Trusted Execution Environment side-channel protection method
A method for protecting a cryptographic operation on a device from a side-channel attack, the device comprising a processor operable to execute a rich execution environment (REE) and a trusted execution environment (TEE), the method comprising: receiving, at the TEE, a request to perform a cryptographic operation, wherein the cryptographic operation is divisible into a plurality of chunks; issuing, by the TEE, a command to control a characteristic of a core of the processor on which the TEE is to be executed on upon subsequent invocation of the TEE; verifying, by the TEE upon subsequent invocation of the TEE, that the characteristic of the core on which the TEE is executing on corresponds to the command; and responsive to a positive verification, performing, by the TEE, the cryptographic operation on one or more chunks of the plurality of chunks.
1 . A method for protecting a cryptographic operation on a device from a side-channel attack, the device comprising a processor including processing circuitry configured to execute a rich execution environment (REE) and a trusted execution environment (TEE), the method comprising:
receiving, at the TEE, a request to perform a cryptographic operation, wherein the cryptographic operation is divisible into a plurality of chunks;
issuing, by the TEE, a command to control a characteristic of a core of the processor on which the TEE is to be executed on upon subsequent invocation of the TEE;
verifying, by the TEE upon subsequent invocation of the TEE, that the characteristic of the core on which the TEE is executing on corresponds to the command; and
responsive to a positive verification, performing, by the TEE, the cryptographic operation on one or more chunks of the plurality of chunks,
wherein the command instructs a clock frequency for the core on which the TEE is to be executed on upon subsequent invocation of the TEE, and
wherein the verification comprises measuring a duration of how long the cryptographic operation takes to complete for one or more chunks of the plurality of chunks and checking that the duration is consistent with the TEE executing at the clock frequency.
2 . The method of claim 1 , wherein upon receipt of the request the TEE divides the cryptographic operation into the plurality of chunks.
3 . The method of claim 1 , wherein the one or more chunks comprise two or more chunks and wherein responsive to a positive verification the cryptographic operation is iteratively performed on each chunk of the two or more chunks of the plurality of chunks.
4 . The method of claim 1 , wherein the one or more chunks are a predetermined number of chunks.
5 . The method of claim 1 , wherein subsequent to issuing the command, the TEE suspends execution of the cryptographic operation until subsequent invocation of the TEE.
6 . The method of claim 1 , wherein the processor is a multicore processor and wherein the command instructs that the TEE is to be executed on a specific core of the multicore processor upon subsequent execution of the TEE.
7 . The method of claim 6 , wherein the specific core is chosen at random.
8 . The method of claim 6 , wherein the multicore processor is a heterogeneous multicore processor comprising one or more lower performance cores and one or more higher performance cores and wherein the specific core is chosen to be one of the one or more higher performance cores.
9 . The method of claim 8 , wherein the verification comprises measuring a duration of how long the cryptographic operation takes to complete for one or more chunks of the plurality of chunks and checking that the duration is consistent with the TEE executing on a higher performance core.
10 . The method of claim 9 , wherein the duration is measured using a trusted time source.
11 . The method of claim 9 , wherein the duration is measured by the TEE scheduling two secure interrupts at a temporal separation corresponding to the duration length.
12 . The method of claim 1 , wherein the clock frequency is a minimum clock frequency.
13 . The method of claim 1 , further comprising, responsive to a negative verification, preventing cryptographic operations from being performed, and/or terminating the TEE.
14 . The method of claim 1 , wherein the verifying step is a first verifying step, the method further comprising:
a second verifying step, the second verifying step being performed by the TEE subsequent to the first verifying step and verifying that the characteristic of the core on which the TEE is executing on corresponds to the command; and
responsive to positive verification by the second verification step, performing, by the TEE, the cryptographic operation on one or more chunks of the plurality of chunks.
15 . The method of claim 1 , further comprising, responsive to a negative verification, modifying the cryptographic operation to include errors in its output.
16 . The method of claim 1 , wherein the issuing step is a first issuing step and the command is a first command, the method further comprising:
a second issuing step, the second issuing step being performed subsequent to the first issuing step and issuing a second command, wherein the second command commands a characteristic of the core on which the TEE is to be executed on upon subsequent invocation of the TEE which are different from those commanded by the first command.
17 . A non-transitory, computer-readable storage medium storing a computer program for controlling an electronic device to perform the method of claim 1 .
18 . A device comprising:
a processor including processing circuitry configured to execute a rich execution environment (REE) and a trusted execution environment (TEE);
data storage storing at least one computer program that when executed by the processor controls the processor to protect a cryptographic operation on the device from a side-channel attack by;
receiving, at the TEE, a request to perform a cryptographic operation, wherein the cryptographic operation is divisible into a plurality of chunks;
issuing, by the TEE, a command to control a characteristic of a core of the processor on which the TEE is to be executed on upon subsequent invocation of the TEE;
verifying, by the TEE upon subsequent invocation of the TEE, that the characteristic of the core on which the TEE is executing on corresponds to the command; and
responsive to a positive verification, performing, by the TEE, the cryptographic operation on one or more chunks of the plurality of chunks,
wherein the command instructs a clock frequency for the core on which the TEE is to be executed on upon subsequent invocation of the TEE, and
wherein the verification comprises measuring a duration of how long the cryptographic operation takes to complete for one or more chunks of the plurality of chunks and checking that the duration is consistent with the TEE executing at the clock frequency.