TARDIS: Time and remanence decay in SRAM to implement secure protocols on embedded devices without clocks

Proceedings of the 21st USENIX Security Symposium

Volumn , Issue , 2012, Pages 221-236

  Rahmati, Amir ^a   Salajegheh, Mastooreh ^a   Holcomb, Dan ^b   Sorber, Jacob ^c   Burleson, Wayne P ^a   Fu, Kevin ^a  

^a UNIVERSITY OF MASSACHUSETTS   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOCKS; CRYPTOGRAPHY; HISTORIC PRESERVATION; NETWORK SECURITY; REMANENCE; SMART CARDS;

BRUTE-FORCE ATTACK; CONTACTLESS CREDIT CARD; CONTACTLESS SMARTCARDS; CRYPTOGRAPHIC SOFTWARE; HARDWARE PARAMETERS; PRIVACY PRESERVING; SECURITY PROTOCOLS; SPECIAL PURPOSE HARDWARE;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 84871572206     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (56)

1. The TARDIS, British Broadcasting Channel. http://www.bbc.co.uk/doctorwho/characters/tardis.shtml, November 1963.
2. Hpc0402b/c - high performance, high precision wire-bondable 0402 capacitor for smartcard, high-frequency and substrate-embedded applications. http://www.vishay.com/docs/10120/hpc0402b.pdf, Dec. 2008.
3. An introduction to the architecture of Moo 1.0. https://spqr.cs.umass.edu/moo/Documents/Moo_01242011.pdf, May 2011.
4. ANDERSON, R., AND KUHN, M. Tamper resistance: a cautionary note. In Proceedings of the 2nd USENIX Workshop on Electronic Commerce (1996).
5. AVOINE, G. Personal communication on French passports. 2012.
6. AVOINE, G., KALACH, K., AND QUISQUATER, J.-J. ePassport: Securing international contacts with contactless chips. In Financial Cryptography and Data Security (2008), G. Tsudik, Ed., Springer-Verlag, pp. 141–155.
7. BONO, S., February 2012. Personal communication.
8. BONO, S. C., GREEN, M., STUBBLEFIELD, A., JUELS, A., RUBIN, A. D., AND SZYDLO, M. Security analysis of a cryptographically-enabled RFID device. In Proceedings of the 14th USENIX Security Symposium (2005).
9. BUETTNER, M., GREENSTEIN, B., WETHERALL, D., AND SMITH, J. R. Revisiting smart dust with RFID sensor networks, 2008.
10. CANTHERM. Thermal cut-offs. http://www.cantherm.com/products/thermal_fuses/sdf.html, 2011. Last Viewed May 14, 2012.
11. CHOTHIA, T., AND SMIRNOV, V. A traceability attack against e-Passports. In 14th International Conference on Financial Cryptography and Data Security (2010), Springer.
12. EPCGLOBAL. EPC Radio-Frequency Identity Protocols Class-1 Generation-2 UHF RFID Protocol for Communication at 860 MHZ–960 MHZ, Version 1.2.0.
13. FLAUTNER, K., KIM, N. S., MARTIN, S., BLAAUW, D., AND MUDGE, T. Drowsy caches: simple techniques for reducing leakage power. In Proc. 29th IEEE/ACM International Symposium on Computer Architecture (2002), pp. 148–157.
14. GANERIWAL, S., ČAPKUN, S., HAN, C.-C., AND SRIVASTAVA, M. B. Secure time synchronization service for sensor networks. In Proceedings of the 4th ACM Workshop on Wireless Security (2005), WiSe’05, pp. 97–106.
15. GARCIA, F. D., ROSSUM, P. V., VERDULT, R., AND SCHREUR, R. Wirelessly pickpocketing a MIFARE Classic card. In IEEE Symposium on Security and Privacy (May 2009), pp. 3–15.
16. GOLDBERG, I., AND BRICENCO, M. GSM cloning. http://www.isaac.cs.berkeley.edu/isaac/gsm-faq.html, 1999. Last Viewed February 19, 2012.
17. GUAJARDO, J., KUMAR, S., SCHRIJEN, G., AND TUYLS, P. FPGA intrinsic PUFs and their use for IP protection. In Cryptographic Hardware and Embedded Systems (CHES) (2007), pp. 86–80.
18. GUTMANN, P. Secure deletion of data from magnetic and solid-state memory. In Proceedings of the 6th USENIX Security Symposium (Jan 1996).
19. HALDERMAN, J., SCHOEN, S., HENINGER, N., CLARKSON, W., PAUL, W., CALANDRINO, J., FELDMAN, A., APPELBAUM, J., AND FELTEN, E. Lest we remember: Cold boot attacks on encryption keys. In Proceedings of the 17th USENIX Security Symposium (2008).
20. HALPERIN, D., HEYDT-BENJAMIN, T. S., RANSFORD, B., CLARK, S. S., DEFEND, B., MORGAN, W., FU, K., KOHNO, T., AND MAISEL, W. H. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In Proceedings of the 29th Annual IEEE Symposium on Security and Privacy (May 2008), pp. 129–142.
21. HEYDT-BENJAMIN, T. S., BAILEY, D. V., FU, K., JUELS, A., AND OHARE, T. Vulnerabilities in first-generation RFID-enabled credit cards. In Proceedings of Eleventh International Conference on Financial Cryptography and Data Security, Lecture Notes in Computer Science, Vol. 4886 (February 2007), pp. 2–14.
22. HO, H., SAEEDI, E., KIM, S., SHEN, T., AND PARVIZ, B. Contact lens with integrated inorganic semiconductor devices. In Micro Electro Mechanical Systems, 2008. MEMS 2008. IEEE 21st International Conference on (Jan. 2008), pp. 403–406.
23. HOLCOMB, D. E., BURLESON, W. P., AND FU, K. Power-up SRAM state as an identifying fingerprint and source of true random numbers. IEEE Transactions on Computers (2009).
24. JUELS, A. Minimalist cryptography for low-cost RFID tags (extended abstract). In Security in Communication Networks, C. Blundo and S. Cimato, Eds., vol. 3352 of Lecture Notes in Computer Science. Springer, 2005, pp. 149–164.
25. JUELS, A. RFID security and privacy: A research survey. IEEE Journal on Selected Areas in Communications 24, 2 (February 2006), 381–394.
26. LAMPORT, L. Time, clocks, and the ordering of events in a distributed system. Commun. ACM 21, 7 (1978), 558–565.
27. LEWIS, P. H. Of privacy and security: The clipper chip debate. The New York Times, April 24, 1994.
28. LIN, Y., SYLVESTER, D. M., AND BLAAUW, D. T. A sub-pW timer using gate leakage for ultra low-power sub-Hz monitoring systems. Custom Integrated Circuits Conference (2007).
29. MAO, W. Timed-release cryptography. In Selected Areas in Cryptography VIII (SAC’01 (2001), Prentice Hall, pp. 342–357.
30. MCGRAW, G. Silver bullet podcast: Interview with Ross Anderson. http://www.cigital.com/silver-bullet/show-070/. Show #70, January 31, 2012.
31. NXP Semiconductors MIFARE classic. http://www.nxp.com/products/identification_and_security/smart_card_ ics/mifare_smart_card_ics/mifare_classic/. Last Viewed February 18, 2012.
32. NXP Semiconductors SPI real time clock/calendar. http://www.nxp.com/documents/data_sheet/PCF2123.pdf. Last Viewed February 18, 2012.
33. OMEGA ENGINEERING, I. OSXL450 Infrared Non-Contact Thermometer Manual.
34. OREN, Y., AND SHAMIR, A. Remote password extraction from RFID tags. Computers, IEEE Transactions on 56, 9 (Sept. 2007), 1292–1296.
35. OSWALD, D., AND PAAR, C. Breaking MIFARE DESFire MF3ICD40: Power analysis and templates in the real world. In Cryptographic Hardware and Embedded Systems (CHES) (2011), pp. 207–222.
36. QIN, H., CAO, Y., MARKOVIC, D., VLADIMIRESCU, A., AND RABAEY, J. SRAM leakage suppression by minimizing standby supply voltage. In Proceedings of 5th International Symposium on Quality Electronic Design (2004), pp. 55–60.
37. RAJU, M. UltraLow Power RC Timer Implementation using MSP430. In Texas Instruments Application Report SLAA119 (2000).
38. RANSFORD, B., CLARK, S., SALAJEGHEH, M., AND FU, K. Getting things done on computational RFIDs with energy-aware checkpointing and voltage-aware scheduling. In USENIX Workshop on Power Aware Computing and Systems (HotPower’08) (Dec. 2008).
39. RIVEST, R. L., SHAMIR, A., AND WAGNER, D. A. Time-lock puzzles and timed-release crypto. Tech. rep., Cambridge, MA, USA, 1996.
40. ROUSSEAU, L. Secure time in a portable device. In Gemplus Developer Conference (2001).
41. SAMPLE, A. P., YEAGER, D. J., POWLEDGE, P. S., MAMISHEV, A. V., AND SMITH, J. R. Design of an RFID-based battery-free programmable sensing platform. IEEE Transactions on Instrumentation and Measurement 57, 11 (Nov. 2008), 2608–2615.
42. SAXENA, N., AND VORIS, J. We can remember it for you wholesale: Implications of data remanence on the use of RAM for true random number generation on RFID tags. In Proceedings of the Conference on RFID Security (2009).
43. SCHNEIER, B. Applied cryptography (2nd ed.): Protocols, algorithms, and source code in C. John Wiley & Sons, Inc., 1995.
44. SKOROBOGATOV, S. Low temperature data remanence in static RAM. Tech. Rep. UCAM-CL-TR-536, University of Cambridge Computer Laboratory, 2002.
45. STAJANO, F., AND ANDERSON, R. The resurrecting duckling: Security issues for ad-hoc wireless networks. In Security Protocols, B. Christianson, B. Crispo, J. Malcolm, and M. Roe, Eds., vol. 1796 of Lecture Notes in Computer Science. Springer, 2000, pp. 172–182.
46. SUN, K., NING, P., AND WANG, C. TinySeRSync: secure and resilient time synchronization in wireless sensor networks. In Proceedings of the 13th ACM Conference on Computer and Communications Security (2006), CCS’06, pp. 264–277.
47. SUN ELECTRONIC SYSTEMS, I. Model EC1X Environmental Chamber User and Repair Manual, 2011.
48. SWANSON, R., AND MEINDL, J. D. Ion-implanted complementary MOS transistors in low-voltage circuits. International Solid-State Circuits Conference (May 1972).
49. TESSIER, R., JASINSKI, D., MAHESHWARI, A., NATARAJAN, A., XU, W., AND BURLESON, W. An energy-aware active smart card. IEEE Transaction on Very Large Scale Integration (VLSI) Systems (2005).
50. TEXAS INSTRUMENTS INC. MSP430F21x1 Mixed Signal Microcontroller. In Texas Instruments Application Report SLAS439F (Sep. 2004, revised Aug. 2011).
51. THINGMAGIC INC. Mercury 4/ MERCURY 5 User Guide, February 2007.
52. TUAN, T., STRADER, T., AND TRIMBERGER, S. Analysis of data remanence in a 90nm FPGA. Custom Integrated Circuits Conference (2007).
53. VITTOZ, E. Low-power design: Ways to approach the limits. International Solid-State Circuits Conference (May 1994).
54. XU, X., GU, L., WANG, J., AND XING, G. Negotiate power and performance in the reality of RFID systems. In PerCom (2010), IEEE Computer Society, pp. 88–97.
55. YEAGER, D., ZHANG, F., ZARRASVAND, A., GEORGE, N., DANIEL, T., AND OTIS, B. A 9 µa, addressable Gen2 sensor tag for biosignal acquisition. IEEE Journal of Solid-State Circuits 45, 10 (Oct. 2010), 2198–2209.
56. ZHANG, H., GUMMESON, J., RANSFORD, B., AND FU, K. Moo: A batteryless computational RFID and sensing platform. Tech. Rep. UM-CS-2011-020, Department of Computer Science, University of Massachusetts Amherst, Amherst, MA, June 2011.