面向物联网的轻量级AES及其在安全存储中的应用

Lightweight AES for Internet of Things and its Application in Secure Storage System

为解决物联网中安全SOC芯片资源和性能的平衡问题,提出了一种软硬件协同工作的可资源复用的轻量级AES(Advanced Encryption Standard)算法实现方式.该设计采用同步FIFO作为软硬件交互接口以实现软硬件协同工作的AES加解密算法,并改进密钥扩展算法,提高软件密钥扩展的安全性.AES模块硬件资源同时可供安全SOC芯片复用,对存储系统数据进行简单加密加扰,节省硬件资源.该设计面积约为2418个等效门,并为芯片安全存储系统中存储器读写模块节省约20%的面积,功能全面、安全性高,适合轻量级安全应用.

In order to achieve balance between area and performance of secure SOC in the Internet of things（IOT）,a lightweigt and resource-sharing implementation of Advanced Encryption Standard（AES）algorithm is proposed based on cooperation of software and hardware.This design exploits a synchronous FIFO as the interface between software and hardware to implement AES encryption and ecryption based on cooperation of software and hardware.The key-expansion algorithm is optimized so as to improve security.The hardware resources of the AES module can also be reused by the memory system for data encryption and decryption in the secure SOC,thus saving hardware resources.This design consumes about 2418 equivalent gates for hardware,and saves circuit resources by 20% for the memory reading and writing module of secure storage system,which has comprehensive functions and high security with tiny hardware area,and is suitable for lightweight secure SOC.