System and methods for fault injection attack protection
Aspects of the present disclosure involve systems, methods, apparatus, and computer-readable media for mitigating laser-based fault injection attacks against one or more processing devices. Techniques may include generating a corresponding representation of at least one of data or a component of a processing device, locating the corresponding representation on a die of the processing device adjacent to a location on the die of at least one of the data or the component, and executing, based on a determination that the corresponding representation is different than at least one of the data or the component of the processing device, a mitigation procedure. One example may include hashing, using a secure hashing function, security data to generate integrity data corresponding to the security data and storing the security data and the integrity data in adjacent memory locations in a memory device.
1. A method of fault injection attack mitigation, the method comprising:
generating a corresponding representation of at least one of data or a component of a processing device;
locating the corresponding representation on a die of the processing device adjacent to a location on the die of at least one of the data or the component of the processing device within a predetermined distance, the predetermined distance less than a diameter of a laser spot of a laser fault injection device to mitigate a fault injection attack from the laser fault injection device; and
executing, based on a determination that the corresponding representation is different than at least one of the data or the component of the processing device, a mitigation procedure by the processing device.
2. The method of claim 1 , wherein at least one of the data or the component of the processing device comprises security data and wherein generating the corresponding representation comprises:
hashing, using a secure hashing function, the security data to generate integrity data corresponding to the security data, the corresponding representation comprising the integrity data; and
storing the security data and the integrity data in a memory device in communication with the processing device.
3. The method of claim 2 , wherein storing the security data and the integrity data comprises interleaving at least a portion of the security data with at least a portion of the integrity data.
4. The method of claim 2 , wherein storing the security data and the integrity data comprises storing the security data in a first portion of the memory device and the integrity data in a second portion of the memory device.
5. The method of claim 4 , wherein the second portion of the memory device is adjacent to the first portion of the memory device.
6. The method of claim 5 , further comprising:
obtaining the security data from the memory device;
hashing, using the secure hashing function, the obtained security data; and
comparing the hashed obtained security data to the integrity data.
7. The method of claim 1 , wherein at least one of the data or the component of the processing device comprises performance-dependent data and wherein generating the corresponding representation comprises:
generating, using a parity-generating function, integrity data corresponding to the performance-dependent data, the corresponding representation comprising the integrity data.
8. The method of claim 7 , wherein the parity-generating function comprises an error correction code function.
9. The method of claim 8 , further comprising:
storing the performance-dependent data and the integrity data in a same memory array of a memory device in communication with the processing device.
10. The method of claim 1 , wherein at least one of the data or the component of the processing device comprises a logic block of the processing device, the logic block comprising a plurality of interconnected logic gates, and the corresponding representation comprises a redundant logic block comprising at least a portion of the plurality of interconnected logic gates.
11. The method of claim 10 , wherein locating the corresponding representation on the die of the processing device includes locating the redundant logic block on the die, and wherein locating the redundant logic block on the die comprises interleaving at least one logic gate of the redundant logic block with at least a portion of the plurality of interconnected logic gates.
12. A processing device, comprising:
a non-transitory computer-readable medium encoded with instructions, which when executed by the processing device, causes the processing device to:
hash, using a secure hashing function, security data to generate integrity data corresponding to the security data;
store the security data and the integrity data in a memory device, a location of the integrity data on a die of the processing device within a predetermined distance to a location of the security data, the predetermined distance less than a diameter of a laser spot of a laser fault injection device to mitigate a fault injection attack from the laser fault injection device;
obtain, based on a request, the security data from the memory device;
hash, using the secure hashing function, the obtained security data to generate hashed security data; and
execute, based on a comparison of the hashed security data to the integrity data, a mitigation procedure.
13. The processing device of claim 12 , wherein storing the security data and the integrity data comprises interleaving at least a portion of the security data with at least a portion of the integrity data in the memory device.
14. The processing device of claim 13 , wherein storing the security data and the integrity data comprises storing the security data in a first portion of the memory device and the integrity data in a second portion of the memory device.
15. The processing device of claim 14 , wherein the second portion of the memory device is adjacent to the first portion of the memory device.
16. The processing device of claim 12 , wherein the processing device is a central processing unit.
17. A non-transitory computer-readable medium storing instructions that, when executed by a processing device, cause the processing device to: hash, using a secure hashing function, security data to generate integrity data corresponding to the security data; store the security data and the integrity data in a memory device, a location of the integrity data on a die of the processing device within a predetermined distance to a location of the security data, the predetermined distance less than a diameter of a laser spot of a laser fault injection device to mitigate a fault injection attack from the laser fault injection device; obtain, based on a request, the security data from the memory device; hash, using the secure hashing function, the obtained security data; and execute, based on a comparison of the hashed obtained security data to the integrity data, a mitigation procedure.
18. The non-transitory computer-readable medium of claim 17 , wherein storing the security data and the integrity data comprises interleaving at least a portion of the security data with at least a portion of the integrity data in the memory device.