintoc] - -\end{document} - - diff --git a/chapter-qkd/chapter.tex b/chapter-qkd/chapter.tex index 7011ae1..05d36eb 100644 --- a/chapter-qkd/chapter.tex +++ b/chapter-qkd/chapter.tex @@ -1,4 +1,4 @@ -\chaptertitle{Physical Security in Quantum Key Distribution} +\chaptertitle{Case Study: Physical Security in Quantum Key Distribution} Quantum Computing promises efficient solutions to a number of widely used cryptographic computational problems. As a countermeasure, new \emph{post-quantum} cryptosystems have been developed that are not susceptible to known quantum or @@ -33,7 +33,7 @@ requirements of a QKD system. \begin{figure} \begin{center} - \includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations_censored.pdf} + \includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations.pdf} \end{center} \caption{Photo of our mechanical prototype. 1 - Bracket connecting payload and shaft with hidden spiral conduit for optical fibers. @@ -397,7 +397,7 @@ feedthrough that improves on the simple helical feedthrough we introduced above. \begin{figure} \centering \includegraphics[width=0.45\textwidth]{schema_wire.pdf} - \includegraphics[width=0.6\textwidth]{figures/pic_bracket_routing_small.png} + \includegraphics[width=0.6\textwidth]{pic_bracket_routing_small.png} \caption{Offset labyrinth mesh schema with fiber layout} \label{qkd_fig_offset_lab_fiber} \end{figure} @@ -426,9 +426,9 @@ resulted in a difference below the measurement floor of approximately \qty{0.25} \begin{figure} \begin{center} - \includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small_censored.jpg} + \includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small.jpg} \hspace*{5mm} - \includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small_censored.jpg} + \includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small.jpg} \end{center} \caption{An disassembled view of our optical passthrough mechanical prototype. The fiber is passed through from the shaft going through the IHSM's primary tamper sensing mesh cage to the outside into the interior of the IHSM through diff --git a/chapter-qkd/figures/fiber_passthrough_mech_model__8288_small.jpg b/chapter-qkd/figures/fiber_passthrough_mech_model__8288_small.jpg new file mode 100644 index 0000000..e3b9ca1 Binary files /dev/null and b/chapter-qkd/figures/fiber_passthrough_mech_model__8288_small.jpg differ diff --git a/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.pdf b/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.pdf new file mode 100644 index 0000000..77b5b6d Binary files /dev/null and b/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.pdf differ diff --git a/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.svg b/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.svg new file mode 100644 index 0000000..b7f56a2 --- /dev/null +++ b/chapter-qkd/figures/fiber_passthrough_mech_model__8290_small_annotations.svg @@ -0,0 +1,417 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 6 + + 7 + + 8 + + 9 + + + + 5 + + 4 + + 3 + + 2 + + 1 + + 11 + 10 + + diff --git a/chapter-qkd/figures/fiber_passthrough_mech_model__8292_small.jpg b/chapter-qkd/figures/fiber_passthrough_mech_model__8292_small.jpg new file mode 100644 index 0000000..d461583 Binary files /dev/null and b/chapter-qkd/figures/fiber_passthrough_mech_model__8292_small.jpg differ diff --git a/chapter-qkd/figures/pic_bracket_routing_small.png b/chapter-qkd/figures/pic_bracket_routing_small.png new file mode 100644 index 0000000..439bc15 Binary files /dev/null and b/chapter-qkd/figures/pic_bracket_routing_small.png differ diff --git a/chapter-smpc/chapter.tex b/chapter-smpc/chapter.tex index f33e57a..cc3e258 100644 --- a/chapter-smpc/chapter.tex +++ b/chapter-smpc/chapter.tex @@ -1,4 +1,4 @@ -\chaptertitle{Multiparty Computation in Scalable Hardware Security Modules} +\chaptertitle{Case Study: Multiparty Computation in Scalable Hardware Security Modules} \section{Fast MPC and Slow HSMs} diff --git a/common-defs.tex b/common-defs.tex index 32d5684..ef90eb2 100644 --- a/common-defs.tex +++ b/common-defs.tex @@ -1,4 +1,5 @@ \DeclareSIUnit{\baud}{Bd} +\DeclareSIUnit{\rpm}{rpm} \DeclarePairedDelimiter{\ceil}{\lceil}{\rceil} \DeclarePairedDelimiter{\paren}{(}{)}