SV-PUF Instructions for Trusted Domain Isolation
Solution Overview
Problem
Conventional systems for providing isolation in virtualized environments do not effectively exclude cloud service provider (CSP) software from the trusted compute base (TCB) and often increase the TCB significantly, failing to provide secure isolation between customer workloads and CSP software, while also being limited in scalability and security against hardware attacks.
Innovation Solution
The implementation of a Trusted Domain (TD) architecture with Software-Visible Physical Unclonable Function (SV-PUF) instructions that generate and use platform-unique keys for encrypting and protecting secrets, combined with Trusted Domain Extensions (TDX) for memory encryption and integrity, allows for secure operation of TDs, reducing the TCB and enhancing isolation between TD workloads and CSP software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional isolation systems are used in virtualized environments, then isolation between customer workloads and CSP software is attempted, but the TCB is significantly increased and CSP software cannot be effectively excluded from the TCB
Solution Approach 1:
The system segments the TCB into distinct domains: a minimal TCB for the hypervisor and a separate trusted domain for customer workloads. Each domain has its own isolation boundaries and trust assumptions, allowing CSP software to operate outside the customer workload TCB while maintaining security isolation through architectural separation of trust zones.
2Adaptability or versatility
If PUF-generated entropy is used for cryptographic keys, then platform-unique unclonable keys are generated, but the keys must be protected across reboots and platform changes
Solution Approach 1:
The system performs preliminary actions by measuring PUF characteristics during an initial calibration phase and storing the relationship between challenges and responses in a lookup table. This pre-computed mapping allows the system to quickly retrieve or reconstruct cryptographic keys during subsequent operations without requiring real-time PUF measurement, ensuring key availability while maintaining security.
Solution Approach 2:
The patent introduces an intermediary calibration structure that mediates between the physical PUF layer and the cryptographic key layer. This calibration data structure stores the mapping between PUF challenges and expected responses, acting as a buffer that allows the system to handle PUF variability and reconstruct keys even when the physical PUF characteristics change slightly due to environmental factors or aging.
3Object-affected harmful factors
If hardware attacks are considered, then security against physical exploitation must be enhanced, but conventional systems remain vulnerable to such attacks
Solution Approach 1:
The system employs self-service mechanisms where the PUF circuit inherently provides security against hardware attacks through its physical unclonability. The unique physical characteristics of the PUF circuit (variations in transistor thresholds, interconnect delays) are exploited to generate unclonable cryptographic identifiers that cannot be replicated even with full physical access to the device, making the security mechanism self-sufficient without requiring additional protective hardware.
Data Source
Figure 1
Figure 2(A)
Figure 2(B)~2(C)
AI summary
Techniques for encrypting data using a key generated by a physical unclonable function (PUF) are described. An apparatus according to the present disclosure may include decoder circuitry to decode an instruction and generate a decoded instruction. The decoded instruction includes operands and an opcode. The opcode indicates that execution circuitry is to encrypt data using a key generated by a PUF. The apparatus may further include execution circuitry to execute the decoded instruction according to the opcode to encrypt the data to generate encrypted data using the key generated by the PUF.