Скачать или смотреть Protecting Unique Device Secrets for OCP Caliptra with SRAM PUF

Presented by Pim Tuyls (Intrinsic ID)

A root of trust (RoT) is the foundation of a system’s security architecture. It guarantees basic secure operations, like booting and storing confidential data and keys. To help datacenter chipmakers add an RoT to devices, OCP started the open-source project Caliptra, which defines core RoT capabilities that must be implemented in any device in a cloud platform.

The core of Caliptra’s attestation mechanism is based on a Unique Device Secret. This talk explains how SRAM based Physical Unclonable Functions (or PUFs) provide these root secrets in the most secure and flexible way. PUFs extract unique silicon properties or “silicon fingerprints” from chips to validate authenticity of each individual chip and to extract cryptographic keys. PUFs increase system security since the keys they create are never stored in non-volatile memory. Furthermore, they add flexibility because PUFs don’t require key provisioning or on-chip non-volatile memory.