首页|基于指令扩展的RISC-V可配置故障注入检测方法

基于指令扩展的RISC-V可配置故障注入检测方法

扫码查看
针对处理器运行时受到故障攻击出现的数据流错误,提出了一种面向RISC-V处理器微架构的模式可配置故障注入检测方法。该方法基于RISC-V指令集架构,利用其可扩展性添加带模式配置的自定义算术逻辑运算指令和控制与状态寄存器,以软硬件结合的方式同时实现算术逻辑运算和故障注入检测。在软件层面,通过写寄存器指令将配置信息写入自定义的控制与状态寄存器,配置自定义指令的故障注入检测模式,包括信息冗余和时间冗余 2种故障注入检测模式及其参数;在硬件层面,实现了支持模式可配置故障注入检测方法的RISC-V处理器微架构。采用仿真器命令模拟故障注入,验证扩展后的RISC-V处理器的功能正确性与故障注入检测能力。实验结果表明:当信息冗余模式和时间冗余模式的应用频率相同时,模式可配置方法相较于单信息冗余方法,平均故障检测率提高 13。34%,引入 4。4%的平均资源开销;相较于单时间冗余方法,降低了8。24%的平均时间开销,故障检测率降低了 13。33%。所提模式可配置方法可以实现故障检测率和时间开销的折中,适用于不同安全性和性能需求的应用场景。
Configurable fault injection detection method for RISC-V based on instruction extension
For data flow errors caused by fault attacks during processor operation,this paper designed a configurable fault injection detection method based on RISC-V processor microarchitecture.Based on the RISC-V instruction set architecture,this method took advantage of its expandability to add custom arithmetic logic instructions with mode configuration and control and state registers and realized the arithmetic logic operation and fault detection simultaneously by the combination of hardware and software.At the software level,configuration information was written to the customized control and state register by register access instructions to configure the fault detection modes of the customized instructions,including information and temporal redundancy modes and their parameters.At the hardware level,a RISC-V processor microarchitecture supporting configurable fault injection detection was implemented.Finally,the simulator command was used to simulate the fault injection,and the functional correctness and fault injection detection capability of the extended RISC-V processor were verified.The experimental results show that compared to the single information redundancy method,when the information redundancy mode and temporal redundancy mode are applied with the same frequency,the proposed configurable method improves the average fault detection rate by 13.34%with an average resource overhead of 4.4%.Compared to the single temporal redundancy method,it reduces the average time overhead by 8.24%with a 13.33%decrease in fault detection rate.The proposed configurable method can achieve a compromise between fault detection rate and time overhead and be applied in application scenarios with different security and performance requirements.

hardware securitycountermeasure for fault injection attacksfault injection detectionRISC-V processorinstruction extension

刘强、李一可

展开 >

天津大学微电子学院,天津 300072

天津市成像与感知微电子技术重点实验室,天津 300072

硬件安全 故障注入攻击对策 故障注入检测 RISC-V处理器 指令扩展

2025

北京航空航天大学学报
北京航空航天大学

北京航空航天大学学报

北大核心
影响因子:0.617
ISSN:1001-5965
年,卷(期):2025.51(1)