Hardening Embedded Networking Devices Against Side-Channel Attacks

摘要

Embedded networking devices are widely used in military and civilian operations. They are often unattended, publicly accessible, and thus vulnerable to physical capture. Tamper-resistant modules are popular for protecting sensitive data such as cryptographic keys. However, recent studies have shown that adversaries can effectively extract sensitive data from tamper-resistant modules by launching semi-invasive side-channel attacks such as power analysis and laser scanning. This paper proposes an effective key management scheme to harden embedded devices against side-channel attacks. This technique leverages the bandwidth limitation of side channels and employs an effective updating mechanism to prevent the keying materials from being exposed. This technique forces attackers to launch much more expensive and invasive attacks to tamper the embedded devices; it has the potential of defeating unknown semi-invasive side-channel attacks. In addition, this paper also shows how to use the proposed scheme to support security protocols such as key establishment and detecting captured devices.