Secure-IC provide Chip Security Protection IP Cores: Cryptographic algorithm IP such as AES, DES, 3-DES, ECC, RSA, SM2, SM3, SM4, SHA1, SHA2, SHA3, HMAC, countermeasure IP such as TRNG, CTR-DRBG RNG, Digital Sensor, Active Shield, PUF, Smart Monitor, Scrambled Bus, Memory Ciphering, Cyber CPU, Secure Clock, Secure Book, Secure Monitor, Secure JTAG, etc.
Active Protection against Intrusive Attacks on ASIC, Anti Intrusive Hardware Modification.
Active Protection against Intrusive Attacks on ASIC, Anti Intrusive Hardware Modification.
1. PROBLEM SOLVED
Attacks against digital circuits can be performed by directly tampering with the device’s internal structure. These attacks are intrusive, and regroup attempts to directly probe or force signals, remove, add or modify features on the chip (metal routing, transistors).
Secure-IC’s Active Shield technology is designed to deter such intrusive attacks by placing a mesh over the sensitive parts of the circuit and actively monitoring the mesh’s integrity. This counter-measure protects the circuit’s features such as metal routing and transistors that are beneath the mesh from undetected access or modification through the front-side, including:
• Wire micro-probing to read or force an equipotential
• Wire cutting (e.g. alarms, entropy source disconnection from a true random number generator…)
• Wire re-routing
• Burnt fuses opening
• ROM Altering
In order to further deter intrusive attacks, the mesh is actively monitored using random cryptographicallygenerated patterns to detect integrity violations. By using this technology, modifying and rerouting the mesh becomes very costly as the attacker has to reroute many wires to avoid detection. In addition, the data travelling through the shield mesh cannot be predicted by the attacker, because it is output by a cryptographic block cipher.
2. GLOBAL OVERVIEW
Active Shield technology relies on several submodules:
• A mesh created using a metal layer for wire routing
• Drivers and receivers used for electrical connection with the mesh
• A cryptographic-grade tamper detection module for monitoring the mesh integrity
Secure-IC provide various security IP cores as following list (keep updating).
| AES | Encryption, against Side-Channel Attacks |
| DES / 3-DES | Encryption, against Side-Channel Attacks |
| RSA | Encryption, against Side-Channel Attacks |
| ECC | Encryption, against Side-Channel Attacks |
| HASH (SHA-1/MD-5) | Encryption, against Side-Channel Attacks |
| SM2 | Encryption, against Side-Channel Attacks |
| SM3 | Encryption, against Side-Channel Attacks |
| SM4 | Encryption, against Side-Channel Attacks |
| TRNG | True Random Number Generator，Digital，against Harmonic EM Attacks |
| PUF | Digital, Anti Cloning/Counterfeiting，100% Unique, Random and Steady ID Generation |
| Digital Sensor | Anti Fault Injection Attacks, All-in-one Fault Injection Detector, Entirely Digital |
| Active Shield | Active Protection against Intrusive Attacks on ASIC, Anti Intrusive Hardware Modification. |
| Scrambled BUS | Encrypted Information to Prevent Probing on BUS, Anti Eavesdroping |
| Memory Ciphering | Memory Protection Against Reverse Engineering and Tampering |
| Secure Clock | Anti Synchronization to prevent efficient SCA and FIA |
| Secure JTAG | Authentication System to Secure the debugging channel on chip, Anti JTAG Violation |
| Secure Boot | Maximum security-enabling root-on-trust, Anti Firmware Tampering |
| Secure Monitor | Maximum security-enabling monitoring, Security policy bypass |
| CyberCPU CPU | CPU-agnostic Cyber Attack Sensor |
Current Products:Security IP: Active Shield
Back
