Address dependent data encryption
Encryption of data within a memory 6 is provided by key generation circuitry 12 which serves to generate a key as a function of the address within the memory 6 being accessed and then encryption circuitry 14 or decryption circuitry 16 which serve respectively to encrypt or decrypt the data as a function of the key that has been generated based upon the address. The encryption and the decryption may be performed using a bitwise XOR operation. The key generation circuitry may have the form of physically unclonable function circuitry, which varies from instance to instance of implementation and that operates to generate the same key for the same address upon both write and read operations within the same instance.
1. A method of manufacturing a plurality of devices, comprising:
manufacturing, in each of the devices,
key generation circuitry to generate a key as a function of an address of a storage location of a memory, and
encryption circuitry to encrypt unencrypted data to form encrypted data as a function of said key;
wherein the key generation circuitry comprises physically unclonable function circuitry to receive said address as a challenge input to said physically unclonable function circuitry, and to output said key as a response output from said physically unclonable function circuitry, the method further comprising:
manufacturing the devices with device-to-device variation of the physically unclonable function circuitry such that the key generation circuitry of a first device is configured to generate a different key to the key generation circuitry of a second device even when the same input data is supplied to the key generation circuitry of the first device and the second device.
2. The method as claimed in claim 1 , wherein the manufacturing is such that the encryption circuitry is configured to encrypt a given data value stored at different storage locations is encrypted using keys generated as a function of different respective addresses.
3. The method as claimed in claim 1 , wherein the manufacturing is such that said encryption circuitry has a configuration to perform one-time-pad encryption of said unencrypted data using said key.
4. The method as claimed in claim 1 , wherein said key has a character width greater than or equal to a character width of said unencrypted data.
5. The method as claimed in claim 1 , wherein the manufacturing is such that said encryption circuitry has a configuration to perform a bitwise XOR of said unencrypted data with said key to form said encrypted data.
6. The method as claimed in claim 1 , wherein the manufacturing is such that said memory has data remanence behaviour whereby data values stored within said memory induce physical changes within said memory to permit reconstruction of data erased from said memory.
7. The method as claimed in claim 6 , wherein said memory is one of:
an SRAM memory;
a DRAM memory; and
a non-volatile memory.
8. A method of manufacturing a plurality of devices, comprising:
manufacturing, in each of the devices, key generation circuitry to generate a key as a function of an address of a storage location of a memory, and decryption circuitry to decrypt encrypted data to form unencrypted data as a function of said key;
wherein the key generation circuitry comprises physically unclonable function circuitry to receive said address as a challenge input to said physically unclonable function circuitry, and to output said key as a response output from said physically unclonable function circuitry, the method further comprising:
manufacturing the devices with device-to-device variation of the physical unclonable function circuitry such that the key generation circuitry of a first device is configured to generate a different key to the key generation circuitry of a second device even when the same input data is supplied to the key generation circuitry of the first device and the second device.
9. The method as claimed in claim 8 , wherein the manufacturing is such that the decryption circuitry is configured to decrypt a given data value stored at different storage locations using keys generated as a function of different respective addresses.
10. The method as claimed in claim 8 , wherein the manufacturing is such that said decryption circuitry has a configuration to perform one-time-pad decryption of said encrypted data using said key.
11. The method as claimed in claim 8 , wherein said key has a character width greater than or equal to a character width of said encrypted data.
12. The method as claimed in claim 8 , wherein the manufacturing is such that said decryption circuitry has a configuration to perform a bitwise XOR of said encrypted data with said key to form said unencrypted data.
13. The method as claimed in claim 8 , wherein said memory has data remanence behaviour whereby data values stored within said memory induce physical changes within said memory to permit reconstruction of data erased from said memory.
14. The method as claimed in claim 13 , wherein said memory is one of:
an SRAM memory;
a DRAM memory; and
a non-volatile memory.
15. The method as claimed in claim 8 , wherein each manufactured device includes encryption circuitry to encrypt said unencrypted data to form said encrypted data as a function of said key.