Slide 1: Security Enclave Based on RISC-V
SECURITY ENCLAVE Based on RISC-V Presented by Christopher Beaver Christopher.Beaver@silexinsight.com 14th November 2019
Slide 2: Introduction: The growing Internet of Things
Introduction The growing Internet of Things ▪ Ever-increasing number of connected devices ▪ Many applications - Automotive / Transport - Healthcare - Smart Cities - Home automation - Industrial ▪ Gartner identifies “trusted hardware” as part of the Top 10 Internet of Things technologies
Slide 3: The risks of IoT
The risks of IoT Effect on businesses ▪ Increasing number of devices and applications means more attack surfaces ▪ A business’ reputation can be damaged through bad publicity ▪ Intellectual property may be copied, leaked or compromised - Loss of competitive advantage
Slide 4: Securing your device: Basics
Securing your device Basics ▪ The required level of security depends on many factors - Physical access? - Public network – possible to intercept communication? - Can a single device compromise the entire network? - Safety/financial impacts? - Who is your attacker? ▪ Risk assessment - threat model ▪
Slide 5: Securing your device: Trust
Securing your device Trust ▪ Securing IoT devices is all about trust - Firmware running on your device? - Identity of other connected devices? - Secure communication channel? - Privacy - Authenticity - Integrity
Slide 6: Securing your device: Product lifetime
Securing your device Product lifetime ▪ What is the lifetime of your product? ▪ Generally speaking - Consumer electronics – few years - Industrial, automotive, infrastructure – up to 10s of years ▪ Software has bugs and attacks evolve over the product lifecycle - Firmware updates in the field requir
Slide 7: Securing your device: Summary
Securing your device Summary ▪ No one single magic solution ▪ 100% security does not exist ▪ Is not only about encryption ▪ Security must be defined at architecture phase ▪ Security is a hard requirement in IoT
Slide 8: Silex Insight eSecure architecture diagram
+ tt SILEX INSIGHT Ev eSecure - Secure Storage, Other Peripherals. - Tap Controller
Slide 9: eSecure IP: Overview
eSecure IP Overview ▪ Security Enclave/Root-of- trust/HSM ▪ Hardware isolation between application and secure module ▪ Flexible and scalable solution using Andes N22 processor
Slide 10: eSecure IP: Key features
eSecure IP Key features Secure Key Storage • Secure Key provisioning • No access to secret by host processor(s) Device authentication • Unique Key per device Secure boot • Software and firmware authentication/decryption • Update in the field
Slide 11: eSecure IP: Key features
eSecure IP Key features Efficient offloading for secure communication (TLS/DTLS, VPN) Side channel attack protection • Anti-tampering mechanism • Erasing of secrets Logging of tampering Secure debugging Secure data storage
Slide 12: eSecure IP: Crypto offloading
eSecure IP Crypto offloading ▪ Wide range of cryptographic algorithms available - Asymmetric: RSA/ECC/ECDSA/Curve25519/EdDSA/SRP/J-PAKE .. - Symmetric: AES/SHA/ChaCha20-Poly1305/ARIA… - TRNG + DRBG (NIST 800-90A/B/C) ▪ Algorithms specific to the Chinese market also available - Asymmetric: SM2/SM9 -
Slide 13: eSecure IP: Certification
eSecure IP Certification ▪ NIST CAVP certificate available for all relevant algorithms - https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31138 ▪ Up to FIPS 140-2 level 3 certification achieved ▪ PCI DSS certification for payment card industry ▪ OSCCA cert
Slide 14: Conclusions
Conclusions ▪ Security required for IoT– Think about it at architecture definition level ▪ No system 100% secure – Try to discourage the attackers ▪ Lifecycle of your products – Needs capability to do SW update ▪ Trade-off – cost, power, performance, security
Slide 15: This is Silex Insight
This is Silex Insight What we do: IP provider for security and video in embedded systems ▪ Headquarters in Brussels, Belgium ▪ Global presence ▪ Worldwide customer base ▪ Founded in 1991 – 28 years experience ▪ Silex Insight = Silicon experts with know-how ▪ 45 employees 16
Slide 16: www.silexinsight.com
www.silexinsight.com www.silexinsight.com.cn