Side-channel attacks conducted against electronic systems are relatively simple and inexpensive to execute. An attacker does not need to know specific implementation details of the cryptographic device to perform these attacks and extract keys. As all physical electronic systems routinely leak information, effective side-channel countermeasures such as Rambus’ DPA Resistant Hardware Cores (DPARC) or DPA Software Library (DPASL) should be implemented at the design stage to ensure protection of sensitive keys and data. After the implementation of hardware or software countermeasures, systems should be carefully evaluated with a Test Vector Leakage Assessment (TVLA) platform such as the Rambus DPA Workstation (DPAWS) to confirm the cessation of sensitive side-channel leakage.
Papers
CryptoManager Infrastructure for Semiconductor Manufacturing Data Brief
Download “CryptoManager Infrastructure for Semiconductor Manufacturing Data Brief”
The CryptoManager Infrastructure is a high performance, secure transaction processing and data reporting system designed to securely manage provisioning, device personalization and high value key management throughout a semiconductor’s life cycle. As a critical part of the manufacturing and communications infrastructure, high availability, performance, and security are emphasized in all components of the CryptoManager Infrastructure. Security throughout the system is provided through the use of Hardware Security Modules (HSMs) in every node of the CryptoManager infrastructure. These FIPS 140-2 level 3 compliant HSMs provide tamper resistant secure storage and a secure computation environment for the necessary cryptographic computation and sensitive operations in the CryptoManager Infrastructure.
Vehicle Equipment Secure Authentication with Rambus CryptoFirewall
Download “Vehicle Equipment Secure Authentication with Rambus CryptoFirewall”
Modern vehicles are becoming increasingly complex, driving OEMs to want more modular designs both for integration and for servicing. Being able to rapidly change out components may help with the vehicle servicing, but it also makes it easier for those components to be stolen and resold, creating a safety issue as these parts appear to be genuine but may not function properly.
Hardware Security Modules with CryptoManager
Download “Download “EVITA-Compliant Automotive Hardware Security Modules with CryptoManager Platform Use Case” ”
The rapid growth in connected cars and connected services are fueling consumer and manufacturer concerns over the security of these vehicles. The automotive value chain must ensure that connected cars and the data collected from these vehicles are secure. Automotive-grade Hardware Security Modules (HSMs), a secure enclave providing a Trusted Execution Environment (TEE) within an automotive ECU, are one way to address this need. Download the use case to learn how Rambus provides HSMs to silicon vendors as a part of our CryptoManager solution that are compliant with all three levels of the EVITA standard.
Introduction to Side-Channel Attacks
Side-channel attacks conducted against electronic gear are relatively simple and inexpensive to execute. Such attacks include simple power analysis (SPA) and Differential Power Analysis (DPA). An attacker does not need to know specific implementation details of the cryptographic device to perform these attacks and extract keys. As all physical electronic systems routinely leak information, effective side-channel countermeasures should be implemented at the design stage to ensure protection of sensitive keys and data.
CryptoManager Trusted Services Solution Overview
Download “CryptoManager Trusted Services Solution Overview”
The Rambus CryptoManager Trusted Services supports a variety of root of trust configurations via a hardware core or secure software, providing a scalable and flexible security solution. Our solutions support out-of-the-box secure connectivity, key provisioning and device lifecycle management.
