Partial bitstream protection for low-cost FPGAs with physical unclonable function, obfuscation, and dynamic partial self reconfiguration

  • Authors:
  • Sezer GöRen;Ozgur Ozkurt;Abdullah Yildiz;H. Fatih Ugurdag;Rajat S. Chakraborty;Debdeep Mukhopadhyay

  • Affiliations:
  • Dept. of Computer Engineering, Yeditepe University, Istanbul, Turkey;Vestek R&D, Istanbul, Turkey;Dept. of Computer Engineering, Yeditepe University, Istanbul, Turkey;Dept. of Electrical & Electronics Engineering, Ozyegin University, Istanbul, Turkey;Dept. of Computer Science & Engineering, Indian Institute of Technology, Kharagpur, India;Dept. of Computer Science & Engineering, Indian Institute of Technology, Kharagpur, India

  • Venue:
  • Computers and Electrical Engineering
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper proposes a technique based on Physical Unclonable Functions (PUFs), obfuscation, and Dynamic Partial Self Reconfiguration (DPSR) to protect partial FPGA configuration bitstreams from cloning and reverse engineering. With the aid of this technique, we are able to do the equivalent of partial bitstream encryption on low-cost FPGAs, which is only featured on high-end FPGAs. Low-cost FPGAs do not even have built-in support for encrypted (full) bitstreams. Through DPSR, our PUF implementation does not steal real estate from the encrypted design. We also present a new DPSR flow for Xilinx FPGAs, which is difference-based but still allows modular design. It works regardless of the amount of difference between Partial Reconfiguration (PR) modules and is called DPSR-LD, where LD stands for Large-Difference. DPSR-LD is an enabler especially for Spartan-6 FPGA family, as Xilinx currently supports PR on Spartan-6 only through the difference-based flow and only for small differences. Our DPSR-LD also includes a controller that interfaces to the ICAP and can process compressed bitstreams. It is called ICAP+ and occupies only 1% of Spartan-6 slices.