A Dynamic Reseeding DRBG Based on SRAM PUFs

Deterministic random bit generator (DRBG) is an important building block for many cyber security systems. The secrecy of the seeds provides the basis for the security of DRBG. Periodic or dynamic reseeding is a good way of addressing the threat of the DRBG seeds, entropy input and working state being compromised over time. In this paper, the SRAM PUFs noisy cells will be used as the entropy source of DRBG. To this end, the most conservative estimate of min-entropy are tested under different temperature and reseeding times, confirm that the output of the entropy source can meet the requirements of DRBG in dynamic reseeding process. And then, min-entropy of authentication cells are tested in blocks, and discussed how to use it as nonce. Based on the tests above, this paper proposes a DRBG system which can reseed dynamically and monitor the entropy of entropy source in get entropy module online. This DRBG is implemented and tested in FPGA. 2250 times reseeding process random tests (by NIST SP 800-22 test suit) prove that this mechanism can be used in the cryptographic system.

[1]  Ahmad-Reza Sadeghi,et al.  Physically Unclonable Functions (PUFs): Applications, Models, and Future Directions , 2014, Physically Unclonable Functions.

[2]  John Kelsey,et al.  Recommendation for Random Number Generation Using Deterministic Random Bit Generators , 2014 .

[3]  Peter Gutmann,et al.  Secure deletion of data from magnetic and solid-state memory , 1996 .

[4]  Sergei Skorobogatov.  Low temperature data remanence in static RAM , 2002 .

[5]  Helena Handschuh,et al.  Efficient Implementation of True Random Number Generator Based on SRAM PUFs , 2012, Cryptography and Security.

[6]  Elaine B. Barker,et al.  A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications , 2000 .

[7]  Jean-Pierre Seifert,et al.  Cloning Physically Unclonable Functions , 2013, 2013 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST).

[8]  Siva Sai Yerubandi,et al.  Differential Power Analysis , 2002 .

[9]  Elaine B. Barker,et al.  A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications , 2000 .

[10]  Jean-Pierre Seifert,et al.  Invasive PUF Analysis , 2013, 2013 Workshop on Fault Diagnosis and Tolerance in Cryptography.

[11]  Daniel E. Holcomb,et al.  Power-Up SRAM State as an Identifying Fingerprint and Source of True Random Numbers , 2009, IEEE Transactions on Computers.

[12]  Paul C. Kocher,et al.  Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems , 1996, CRYPTO.