基于认证加密的NoC安全防护研究

NoC security reserch based on authenticated ancryption

片上网络的敏感信息在传输过程中可能会遭到窃取,针对这一安全威胁,提出了基于认证加密的No C安全防护技术。把执行同一应用、需要交换敏感信息的IP核划分在一个安全域内,安全域内的IP核用Diffie-Hellman协议协商密钥,密钥协商完成以后,用GCM认证加密算法对携带敏感信息的数据包进行加密和认证运算,从而有效保护数据包的机密性和完整性。仿真综合结果表明,该安全防护方案造成的传输延时小、资源消耗少,提高了No C的安全性和可靠性。

Sensitive information during transmission on NoC may be extracted.In order to solve this security threat,NoC security technology based on authentication encryption is proposed.IP cores that execute the same application and need to exchange sensi-tive information are divided into one security domain.IP cores in the security domain use Diffie-Hellman protocol to negotiate key.After the key agreement is completed,GCM authenticated encryption algorithm is used to encrypt and authenticate the packets car-rying sensitive information,so as to effectively protect the confidentiality and integrity of data packets.Simulation and synthesis re-sults show that the transmission delay caused by safety protection scheme is small,and resource consumption is low,improving the safety and reliability of the NoC.